fix(deps): update python (non-major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aiohttp	==3.11.14 -> ==3.12.7
certifi	==2025.1.31 -> ==2025.4.26
charset-normalizer (changelog)	==3.4.1 -> ==3.4.2
click (changelog)	==8.1.8 -> ==8.2.1
coverage	7.7.1 -> 7.8.2
exceptiongroup (changelog)	==1.2.2 -> ==1.3.0
frozenlist	==1.5.0 -> ==1.6.0
google-auth	==2.38.0 -> ==2.40.2
kopf	1.37.5 -> 1.38.0
kopf	==1.37.5 -> ==1.38.0
multidict	==6.2.0 -> ==6.4.4
mypy (changelog)	1.15.0 -> 1.16.0
propcache	==0.3.0 -> ==0.3.1
pyasn1-modules (changelog)	==0.4.1 -> ==0.4.2
pylint (changelog)	3.3.6 -> 3.3.7
pytest (changelog)	8.3.5 -> 8.4.0
rsa	==4.9 -> ==4.9.1
typing-extensions (changelog)	==4.12.2 -> ==4.14.0
urllib3 (changelog)	==2.3.0 -> ==2.4.0
yarl	==1.18.3 -> ==1.20.0

---

Release Notes

aio-libs/aiohttp (aiohttp)

v3.12.7: 3.12.7

Compare Source

Bug fixes

• Fixed cookie parsing to be more lenient when handling cookies with special characters
  in names or values. Cookies with characters like {, }, and / in names are now
  accepted instead of causing a :exc:~http.cookies.CookieError and 500 errors. Additionally,
  cookies with mismatched quotes in values are now parsed correctly, and quoted cookie
  values are now handled consistently whether or not they include special attributes
  like Domain. Also fixed :class:~aiohttp.CookieJar to ensure shared cookies (domain="", path="")
  respect the quote_cookie parameter, making cookie quoting behavior consistent for
  all cookies -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  #​2683, #​5397, #​7993, #​11112.

• Fixed an issue where cookies with duplicate names but different domains or paths
  were lost when updating the cookie jar. The :class:~aiohttp.ClientSession
  cookie jar now correctly stores all cookies even if they have the same name but
  different domain or path, following the :rfc:6265#section-5.3 storage model -- by :user:bdraco.

  Note that :attr:ClientResponse.cookies <aiohttp.ClientResponse.cookies> returns
  a :class:~http.cookies.SimpleCookie which uses the cookie name as a key, so
  only the last cookie with each name is accessible via this interface. All cookies
  can be accessed via :meth:ClientResponse.headers.getall('Set-Cookie') <multidict.MultiDictProxy.getall> if needed.

  Related issues and pull requests on GitHub:
  #​4486, #​11105, #​11106.

Miscellaneous internal changes

• Avoided creating closed futures in ResponseHandler that will never be awaited -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  #​11107.

• Downgraded the logging level for connector close errors from ERROR to DEBUG, as these are expected behavior with TLS 1.3 connections -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  #​11114.

---

v3.12.6

Compare Source

===================

Bug fixes

• Fixed spurious "Future exception was never retrieved" warnings for connection lost errors when the connector is not closed -- by :user:bdraco.

  When connections are lost, the exception is now marked as retrieved since it is always propagated through other means, preventing unnecessary warnings in logs.

  Related issues and pull requests on GitHub:
  :issue:11100.

---

v3.12.4

Compare Source

===================

Bug fixes

• Fixed connector not waiting for connections to close before returning from :meth:~aiohttp.BaseConnector.close (partial backport of :pr:3733) -- by :user:atemate and :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1925, :issue:11074.

---

v3.12.3

Compare Source

===================

Bug fixes

• Fixed memory leak in :py:meth:~aiohttp.CookieJar.filter_cookies that caused unbounded memory growth
  when making requests to different URL paths -- by :user:bdraco and :user:Cycloctane.

  Related issues and pull requests on GitHub:
  :issue:11052, :issue:11054.

---

v3.12.2

Compare Source

===================

Bug fixes

• Fixed Content-Length header not being set to 0 for non-GET requests with None body -- by :user:bdraco.

  Non-GET requests (POST, PUT, PATCH, DELETE) with None as the body now correctly set the Content-Length header to 0, matching the behavior of requests with empty bytes (b""). This regression was introduced in aiohttp 3.12.1.

