deps(deps): bump the python-dependencies group with 5 updates

[dependabot]

Bumps the python-dependencies group with 5 updates:

Package	From	To
soupsieve	2.9	2.9.1
certifi	2026.6.17	2026.7.22
fastapi	0.139.2	0.140.1
apsw	3.53.3.1	3.53.4.0
pre-commit	4.6.0	4.6.1

Updates soupsieve from 2.9 to 2.9.1

Release notes

Sourced from soupsieve's releases.

2.9.1

• FIX: Correct [attr^=""], [attr$=""], and [attr*=""] to match nothing when the value is empty, per CSS Selectors Level 4 substring matching, which previously matched any element merely having the attribute (@​chuenchen309).

Commits

• 05e92be Update changelog and bump version
• 9bd73eb Clean up comments and use a (?!) for unmatchable regex
• 8c5ceee Match nothing for empty-value substring attribute selectors (#298)
• See full diff in compare view

Updates certifi from 2026.6.17 to 2026.7.22

Commits

• f4bc676 2026.07.22 (#428)
• 4c91f9c Bump actions/setup-python from 6.3.0 to 7.0.0 (#427)
• 01a66c5 Bump actions/checkout from 7.0.0 to 7.0.1 (#426)
• eb355f4 Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#425)
• 474e6fc Include tests in the source distribution (#424)
• a31ef39 Bump actions/setup-python from 6.2.0 to 6.3.0 (#420)
• 98eb2c7 Bump actions/checkout from 6.0.3 to 7.0.0 (#419)
• See full diff in compare view

Updates fastapi from 0.139.2 to 0.140.1

Release notes

Sourced from fastapi's releases.

0.140.1

Refactors

• ♻️ Update the lru_cache limit for dependencies to account for large apps. PR #16062 by @​tiangolo.

0.140.0

Refactors

• ⚡️ Reduce memory usage in dependencies. PR #16049 by @​tiangolo.

Docs

• 📝 Fix links in docs. PR #15967 by @​YuriiMotov.
• 📝 Add Library Skills documentation. PR #16041 by @​tiangolo.
• 📝 Update docs to use uv projects by default. PR #16032 by @​tiangolo.
• 📝 Restructure FastAPI People and related pages. PR #16015 by @​tiangolo.

Internal

• 👷 Add CI memory benchmark. PR #16046 by @​tiangolo.
• 👥 Update FastAPI People - Sponsors. PR #16027 by @​tiangolo.
• 🔥 Remove now-obsolete scripts to generate data for FastAPI People. PR #16016 by @​tiangolo.

Commits

• 3e310c9 🔖 Release version 0.140.1 (#16063)
• 43eafc6 📝 Update release notes
• 65ef53a ♻️ Update the lru_cache limit for dependencies to account for large apps (#16...
• 255b912 🔖 Release version 0.140.0 (#16050)
• 892eacd 📝 Update release notes
• 0270829 ⚡️ Reduce memory usage in dependencies (#16049)
• ae031be 📝 Update release notes
• f3644b3 📝 Fix links in docs (#15967)
• 1e24ca0 📝 Update release notes
• 513c396 👷 Add CI memory benchmark (#16046)
• Additional commits viewable in compare view

Updates apsw from 3.53.3.1 to 3.53.4.0

Release notes

Sourced from apsw's releases.

3.53.4.0

• Source
• Install
• Changelogs
• Documentation

Blob implements io.RawIOBase allowing use by other modules expecting file like objects, such as compression. Several methods and attributes are added, and Blob.write() now returns the size written (used to be None). (APSW issue 623)

Changelog

Sourced from apsw's changelog.

3.53.4.0

:class:Blob implements :class:io.RawIOBase allowing use by other modules expecting file like objects, such as compression. Several methods and attributes are added, and :meth:Blob.write now returns the size written (used to be None). (:issue:623)

Commits

• 09b6a89 Skip pyodide for io.UnsupportedOperation
• 5acb56e Work around pyodide bug
• d8b1029 Release bump
• f2830da Ensure dependencies present
• 56067fe Handle _Py(Tuple|Bytes)_Resize correctly
• 4df3ced Avoid copying zero bytes from NULL pointer
• 94d4f77 Coverage
• 9820619 Make mutex cover whole blob operation
• 75b7c68 Check mutex on all connections
• 1a0a58f SQLite release bump
• Additional commits viewable in compare view

Updates pre-commit from 4.6.0 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

• Install language: node hooks via git.
  • Fixes npm 12.x compatibility
  • #3719 PR by @​asottile.
  • #3517 issue by @​ojob.
• Set JULIA_DEPOT_PATH for language: julia.
  • #3711 PR by @​damonbayer.
  • pre-commit-ci/runner-image#335 issue by @​damonbayer.
• Produce error on mistyped --repo for pre-commit autoupdate.
  • #3701 PR by @​mxr.
  • #3695 issue by @​mxr.
• Improve performance of commit existence check in pre-push.
  • #3726 PR by @​asottile.
  • #3604 issue by @​ptarjan.
• Avoid duplicating conflicted filenames during pre-commit run --all-files.
  • #3727 PR by @​asottile.
  • #3706 issue by @​RomanValov.

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

• Install language: node hooks via git.
  • Fixes npm 12.x compatibility
  • #3719 PR by @​asottile.
  • #3517 issue by @​ojob.
• Set JULIA_DEPOT_PATH for language: julia.
  • #3711 PR by @​damonbayer.
  • pre-commit-ci/runner-image#335 issue by @​damonbayer.
• Produce error on mistyped --repo for pre-commit autoupdate.
  • #3701 PR by @​mxr.
  • #3695 issue by @​mxr.
• Improve performance of commit existence check in pre-push.
  • #3726 PR by @​asottile.
  • #3604 issue by @​ptarjan.
• Avoid duplicating conflicted filenames during pre-commit run --all-files.
  • #3727 PR by @​asottile.
  • #3706 issue by @​RomanValov.

Commits

• 242ce8a v4.6.1
• 766e550 Merge pull request #3727 from pre-commit/dedupe
• 1558d06 Merge pull request #3726 from pre-commit/exists-faster
• 8a1c47a avoid duplicate files in --all-files during conflict
• 2e01c99 faster check of rev existing locally as a commit
• 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
• 1d811d9 Return an error for invalid --repo
• 374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
• 1e7994f set JULIA_DEPOT_PATH
• b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

🤖 Auto-merged

This Dependabot PR has been automatically merged because all branch-protection required checks passed.

Version handling:

• Dependency update: version bumped from 3.8.9 to 3.8.10

Decision:

• PR version is behind or equal to base