Skip to content

Bump the all group with 17 updates - #630

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/all-2bec18b101
Aug 24, 2026
Merged

Bump the all group with 17 updates#630
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/all-2bec18b101

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 17 updates:

Package From To
python-dotenv 1.2.2 1.2.3
mypy 2.3.0 2.3.1
aiohttp 3.9.1 3.14.3
aiosignal 1.3.1 1.4.0
async-timeout 4.0.3 5.0.1
attrs 25.4.0 26.1.0
charset-normalizer 3.4.7 3.5.1
frozenlist 1.4.0 1.8.0
hikari 2.5.0 2.6.0
idna 3.15 3.19
multidict 6.0.4 6.7.1
yarl 1.9.4 1.24.5
fastjsonschema 2.22.1 2.22.2
nbformat 5.11.0 5.11.1
pygments 2.20.0 2.21.0
pyzmq 27.1.0 27.2.0
webencodings 0.5.1 0.6.1

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

Updates aiohttp from 3.9.1 to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

  • Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

    Related issues and pull requests on GitHub: :issue:13180.

  • Fixed error message construction in the C HTTP parser -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:13222.

3.14.2 (2026-07-20)

Bug fixes

  • Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

    Related issues and pull requests on GitHub: :issue:5303.

  • Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

    Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

Updates aiosignal from 1.3.1 to 1.4.0

Release notes

Sourced from aiosignal's releases.

1.4.0

Features

  • Added decorator functionality to Signal as a convenient way to add a callback -- by @Vizonex. [#699](https://github.com/aio-libs/aiosignal/issues/699) <https://github.com/aio-libs/aiosignal/pulls/699>_

  • Improved type safety by allowing callback parameters to be type checked (typing-extensions is now required for Python <3.13). Parameters for a Signal callback should now be defined like Signal[int, str] -- by @​Vizonex and @​Dreamsorcerer. [#699](https://github.com/aio-libs/aiosignal/issues/699) <https://github.com/aio-libs/aiosignal/pulls/699>, [#710](https://github.com/aio-libs/aiosignal/issues/710) <https://github.com/aio-libs/aiosignal/pulls/710>

Misc

  • Removed the sphinxcontrib-asyncio documentation dependency. [#528](https://github.com/aio-libs/aiosignal/issues/528) <https://github.com/aio-libs/aiosignal/pull/528>_

1.3.2

Deprecations and Removals

  • Dropped Python 3.7 support. (#413)

  • Dropped Python 3.8 support. (#645)

Misc

Changelog

Sourced from aiosignal's changelog.

1.4.0 (2025-07-03)

Features

  • Added decorator functionality to Signal as a convenient way to add a callback -- by @Vizonex. [#699](https://github.com/aio-libs/aiosignal/issues/699) <https://github.com/aio-libs/aiosignal/pulls/699>_

  • Improved type safety by allowing callback parameters to be type checked (typing-extensions is now required for Python <3.13). Parameters for a Signal callback should now be defined like Signal[int, str] -- by @​Vizonex and @​Dreamsorcerer. [#699](https://github.com/aio-libs/aiosignal/issues/699) <https://github.com/aio-libs/aiosignal/pulls/699>, [#710](https://github.com/aio-libs/aiosignal/issues/710) <https://github.com/aio-libs/aiosignal/pulls/710>

Misc

  • Removed the sphinxcontrib-asyncio documentation dependency. [#528](https://github.com/aio-libs/aiosignal/issues/528) <https://github.com/aio-libs/aiosignal/pull/528>_

1.3.2 (2024-12-13)

Deprecations and Removals

  • Dropped Python 3.7 support. [#413](https://github.com/aio-libs/aiosignal/issues/413) <https://github.com/aio-libs/aiosignal/issues/413>_

  • Dropped Python 3.8 support. [#645](https://github.com/aio-libs/aiosignal/issues/645) <https://github.com/aio-libs/aiosignal/issues/645>_