  Related issues and pull requests on GitHub:
  :issue:11035.

---

v3.12.1

Compare Source

===================

Features

• Added support for reusable request bodies to enable retries, redirects, and digest authentication -- by :user:bdraco and :user:GLGDLY.

  Most payloads can now be safely reused multiple times, fixing long-standing issues where POST requests with form data or file uploads would fail on redirects with errors like "Form data has been processed already" or "I/O operation on closed file". This also enables digest authentication to work with request bodies and allows retry mechanisms to resend requests without consuming the payload. Note that payloads derived from async iterables may still not be reusable in some cases.

  Related issues and pull requests on GitHub:
  :issue:5530, :issue:5577, :issue:9201, :issue:11017.

---

v3.12.0

Compare Source

===================

Bug fixes

• Fixed :py:attr:~aiohttp.web.WebSocketResponse.prepared property to correctly reflect the prepared state, especially during timeout scenarios -- by :user:bdraco

  Related issues and pull requests on GitHub:
  :issue:6009, :issue:10988.

• Response is now always True, instead of using MutableMapping behaviour (False when map is empty)

  Related issues and pull requests on GitHub:
  :issue:10119.

• Fixed connection reuse for file-like data payloads by ensuring buffer
  truncation respects content-length boundaries and preventing premature
  connection closure race -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10325, :issue:10915, :issue:10941, :issue:10943.

• Fixed pytest plugin to not use deprecated :py:mod:asyncio policy APIs.

  Related issues and pull requests on GitHub:
  :issue:10851.

• Fixed :py:class:~aiohttp.resolver.AsyncResolver not using the loop argument in versions 3.x where it should still be supported -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10951.

Features

• Added a comprehensive HTTP Digest Authentication client middleware (DigestAuthMiddleware)
  that implements RFC 7616. The middleware supports all standard hash algorithms
  (MD5, SHA, SHA-256, SHA-512) with session variants, handles both 'auth' and
  'auth-int' quality of protection options, and automatically manages the
  authentication flow by intercepting 401 responses and retrying with proper
  credentials -- by :user:feus4177, :user:TimMenninger, and :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:2213, :issue:10725.

• Added client middleware support -- by :user:bdraco and :user:Dreamsorcerer.

  This change allows users to add middleware to the client session and requests, enabling features like
  authentication, logging, and request/response modification without modifying the core
  request logic. Additionally, the session attribute was added to ClientRequest,
  allowing middleware to access the session for making additional requests.

  Related issues and pull requests on GitHub:
  :issue:9732, :issue:10902, :issue:10945, :issue:10952, :issue:10959, :issue:10968.

• Allow user setting zlib compression backend -- by :user:TimMenninger

  This change allows the user to call :func:aiohttp.set_zlib_backend() with the
  zlib compression module of their choice. Default behavior continues to use
  the builtin zlib library.

  Related issues and pull requests on GitHub:
  :issue:9798.

• Added support for overriding the base URL with an absolute one in client sessions
  -- by :user:vivodi.

  Related issues and pull requests on GitHub:
  :issue:10074.

• Added host parameter to aiohttp_server fixture -- by :user:christianwbrock.

  Related issues and pull requests on GitHub:
  :issue:10120.

• Detect blocking calls in coroutines using BlockBuster -- by :user:cbornet.

  Related issues and pull requests on GitHub:
  :issue:10433.

• Added socket_factory to :py:class:aiohttp.TCPConnector to allow specifying custom socket options
  -- by :user:TimMenninger.

  Related issues and pull requests on GitHub:
  :issue:10474, :issue:10520, :issue:10961, :issue:10962.

• Started building armv7l manylinux wheels -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10797.

• Implemented shared DNS resolver management to fix excessive resolver object creation
  when using multiple client sessions. The new _DNSResolverManager singleton ensures
  only one DNSResolver object is created for default configurations, significantly
  reducing resource usage and improving performance for applications using multiple
  client sessions simultaneously -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10847, :issue:10923, :issue:10946.

• Upgraded to LLHTTP 9.3.0 -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:10972.

• Optimized small HTTP requests/responses by coalescing headers and body into a single TCP packet -- by :user:bdraco.

  This change enhances network efficiency by reducing the number of packets sent for small HTTP payloads, improving latency and reducing overhead. Most importantly, this fixes compatibility with memory-constrained IoT devices that can only perform a single read operation and expect HTTP requests in one packet. The optimization uses zero-copy writelines when coalescing data and works with both regular and chunked transfer encoding.