Misc

  • [#362](https://github.com/aio-libs/aiosignal/issues/362) <https://github.com/aio-libs/aiosignal/issues/362>_
Commits
  • 1cf8014 Fix deploy
  • 892494c Release v1.4 (#718)
  • fa36082 [pre-commit.ci] pre-commit autoupdate (#719)
  • b7f68f1 [pre-commit.ci] pre-commit autoupdate (#717)
  • 2b1acac Build(deps): Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#716)
  • 17456ed Build(deps): Bump tox from 4.26.0 to 4.27.0 (#715)
  • 4c23690 Build(deps): Bump pytest from 8.4.0 to 8.4.1 (#714)
  • 7be2f68 Build(deps): Bump mypy from 1.16.0 to 1.16.1 (#713)
  • 5d62945 Build(deps): Bump coverage from 7.9.0 to 7.9.1 (#712)
  • a6d85c1 Build(deps): Bump dependabot/fetch-metadata from 2.3.0 to 2.4.0 (#694)
  • Additional commits viewable in compare view

Updates async-timeout from 4.0.3 to 5.0.1

Release notes

Sourced from async-timeout's releases.

5.0.1

Misc

  • [#423](https://github.com/aio-libs/async-timeout/issues/423) <https://github.com/aio-libs/async-timeout/issues/423>_

5.0.0

Features

  • Make asyncio_timeout fully compatible with the standard asyncio.Timeout but keep backward compatibility with existing asyncio_timeout.Timeout API. ([#422](https://github.com/aio-libs/async-timeout/issues/422) <https://github.com/aio-libs/async-timeout/issues/422>_)

Improved Documentation

  • On the CHANGES/README.rst <https://github.com/aio-libs/async-timeout/tree/master/CHANGES/README.rst>_ page, a link to the Towncrier philosophy has been fixed. ([#388](https://github.com/aio-libs/async-timeout/issues/388) <https://github.com/aio-libs/async-timeout/issues/388>_)

Deprecations and Removals

  • Drop deprecated sync context manager support, use async with timeout(...): ... instead. ([#421](https://github.com/aio-libs/async-timeout/issues/421) <https://github.com/aio-libs/async-timeout/issues/421>_)
Changelog

Sourced from async-timeout's changelog.

5.0.1 (2024-11-06)

Misc

  • [#423](https://github.com/aio-libs/async-timeout/issues/423) <https://github.com/aio-libs/async-timeout/issues/423>_

5.0.0 (2024-10-31)

Features

  • Make asyncio_timeout fully compatible with the standard asyncio.Timeout but keep backward compatibility with existing asyncio_timeout.Timeout API. ([#422](https://github.com/aio-libs/async-timeout/issues/422) <https://github.com/aio-libs/async-timeout/issues/422>_)

Improved Documentation

  • On the CHANGES/README.rst <https://github.com/aio-libs/async-timeout/tree/master/CHANGES/README.rst>_ page, a link to the Towncrier philosophy has been fixed. ([#388](https://github.com/aio-libs/async-timeout/issues/388) <https://github.com/aio-libs/async-timeout/issues/388>_)

Deprecations and Removals

  • Drop deprecated sync context manager support, use async with timeout(...): ... instead. ([#421](https://github.com/aio-libs/async-timeout/issues/421) <https://github.com/aio-libs/async-timeout/issues/421>_)
Commits

Updates attrs from 25.4.0 to 26.1.0

Release notes

Sourced from attrs's releases.

26.1.0

Highlights

The main outward change here only affects people using field transformers, but it should be a nice quality of life improvement!

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Kraken Tech (@kraken-tech), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Ecosystems (@ecosyste-ms), TestMu AI Open Source Office (Formerly LambdaTest) (@LambdaTest-Inc), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Full Changelog

Backwards-incompatible Changes

  • Field aliases are now resolved before calling field_transformer, so transformers receive fully populated Attribute objects with usable alias values instead of None. The new Attribute.alias_is_default flag indicates whether the alias was auto-generated (True) or explicitly set by the user (False). #1509

Changes

  • Fix type annotations for attrs.validators.optional(), so it no longer rejects tuples with more than one validator. #1496
  • The attrs.validators.disabled() contextmanager can now be nested. #1513
  • Frozen classes can set on_setattr=attrs.setters.NO_OP in addition to None. #1515
  • It's now possible to pass attrs instances in addition to attrs classes to attrs.fields(). #1529

This release contains contributions from @​bysiber, @​DavidCEllis, @​finite-state-machine, @​hynek, @​veeceey, and @​vstinner.