  When aiohttp uses client middleware to communicate with an aiohttp server, connection reuse is more likely to occur since complete responses arrive in a single packet for small payloads.

  This aligns aiohttp with other popular HTTP clients that already coalesce small requests.

  Related issues and pull requests on GitHub:
  :issue:10991.

Improved documentation

• Improved documentation for middleware by adding warnings and examples about
  request body stream consumption. The documentation now clearly explains that
  request body streams can only be read once and provides best practices for
  sharing parsed request data between middleware and handlers -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:2914.

Packaging updates and notes for downstreams

• Removed non SPDX-license description from setup.cfg -- by :user:devanshu-ziphq.

  Related issues and pull requests on GitHub:
  :issue:10662.

• Added support for building against system llhttp library -- by :user:mgorny.

  This change adds support for :envvar:AIOHTTP_USE_SYSTEM_DEPS environment variable that
  can be used to build aiohttp against the system install of the llhttp library rather
  than the vendored one.

  Related issues and pull requests on GitHub:
  :issue:10759.

• aiodns is now installed on Windows with speedups extra -- by :user:bdraco.

  As of aiodns 3.3.0, SelectorEventLoop is no longer required when using pycares 4.7.0 or later.

  Related issues and pull requests on GitHub:
  :issue:10823.

• Fixed compatibility issue with Cython 3.1.1 -- by :user:bdraco

  Related issues and pull requests on GitHub:
  :issue:10877.

Contributor-facing changes

• Sped up tests by disabling blockbuster fixture for test_static_file_huge and test_static_file_huge_cancel tests -- by :user:dikos1337.

  Related issues and pull requests on GitHub:
  :issue:9705, :issue:10761.

• Updated tests to avoid using deprecated :py:mod:asyncio policy APIs and
  make it compatible with Python 3.14.

  Related issues and pull requests on GitHub:
  :issue:10851.

• Added Winloop to test suite to support in the future -- by :user:Vizonex.

  Related issues and pull requests on GitHub:
  :issue:10922.

Miscellaneous internal changes

• Added support for the partitioned attribute in the set_cookie method.

  Related issues and pull requests on GitHub:
  :issue:9870.

• Setting :attr:aiohttp.web.StreamResponse.last_modified to an unsupported type will now raise :exc:TypeError instead of silently failing -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10146.

---

v3.11.18

Compare Source

====================

Bug fixes

• Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions -- by :user:lezgomatt.

  Related issues and pull requests on GitHub:
  :issue:7686.

• Fixed reading fragmented WebSocket messages when the payload was masked -- by :user:bdraco.

  The problem first appeared in 3.11.17

  Related issues and pull requests on GitHub:
  :issue:10764.

---

v3.11.17

Compare Source

====================

Miscellaneous internal changes

• Optimized web server performance when access logging is disabled by reducing time syscalls -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10713.

• Improved web server performance when connection can be reused -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10714.

• Improved performance of the WebSocket reader -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10740.

• Improved performance of the WebSocket reader with large messages -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10744.

---

v3.11.16

Compare Source

====================

Bug fixes

• Replaced deprecated asyncio.iscoroutinefunction with its counterpart from inspect
  -- by :user:layday.

  Related issues and pull requests on GitHub:
  :issue:10634.

• Fixed :class:multidict.CIMultiDict being mutated when passed to :class:aiohttp.web.Response -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10672.

---

v3.11.15

Compare Source

====================

Bug fixes

• Reverted explicitly closing sockets if an exception is raised during create_connection -- by :user:bdraco.

  This change originally appeared in aiohttp 3.11.13

  Related issues and pull requests on GitHub:
  :issue:10464, :issue:10617, :issue:10656.

Miscellaneous internal changes

• Improved performance of WebSocket buffer handling -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10601.

• Improved performance of serializing headers -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10625.

---

certifi/python-certifi (certifi)

v2025.4.26

Compare Source

jawah/charset_normalizer (charset-normalizer)

v3.4.2

Compare Source

Fixed

• Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#​591)
• Improved the overall reliability of the detector with CJK Ideographs. (#​605) (#​587)

Changed

• Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8

pallets/click (click)

v8.2.1

Compare Source

Released 2025-05-20

• Fix flag value handling for flag options with a provided type. :issue:2894
  :issue:2897 :pr:2930
• Fix shell completion for nested groups. :issue:2906 :pr:2907
• Flush sys.stderr at the end of CliRunner.invoke. :issue:2682
• Fix EOF handling for stdin input in CliRunner. :issue:2787

v8.2.0

Compare Source

Released 2025-05-10

• Drop support for Python 3.7, 3.8, and 3.9. :pr:2588 :pr:2893

• Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  :pr:2438

• Use flit_core instead of setuptools as build backend. :pr:2543

• Deprecate the __version__ attribute. Use feature detection, or
  importlib.metadata.version("click"), instead. :issue:2598

• BaseCommand is deprecated. Command is the base class for all
  commands. :issue:2589

• MultiCommand is deprecated. Group is the base class for all group
  commands. :issue:2590

• The current parser and related classes and methods, are deprecated.
  :issue:2205

  • OptionParser and the parser module, which is a modified copy of
    optparse in the standard library.
  • Context.protected_args is unneeded. Context.args contains any
    remaining arguments while parsing.
  • Parameter.add_to_parser (on both Argument and Option) is
    unneeded. Parsing works directly without building a separate parser.
  • split_arg_string is moved from parser to shell_completion.

• Enable deferred evaluation of annotations with
  from __future__ import annotations. :pr:2270

• When generating a command's name from a decorated function's name, the
  suffixes _command, _cmd, _group, and _grp are removed.
  :issue:2322

• Show the types.ParamType.name for types.Choice options within
  --help message if show_choices=False is specified.
  :issue:2356

• Do not display default values in prompts when Option.show_default is
  False. :pr:2509

• Add get_help_extra method on Option to fetch the generated extra
  items used in get_help_record to render help text. :issue:2516
  :pr:2517

• Keep stdout and stderr streams independent in CliRunner. Always
  collect stderr output and never raise an exception. Add a new
  output stream to simulate what the user sees in its terminal. Removes
  the mix_stderr parameter in CliRunner. :issue:2522 :pr:2523

• Option.show_envvar now also shows environment variable in error messages.
  :issue:2695 :pr:2696

• Context.close will be called on exit. This results in all
  Context.call_on_close callbacks and context managers added via
  Context.with_resource to be closed on exit as well. :pr:2680

• Add ProgressBar(hidden: bool) to allow hiding the progressbar. :issue:2609

• A UserWarning will be shown when multiple parameters attempt to use the
  same name. :issue:2396

• When using Option.envvar with Option.flag_value, the flag_value
  will always be used instead of the value of the environment variable.
  :issue:2746 :pr:2788

• Add Choice.get_invalid_choice_message method for customizing the
  invalid choice message. :issue:2621 :pr:2622

• If help is shown because no_args_is_help is enabled (defaults to True
  for groups, False for commands), the exit code is 2 instead of 0.
  :issue:1489 :pr:1489

• Contexts created during shell completion are closed properly, fixing
  a ResourceWarning when using click.File. :issue:2644 :pr:2800
  :pr:2767

• click.edit(filename) now supports passing an iterable of filenames in
  case the editor supports editing multiple files at once. Its return type
  is now also typed: AnyStr if text is passed, otherwise None.
  :issue:2067 :pr:2068

• Specialized typing of progressbar(length=...) as ProgressBar[int].
  :pr:2630

• Improve echo_via_pager behaviour in face of errors.
  :issue:2674

  • Terminate the pager in case a generator passed to echo_via_pager
    raises an exception.
  • Ensure to always close the pipe to the pager process and wait for it
    to terminate.
  • echo_via_pager will not ignore KeyboardInterrupt anymore. This
    allows the user to search for future output of the generator when
    using less and then aborting the program using ctrl-c.

• deprecated: bool | str can now be used on options and arguments. This
  previously was only available for Command. The message can now also be
  customised by using a str instead of a bool. :issue:2263 :pr:2271

  • Command.deprecated formatting in --help changed from
    (Deprecated) help to help (DEPRECATED).
  • Parameters cannot be required nor prompted or an error is raised.
  • A warning will be printed when something deprecated is used.