Artifact Attestations

You can verify this release's artifact attestions using GitHub's CLI tool by downloading the sdist and wheel from PyPI and running:

$ gh attestation verify --owner python-attrs attrs-26.1.0.tar.gz

... (truncated)

Changelog

Sourced from attrs's changelog.

26.1.0 - 2026-03-19

Backwards-incompatible Changes

  • Field aliases are now resolved before calling field_transformer, so transformers receive fully populated Attribute objects with usable alias values instead of None. The new Attribute.alias_is_default flag indicates whether the alias was auto-generated (True) or explicitly set by the user (False). #1509

Changes

  • Fix type annotations for attrs.validators.optional(), so it no longer rejects tuples with more than one validator. #1496
  • The attrs.validators.disabled() contextmanager can now be nested. #1513
  • Frozen classes can set on_setattr=attrs.setters.NO_OP in addition to None. #1515
  • It's now possible to pass attrs instances in addition to attrs classes to attrs.fields(). #1529
Commits
  • 7bfc49e Prepare 26.1.0
  • 31e0286 Update test_validators.py for Python 3.15a7 (#1530)
  • 48b8611 Add instance support to attrs.fields() (#1529)
  • 3a68d49 dev: document missing git tags failure mode
  • a572c3a Allow field(on_setattr=NO_OP) on frozen classes
  • af9c510 Fix validators.disabled() to save/restore state on nesting (#1513)
  • ab7f8b2 update dev
  • ce89f5d Fix message passing in frozen errors
  • eccd966 Fix optional validator to accept tuples of len > 1 (#1496)
  • e92fe52 policies: tighten screws (#1528)
  • Additional commits viewable in compare view

Updates charset-normalizer from 3.4.7 to 3.5.1

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.1

3.5.1 (2026-08-15)

Changed

  • Raised upper bound of setuptools to v84 (#794)
  • Cache performance access optimization for our CharInfo struct (prebuilt only).

Fixed

  • No longer decoding large content when the noise detector output give a high entropy. Only impacted large content input >1M bytes.

Version 3.5.0

3.5.0 (2026-08-12)

Added

  • Explicit support for Python 3.15

Fixed

  • Comparing a CharsetMatch to a non-alias encoding strings (#773)
  • Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
  • A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.
  • iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

  • Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.
  • Applied micro-optimization on several utils.
  • CharsetMatches no longer sort on each match insertion.

Misc

  • Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).

Version 3.4.9

3.4.9 (2026-07-07)

Fixed

  • Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

Version 3.4.8

3.4.8 (2026-07-06)

Fixed

... (truncated)

Changelog

Sourced from charset-normalizer's changelog.

3.5.1 (2026-08-15)

Changed

  • Raised upper bound of setuptools to v84 (#794)
  • Cache performance access optimization for our CharInfo struct (prebuilt only).

Fixed

  • No longer decoding large content when the noise detector output give a high entropy. Only impacted large content input >1M bytes.

3.5.0 (2026-08-12)

Added

  • Explicit support for Python 3.15

Fixed

  • Comparing a CharsetMatch to a non-alias encoding strings (#773)
  • Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
  • A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.
  • iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

  • Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.
  • Applied micro-optimization on several utils.
  • CharsetMatches no longer sort on each match insertion.

Misc

  • Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).