• Add a catch_exceptions parameter to CliRunner. If
  catch_exceptions is not passed to CliRunner.invoke, the value
  from CliRunner is used. :issue:2817 :pr:2818

• Option.flag_value will no longer have a default value set based on
  Option.default if Option.is_flag is False. This results in
  Option.default not needing to implement __bool__. :pr:2829

• Incorrect click.edit typing has been corrected. :pr:2804

• Choice is now generic and supports any iterable value.
  This allows you to use enums and other non-str values. :pr:2796
  :issue:605

• Fix setup of help option's defaults when using a custom class on its
  decorator. Removes HelpOption. :issue:2832 :pr:2840

nedbat/coveragepy (coverage)

v7.8.2

Compare Source

• Wheels are provided for Windows ARM64 on Python 3.11, 3.12, and 3.13.
  Thanks, Finn Womack <pull 1972_>_.

.. _issue 1971:https://github.com/nedbat/coveragepy/pull/19711
.. _pull 1972https://github.com/nedbat/coveragepy/pull/197272

.. _changes_7-8-1:

v7.8.1

Compare Source

• A number of EncodingWarnings were fixed that could appear if you've enabled
  PYTHONWARNDEFAULTENCODING, fixing issue 1966. Thanks, Henry Schreiner <pull 1967_>.

• Fixed a race condition when using sys.monitoring with free-threading Python,
  closing issue 1970_.

.. _issue 1966:https://github.com/nedbat/coveragepy/issues/19666
.. _pull 1967https://github.com/nedbat/coveragepy/pull/196767
.. _issue 197https://github.com/nedbat/coveragepy/issues/1970970

.. _changes_7-8-0:

v7.8.0

Compare Source

• Added a new source_dirs setting for symmetry with the existing
  source_pkgs setting. It's preferable to the existing source setting,
  because you'll get a clear error when directories don't exist. Fixes issue 1942. Thanks, Jeremy Fleischman <pull 1943_>.

• Fix: the PYTHONSAFEPATH environment variable new in Python 3.11 is properly
  supported, closing issue 1696. Thanks, Philipp A. <pull 1700_>. This
  works properly except for a detail when using the coverage command on
  Windows. There you can use python -m coverage instead if you need exact
  emulation.

.. _issue 1696:https://github.com/nedbat/coveragepy/issues/16966
.. _pull 1700https://github.com/nedbat/coveragepy/pull/170000
.. _issue 194https://github.com/nedbat/coveragepy/issues/1942942
.. _pull 19https://github.com/nedbat/coveragepy/pull/19431943

.. _changes_7-7-1:

agronholm/exceptiongroup (exceptiongroup)

v1.3.0

Compare Source

• Added **kwargs to function and method signatures as appropriate to match the signatures in the standard library
• In line with the stdlib typings in typeshed, updated (Base)ExceptionGroup generic types to define defaults for their generic arguments (defaulting to BaseExceptionGroup[BaseException] and ExceptionGroup[Exception]) (PR by @​mikenerone)
• Changed BaseExceptionGroup.__init__() to directly call BaseException.__init__() instead of the superclass __init__() in order to emulate the CPython behavior (broken or not) (PR by @​cfbolz)
• Changed the exceptions attribute to always return the same tuple of exceptions, created from the original exceptions sequence passed to BaseExceptionGroup to match CPython behavior (#​143)

aio-libs/frozenlist (frozenlist)

v1.6.0

Compare Source

======

(2025-04-17)

Bug fixes

• Stopped implicitly allowing the use of Cython pre-release versions when
  building the distribution package -- by :user:ajsanchezsanz and
  :user:markgreene74.

  Related commits on GitHub:
  :commit:41591f2.

Features

• Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:618.

• Started building armv7l wheels -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:642.

Packaging updates and notes for downstreams

• Stopped implicitly allowing the use of Cython pre-release versions when
  building the distribution package -- by :user:ajsanchezsanz and
  :user:markgreene74.

  Related commits on GitHub:
  :commit:41591f2.

• Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:618.

• The packaging metadata switched to including an SPDX license identifier introduced in :pep:639 -- by :user:cdce8p.

  Related issues and pull requests on GitHub:
  :issue:639.

Contributor-facing changes

• GitHub Actions CI/CD is now configured to manage caching pip-ecosystem
  dependencies using re-actors/cache-python-deps_ -- an action by
  :user:webknjaz that takes into account ABI stability and the exact
  version of Python runtime.

  .. _re-actors/cache-python-deps:
  https://github.com/marketplace/actions/cache-python-deps

  Related issues and pull requests on GitHub:
  :issue:633.

• Organized dependencies into test and lint dependencies so that no
  unnecessary ones are installed during CI runs -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:636.

---

googleapis/google-auth-library-python (google-auth)

v2.40.2

Compare Source

Bug Fixes

• Remove sync response logs in AuthorizedSession (97ed1c8)
• Update test to consider new error message from cryptography (#​1765) (44e38b6)

v2.40.1

Compare Source

Bug Fixes

• Disable logging response body for async logs (#​1756) (2f0ddfe)

v2.40.0

Compare Source

Features

• Add request response logging to auth (#​1678) (77ad53e)

Bug Fixes

• Correct webauthn JSON parsing to be compliant with standard. (#​1658) (0c5ef36)

v2.39.0

Compare Source

Features

• Adds GA support for X.509 workload identity federation (#​1695) (7495960)

Bug Fixes

• Add impersonated SA via local ADC support for fetch_id_token (#​1740) (f249764)
• Add missing packaging dependency for feature requiring urllib3 (#​1732) (221f4a8)
• Add request timeout for MDS requests (#​1699) (9f7d3fa)
• Explicitly declare support for Python 3.13 (#​1741) (6fd04d5)

nolar/kopf (kopf)

v1.38.0

Compare Source

What's Changed

• Deprecate Python 3.8 & upgrade to Python 3.13 in CI by @​nolar in https://github.com/nolar/kopf/pull/1164
• Upgrade MyPy to 1.15.0 by @​nolar in https://github.com/nolar/kopf/pull/1163
• Convert to Python 3.9: all the basic syntax as per pyuprade by @​nolar in https://github.com/nolar/kopf/pull/1165
• Fix the test failures in Python 3.13 due to not accepting name=… in tests by @​nolar in https://github.com/nolar/kopf/pull/1173
• Work around changes in Click 8.2.0 by @​nolar in https://github.com/nolar/kopf/pull/1174

Bugfixes

• Re-authenticate if the session is closed by a concurrent request by @​nolar in https://github.com/nolar/kopf/pull/1031

Full Changelog: nolar/kopf@1.37.5...1.38.0

aio-libs/multidict (multidict)

v6.4.4

Compare Source

=====

(2025-05-19)

Bug fixes

• Fixed a segmentation fault when calling :py:meth:multidict.MultiDict.setdefault with a single argument -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1160.

• Fixed a segmentation fault when attempting to directly instantiate view objects
  (multidict._ItemsView, multidict._KeysView, multidict._ValuesView) -- by :user:bdraco.

  View objects now raise a proper :exc:TypeError with the message "cannot create '...' instances directly"
  when direct instantiation is attempted.

  View objects should only be created through the proper methods: :py:meth:multidict.MultiDict.items,
  :py:meth:multidict.MultiDict.keys, and :py:meth:multidict.MultiDict.values.

  Related issues and pull requests on GitHub:
  :issue:1164.

Miscellaneous internal changes

• :class:multidict.MultiDictProxy was refactored to rely only on
  :class:multidict.MultiDict public interface and don't touch any implementation
  details.

  Related issues and pull requests on GitHub:
  :issue:1150.

• Multidict views were refactored to rely only on
  :class:multidict.MultiDict API and don't touch any implementation
  details.

  Related issues and pull requests on GitHub:
  :issue:1152.

• Dropped internal _Impl class from pure Python implementation, both pure Python and C
  Extension follows the same design internally now.

  Related issues and pull requests on GitHub:
  :issue:1153.

---

v6.4.3

Compare Source

=====

(2025-04-10)

Bug fixes

• Fixed building the library in debug mode.

  Related issues and pull requests on GitHub:
  :issue:1144.

• Fixed custom PyType_GetModuleByDef() when non-heap type object was passed.

  Related issues and pull requests on GitHub:
  :issue:1147.

Packaging updates and notes for downstreams

• Added the ability to build in debug mode by setting :envvar:MULTIDICT_DEBUG_BUILD in the environment -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1145.

---

v6.4.2

Compare Source

=====

(2025-04-09)

Bug fixes

• Fixed a segmentation fault when creating subclassed :py:class:~multidict.MultiDict objects on Python < 3.11 -- by :user:bdraco.

  The problem first appeared in 6.4.0

  Related issues and pull requests on GitHub:
  :issue:1141.

---

v6.4.1

Compare Source

=====

(2025-04-09)

No significant changes.