3.4.9 (2026-07-07)

Fixed

  • Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

3.4.8 (2026-07-06)

Fixed

  • Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)
  • Unnecessary json import at runtime (#753)
  • Inverse capitalization not seen by noise detector (#731)

... (truncated)

Commits
  • e239bdc Merge pull request #795 from jawah/release-3.5.1
  • 648ad77 docs: update faq
  • fab2749 docs: write changelog for 3.5.1
  • 7d32774 chore: bump version to 3.5.1
  • 9a69f60 docs: update data/info
  • 5dcc6dd perf: charinfo cache access optimization in cython
  • ea3b447 fix: do not validate-decode large payload when md says it's noise
  • a05917f chore: allow setuptools 84 builds (#794)
  • 3325d87 Merge pull request #792 from jawah/update-cibuildwheel-action
  • 77203b1 chore: reformat noxfile.py
  • Additional commits viewable in compare view

Updates frozenlist from 1.4.0 to 1.8.0

Release notes

Sourced from frozenlist's releases.

1.8.0

Contributor-facing changes

  • The :file:reusable-cibuildwheel.yml workflow has been refactored to be more generic and :file:ci-cd.yml now holds all the configuration toggles -- by :user:webknjaz.

    Related issues and pull requests on GitHub: #668.

  • When building wheels, the source distribution is now passed directly to the cibuildwheel invocation -- by :user:webknjaz.

    Related issues and pull requests on GitHub: #669.

  • Builds and tests have been added to ci-cd.yml for arm64 Windows wheels -- by :user:finnagin.

    Related issues and pull requests on GitHub: #677.

  • Started building wheels for CPython 3.14 -- by :user:kumaraditya303.

    Related issues and pull requests on GitHub: #681, #682.

  • Removed --config-settings=pure-python=false from :file:requirements/dev.txt. Developers on CPython still get accelerated builds by default. To explicitly build a pure Python wheel, use pip install -e . --config-settings=pure-python=true -- by :user:bdraco.

    Related issues and pull requests on GitHub: #687.

1.7.0

Features

  • Added deepcopy support to FrozenList -- by :user:bdraco.

    Related issues and pull requests on GitHub: #659.

Packaging updates and notes for downstreams

... (truncated)

Changelog

Sourced from frozenlist's changelog.

v1.8.0

(2025-10-05)

Contributor-facing changes

  • The :file:reusable-cibuildwheel.yml workflow has been refactored to be more generic and :file:ci-cd.yml now holds all the configuration toggles -- by :user:webknjaz.

    Related issues and pull requests on GitHub: :issue:668.

  • When building wheels, the source distribution is now passed directly to the cibuildwheel invocation -- by :user:webknjaz.

    Related issues and pull requests on GitHub: :issue:669.

  • Builds and tests have been added to ci-cd.yml for arm64 Windows wheels -- by :user:finnagin.

    Related issues and pull requests on GitHub: :issue:677.

  • Started building wheels for CPython 3.14 -- by :user:kumaraditya303.

    Related issues and pull requests on GitHub: :issue:681, :issue:682.

  • Removed --config-settings=pure-python=false from :file:requirements/dev.txt. Developers on CPython still get accelerated builds by default. To explicitly build a pure Python wheel, use pip install -e . --config-settings=pure-python=true -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:687.

v1.7.0

(2025-06-09)

... (truncated)

Commits
  • 48324af Release 1.8.0 (#698)
  • 7e5eab0 Add windows arm64 support (#678)
  • a2c22c2 Build(deps): Bump sphinx from 7.2.6 to 7.4.7 (#691)
  • 752b80a Build(deps): Bump types-setuptools from 75.8.0.20250210 to 80.9.0.20250822 (#...
  • 6b9d557 Build(deps): Bump cython from 3.1.1 to 3.1.4 (#690)
  • 7c4ad20 Build(deps-dev): Bump tox from 4.11.4 to 4.30.3 (#693)
  • 65f35d6 Build(deps): Bump pre-commit from 3.5.0 to 4.3.0 (#697)
  • 1ad0263 Build(deps): Bump pytest from 7.4.3 to 8.4.2 (#694)
  • 884ee49 Build(deps): Bump aiohttp-theme from 0.1.6 to 0.1.7 (#689)
  • b2d6180 Fix dependabot updates (#687)
  • Additional commits viewable in compare view

Updates hikari from 2.5.0 to 2.6.0

Release notes

Sourced from hikari's releases.

2.6.0 (2026-08-19)

Breaking Changes

  • Invite.channel_id is now typed as nullable, fixing the deserialization of friend invites raising KeyError (#2768)
  • The guild parameter of RESTClient.fetch_members is now positional-only (#2775)

Features

  • Add fetch role member count endpoint (#2585)
  • Automatically add components V2 flag for interaction server responses (#2641)
  • Add support for the RATE_LIMITED gateway event: the shard now logs a warning when an operation gets rate limited and the new ShardRateLimitedEvent and RequestGuildMembersRateLimitedEvent events are dispatched so applications can react to it (#2644)
  • Add BYPASS_SLOWMODE Permission Flag (#2666)
  • Add attachment_size_limit parameter to PartialInteraction object (#2729)
  • Re-add nonce argument to create_message calls, which allows to deduplicate messages in the past few minutes (#2734)
  • Add super (burst) reaction support to the Reaction object, the reaction add/delete events and fetch_reactions_for_emoji (#2737)
  • Add RESTClient.edit_application to edit the current application, along with new ApplicationEventWebhookStatus and ApplicationEventWebhookType enums and event_webhooks_url, event_webhooks_status and event_webhooks_types fields on Application (#2738)
  • Add the missing discovery_splash, system_channel_flags, safety_alerts_channel, description and premium_progress_bar_enabled parameters to RESTClient.edit_guild (#2739)
  • Add RESTClient.bulk_ban_users to ban up to 200 users from a guild at once, along with a new BulkBanResponse object (#2740)
  • Add RESTClient.fetch_sticker_pack for fetching a single sticker pack (#2747)
  • Add VoiceChannelStartTimeUpdateEvent, fired when a voice session starts or ends in a voice channel (#2748)
  • Add support for role colors: the ColorGradient model, the Role.colors field, support for passing a ColorGradient as the color in RESTClient.create_role and RESTClient.edit_role, and the ENHANCED_ROLE_COLORS guild feature (#2749)
  • Add RESTClient.fetch_entitlement and RESTClient.consume_entitlement, the Entitlement.is_consumed field, the missing skus and exclude_deleted parameters to RESTClient.fetch_entitlements, and the missing one-time purchase EntitlementType and SKUType values (#2750)
  • Add support for requesting ephemeral channel info over the gateway: GatewayShard.request_channel_info (also available on GatewayBot) and the ChannelInfoEvent dispatched in response (#2752)
  • Add RESTClient.fetch_activity_instance for fetching a live application activity instance, along with the new ActivityInstance, ActivityLocation and ActivityLocationKind models (#2766)
  • True-up the invites module:
    • Add Invite.type, along with the new InviteType enum
    • Add Invite.flags, along with the new InviteFlags enum
    • Add Invite.roles, along with the new InviteRole model, and Invite.role_ids
    • Add Invite.guild_scheduled_event
    • Add the missing scheduled_event parameter to RESTClient.fetch_invite (#2768)
  • Add the application_id field to guild channels, which Discord now documents on the channel object for future guild channel use cases (#2771)
  • Add the start_at parameter to RESTClient.fetch_members, allowing the member iteration to start at a given user, snowflake or point in time (#2775)
  • Add support for gateway capabilities and Discord's upcoming private channel obfuscation:
    • New GatewayCapabilities bitfield, declarable through the capabilities argument of GatewayBot and GatewayShardImpl, including the temporary GatewayCapabilities.CHANNEL_OBFUSCATION testing opt-in
    • New ChannelFlag.CHANNEL_OBFUSCATED flag for detecting obfuscated channels
    • PermissibleGuildChannel.flags is now available on every guild channel type instead of only forum and media channels (#2785)

Bugfixes

  • Properly close http connections when making a request to REST (#2392)
  • Use correct route when using fetch_poll_voters (#2594)
  • Do not fetch WebResource attachments if they're part of components/embeds (#2687)
  • Default to unsigned in Color.to_bytes, fixing an OverflowError when converting colors with a red channel of 0x80 or higher to their natural three bytes (#2764)

Documentation Improvements

  • Fix typos in component builder docstrings (#2618)
Changelog

Sourced from hikari's changelog.