---

v6.4.0

Compare Source

=====

(2025-04-09)

Bug fixes

• Fixed a memory leak creating new :class:~multidict.istr objects -- by :user:bdraco.

  The leak was introduced in 6.3.0

  Related issues and pull requests on GitHub:
  :issue:1133.

• Fixed reference counting when calling :py:meth:multidict.MultiDict.update -- by :user:bdraco.

  The leak was introduced in 4.4.0

  Related issues and pull requests on GitHub:
  :issue:1135.

Features

• Switched C Extension to use heap types and the module state.

  Related issues and pull requests on GitHub:
  :issue:1125.

• Started building armv7l wheels -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1127.

---

v6.3.2

Compare Source

=====

(2025-04-03)

Bug fixes

• Resolved a memory leak by ensuring proper reference count decrementation -- by :user:asvetlov and :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1121.

---

v6.3.1

Compare Source

=====

(2025-04-01)

Bug fixes

• Fixed keys not becoming case-insensitive when :class:multidict.CIMultiDict is created by passing in a :class:multidict.MultiDict -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1112.

• Fixed the pure Python version mutating the original :class:multidict.MultiDict when creating a new :class:multidict.CIMultiDict from an existing one when keyword arguments are also passed -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1113.

• Prevented crashing with a segfault when :func:repr is called for recursive multidicts and their proxies and views.

  Related issues and pull requests on GitHub:
  :issue:1115.

---

v6.3.0

Compare Source

=====

(2025-03-31)

Bug fixes

• Set operations for KeysView and ItemsView of case-insensitive multidicts and their proxies are processed in case-insensitive manner.

  Related issues and pull requests on GitHub:
  :issue:965.

• Rewrote :class:multidict.CIMultiDict and it proxy to always return
  :class:multidict.istr keys. istr is derived from :class:str,
  thus the change is backward compatible.

  The performance boost is about 15% for some operations for C Extension,
  pure Python implementation have got a visible (15% - 230%) speedup as well.

  Related issues and pull requests on GitHub:
  :issue:1097.

• Fixed a crash when extending a multidict from multidict proxy if C Extensions were used.

  Related issues and pull requests on GitHub:
  :issue:1100.

Features

• Implemented a custom parser for METH_FASTCALL | METH_KEYWORDS protocol
  -- by :user:asvetlov.

  The patch re-enables fast call protocol in the :py:mod:multidict C Extension.

  Speedup is about 25%-30% for the library benchmarks for Python 3.12+.

  Related issues and pull requests on GitHub:
  :issue:1070.

• The C-extension no longer pre-allocates a Python exception object in
  lookup-related methods of :py:class:~multidict.MultiDict when the
  passed-in key is not found but default value is provided.

  Namely, this affects :py:meth:MultiDict.getone() <multidict.MultiDict.getone>, :py:meth:MultiDict.getall() <multidict.MultiDict.getall>, :py:meth:MultiDict.get() <multidict.MultiDict.get>, :py:meth:MultiDict.pop() <multidict.MultiDict.pop>, :py:meth:MultiDict.popone() <multidict.MultiDict.popone>, and :py:meth:MultiDict.popall() <multidict.MultiDict.popall>.

  Additionally, the :py:class:~multidict.MultiDict comparison with
  regular :py:class:dict\ ionaries is now about 60% faster
  on Python 3.13+ in the fallback-to-default case.

  Related issues and pull requests on GitHub:
  :issue:1078.

• Implemented __repr__() for C Extension classes in C.

  The speedup is about 2.5 times.

  Related issues and pull requests on GitHub:
  :issue:1081.

• Made C version of :class:multidict.istr pickleable.

  Related issues and pull requests on GitHub:
  :issue:1098.

• Optimized multidict creation and extending / updating if C Extensions are used.

  The speedup is between 25% and 70% depending on the usage scenario.

  Related issues and pull requests on GitHub:
  :issue:1101.

• :meth:multidict.MultiDict.popitem is changed to remove
  the latest entry instead of the first.

  It gives O(1) amortized complexity.

  The standard :meth:dict.popitem removes the last entry also.

  Related issues and pull requests on GitHub:
  :issue:1105.

Contributor-facing changes

• Started running benchmarks for the pure Python implementation in addition to the C implementation -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1092.

• The the project-wide Codecov_ metric is no longer reported
  via GitHub Checks API. The combined value is not very useful
  because one of the sources (M

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.