2.6.0 (2026-08-19)

Breaking Changes

  • Invite.channel_id is now typed as nullable, fixing the deserialization of friend invites raising KeyError (#2768)
  • The guild parameter of RESTClient.fetch_members is now positional-only (#2775)

Features

  • Add fetch role member count endpoint (#2585)
  • Automatically add components V2 flag for interaction server responses (#2641)
  • Add support for the RATE_LIMITED gateway event: the shard now logs a warning when an operation gets rate limited and the new ShardRateLimitedEvent and RequestGuildMembersRateLimitedEvent events are dispatched so applications can react to it (#2644)
  • Add BYPASS_SLOWMODE Permission Flag (#2666)
  • Add attachment_size_limit parameter to PartialInteraction object (#2729)
  • Re-add nonce argument to create_message calls, which allows to deduplicate messages in the past few minutes (#2734)
  • Add super (burst) reaction support to the Reaction object, the reaction add/delete events and fetch_reactions_for_emoji (#2737)
  • Add RESTClient.edit_application to edit the current application, along with new ApplicationEventWebhookStatus and ApplicationEventWebhookType enums and event_webhooks_url, event_webhooks_status and event_webhooks_types fields on Application (#2738)
  • Add the missing discovery_splash, system_channel_flags, safety_alerts_channel, description and premium_progress_bar_enabled parameters to RESTClient.edit_guild (#2739)
  • Add RESTClient.bulk_ban_users to ban up to 200 users from a guild at once, along with a new BulkBanResponse object (#2740)
  • Add RESTClient.fetch_sticker_pack for fetching a single sticker pack (#2747)
  • Add VoiceChannelStartTimeUpdateEvent, fired when a voice session starts or ends in a voice channel (#2748)
  • Add support for role colors: the ColorGradient model, the Role.colors field, support for passing a ColorGradient as the color in RESTClient.create_role and RESTClient.edit_role, and the ENHANCED_ROLE_COLORS guild feature (#2749)
  • Add RESTClient.fetch_entitlement and RESTClient.consume_entitlement, the Entitlement.is_consumed field, the missing skus and exclude_deleted parameters to RESTClient.fetch_entitlements, and the missing one-time purchase EntitlementType and SKUType values (

@dependabot
Bump the all group with 17 updates
e27b716 
Bumps the all group with 17 updates:

| Package | From | To |
| --- | --- | --- |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.9.1` | `3.14.3` |
| [aiosignal](https://github.com/aio-libs/aiosignal) | `1.3.1` | `1.4.0` |
| [async-timeout](https://github.com/aio-libs/async-timeout) | `4.0.3` | `5.0.1` |
| [attrs](https://github.com/python-attrs/attrs) | `25.4.0` | `26.1.0` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.7` | `3.5.1` |
| [frozenlist](https://github.com/aio-libs/frozenlist) | `1.4.0` | `1.8.0` |
| [hikari](https://github.com/hikari-py/hikari) | `2.5.0` | `2.6.0` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.19` |
| [multidict](https://github.com/aio-libs/multidict) | `6.0.4` | `6.7.1` |
| [yarl](https://github.com/aio-libs/yarl) | `1.9.4` | `1.24.5` |
| [fastjsonschema](https://github.com/horejsek/python-fastjsonschema) | `2.22.1` | `2.22.2` |
| [nbformat](https://github.com/jupyter/nbformat) | `5.11.0` | `5.11.1` |
| [pygments](https://github.com/pygments/pygments) | `2.20.0` | `2.21.0` |
| [pyzmq](https://github.com/zeromq/pyzmq) | `27.1.0` | `27.2.0` |
| [webencodings](https://github.com/CourtBouillon/webencodings) | `0.5.1` | `0.6.1` |


Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

Updates `aiohttp` from 3.9.1 to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.9.1...v3.14.3)

Updates `aiosignal` from 1.3.1 to 1.4.0
- [Release notes](https://github.com/aio-libs/aiosignal/releases)
- [Changelog](https://github.com/aio-libs/aiosignal/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiosignal@v1.3.1...v1.4.0)

Updates `async-timeout` from 4.0.3 to 5.0.1
- [Release notes](https://github.com/aio-libs/async-timeout/releases)
- [Changelog](https://github.com/aio-libs-abandoned/async-timeout/blob/master/CHANGES.rst)
- [Commits](aio-libs-abandoned/async-timeout@v4.0.3...v5.0.1)

Updates `attrs` from 25.4.0 to 26.1.0
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/main/CHANGELOG.md)
- [Commits](python-attrs/attrs@25.4.0...26.1.0)

Updates `charset-normalizer` from 3.4.7 to 3.5.1
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.7...3.5.1)

Updates `frozenlist` from 1.4.0 to 1.8.0
- [Release notes](https://github.com/aio-libs/frozenlist/releases)
- [Changelog](https://github.com/aio-libs/frozenlist/blob/master/CHANGES.rst)
- [Commits](aio-libs/frozenlist@v1.4.0...v1.8.0)

Updates `hikari` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/hikari-py/hikari/releases)
- [Changelog](https://github.com/hikari-py/hikari/blob/master/CHANGELOG.md)
- [Commits](hikari-py/hikari@2.5.0...2.6.0)

Updates `idna` from 3.15 to 3.19
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.15...v3.19)

Updates `multidict` from 6.0.4 to 6.7.1
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.0.4...v6.7.1)

Updates `yarl` from 1.9.4 to 1.24.5
- [Release notes](https://github.com/aio-libs/yarl/releases)
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.9.4...v1.24.5)

Updates `fastjsonschema` from 2.22.1 to 2.22.2
- [Changelog](https://github.com/horejsek/python-fastjsonschema/blob/master/CHANGELOG.txt)
- [Commits](horejsek/python-fastjsonschema@v2.22.1...v2.22.2)

Updates `nbformat` from 5.11.0 to 5.11.1
- [Release notes](https://github.com/jupyter/nbformat/releases)
- [Changelog](https://github.com/jupyter/nbformat/blob/main/CHANGELOG.md)
- [Commits](jupyter/nbformat@v5.11.0...v5.11.1)

Updates `pygments` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.20.0...2.21.0)

Updates `pyzmq` from 27.1.0 to 27.2.0
- [Release notes](https://github.com/zeromq/pyzmq/releases)
- [Commits](zeromq/pyzmq@v27.1.0...v27.2.0)

Updates `webencodings` from 0.5.1 to 0.6.1
- [Release notes](https://github.com/CourtBouillon/webencodings/releases)
- [Changelog](https://github.com/CourtBouillon/webencodings/blob/main/docs/changelog.rst)
- [Commits](CourtBouillon/webencodings@v0.5.1...v0.6.1)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: aiosignal
  dependency-version: 1.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: async-timeout
  dependency-version: 5.0.1
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: attrs
  dependency-version: 26.1.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: charset-normalizer
  dependency-version: 3.5.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: frozenlist
  dependency-version: 1.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: hikari
  dependency-version: 2.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: idna
  dependency-version: '3.19'
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: multidict
  dependency-version: 6.7.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: yarl
  dependency-version: 1.24.5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: fastjsonschema
  dependency-version: 2.22.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: nbformat
  dependency-version: 5.11.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: pygments
  dependency-version: 2.21.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: pyzmq
  dependency-version: 27.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: webencodings
  dependency-version: 0.6.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 24, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) August 24, 2026 04:13
@github-actions
github-actions Bot merged commit 07779aa into main Aug 24, 2026
7 checks passed
@github-actions
github-actions Bot deleted the dependabot/pip/all-2bec18b101 branch August 24, 2026 08:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@knyghty knyghty knyghty approved these changes

Assignees

@knyghty knyghty

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@knyghty