CHORE: Bump the production-dependencies group across 1 directory with 5 updates #292

dependabot · 2025-10-27T21:27:53Z

Bumps the production-dependencies group with 5 updates in the / directory:

Package	From	To
python-dotenv	`1.1.1`	`1.2.1`
msal	`1.33.0`	`1.34.0`
tomli	`2.2.1`	`2.3.0`
pydantic-settings	`2.10.1`	`2.11.0`
email-validator	`2.2.0`	`2.3.0`

Updates python-dotenv from 1.1.1 to 1.2.1

Release notes

Sourced from python-dotenv's releases.

v1.2.1

What's Changed

Support reading .env from FIFOs (Unix) by @sidharth-sudhir in theskumar/python-dotenv#586

Update CI to use trusted publishing on PyPI

New Contributors

@sidharth-sudhir made their first contribution in theskumar/python-dotenv#586

Full Changelog: theskumar/python-dotenv@v1.2.0...v1.2.1

v1.2.0

What's Changed

style: upgrade to use ruff by @theskumar in theskumar/python-dotenv#567

Use sys.exit() instead of exit() by @theskumar in theskumar/python-dotenv#568

feat: add PYTHON_DOTENV_DISABLED flag to disable load_dotenv (fixes #510) by @matthewfranglen in theskumar/python-dotenv#569

Added [email protected]: Github CI & tox.ini by @23f3001135 in theskumar/python-dotenv#579

ocs: clarify what load_dotenv() does in README by @cybercoded in theskumar/python-dotenv#575

Bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in theskumar/python-dotenv#577

Move project metadata and config to pyproject.toml by @EpicWink in theskumar/python-dotenv#583

New Contributors

@matthewfranglen made their first contribution in theskumar/python-dotenv#569

@23f3001135 made their first contribution in theskumar/python-dotenv#579

@cybercoded made their first contribution in theskumar/python-dotenv#575

@EpicWink made their first contribution in theskumar/python-dotenv#583

Full Changelog: theskumar/python-dotenv@v1.1.1...v1.2.0

Changelog

Sourced from python-dotenv's changelog.

[1.2.1] - 2025-10-26

Move more config to pyproject.toml, removed setup.cfg

Add support for reading .env from FIFOs (Unix) by [@sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Upgrade build system to use PEP 517 & PEP 518 to use build and pyproject.toml by [@EpicWink] in #583

Add support for Python 3.14 by [@23f3001135] in #579

Add support for disabling of load_dotenv() using PYTHON_DOTENV_DISABLED env var. by [@matthewfranglen] in #569

Commits

eaf2a91 Do not remove .coverage file
8716196 Bump version: 1.2.0 → 1.2.1
b87807f Update changelog
3af77d3 Support reading .env from FIFOs (Unix) (#586)
467ee22 Fix test failures after moving config to pyproject.toml
76999e7 Move more config pyproject.toml
222ce2c Update to use trusted publisher on pypi
8ed4f79 Update docs requirements
5bf8822 Bump version: 1.1.1 → 1.2.0
1fe11cc upadate changelog
Additional commits viewable in compare view

Updates msal from 1.33.0 to 1.34.0

Release notes

Sourced from msal's releases.

MSAL Python 1.34.0

This release includes:

All the changes in 1.34.0b1, plus bumping the dependency cryptography upper bound, which also drops Python 3.7 support.

Officially support Python 3.13

What's Changed

ManagedIdentityClient(..., client_capabilities=["cp1"]).acquire_token_for_client(..., claims_challenge="...") by @rayluo in AzureAD/microsoft-authentication-library-for-python#791

Update deprecated TokenCache API usage by @pvaneck in AzureAD/microsoft-authentication-library-for-python#805

Enable broker support on Linux for WSL by @DharshanBJ in AzureAD/microsoft-authentication-library-for-python#766

Fix username/password validation in broker test by @emmanuel-ferdman in AzureAD/microsoft-authentication-library-for-python#807

Merge release 1.32.3 back to dev branch by @rayluo in AzureAD/microsoft-authentication-library-for-python#816

Add dependency management suggestions by @rayluo in AzureAD/microsoft-authentication-library-for-python#819

Remind developers about http_cache's unstable format by @rayluo in AzureAD/microsoft-authentication-library-for-python#821

Properly throw MsalServiceError exception by @rayluo in AzureAD/microsoft-authentication-library-for-python#820

Improve test cases to test header-less response by @rayluo in AzureAD/microsoft-authentication-library-for-python#822

Upgrade dependency by @rayluo in AzureAD/microsoft-authentication-library-for-python#824

Linux broker needs a specific redirect_uri by @rayluo in AzureAD/microsoft-authentication-library-for-python#826

MSAL Python 1.33.0b1 release by @rayluo in AzureAD/microsoft-authentication-library-for-python#827

Use lowercase environment value during searching by @rayluo in AzureAD/microsoft-authentication-library-for-python#831

Add claims challenge parameter in initiate_device_flow by @ashok672 in AzureAD/microsoft-authentication-library-for-python#839

MSAL Python 1.33.0 by @rayluo in AzureAD/microsoft-authentication-library-for-python#841

Declare support for Python 3.13 by @rayluo in AzureAD/microsoft-authentication-library-for-python#851

New Contributors

@pvaneck made their first contribution in AzureAD/microsoft-authentication-library-for-python#805

@emmanuel-ferdman made their first contribution in AzureAD/microsoft-authentication-library-for-python#807

@ashok672 made their first contribution in AzureAD/microsoft-authentication-library-for-python#839

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.32.3...1.34.0

MSAL Python 1.34.0b1

What's Changed

Use lowercase environment value during searching by @rayluo in AzureAD/microsoft-authentication-library-for-python#831

Add claims challenge parameter in initiate_device_flow by @ashok672 in AzureAD/microsoft-authentication-library-for-python#839

New Contributors

@ashok672 made their first contribution in AzureAD/microsoft-authentication-library-for-python#839

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.33.0...1.34.0b1

Commits

3edd99a 1.34.0b1 + minor changes = 1.34.0
a59bd09 Bumping cryptography which also drops Python 3.7
e6997a9 Declare support for Python 3.13
f3651cd MSAL Python 1.34.0b1
854136a ADFS labs were decommissioned since late July 2025
923a732 MSAL Python 1.33.0 (#841)
70fd4d1 Add claims challenge parameter in initiate_device_flow (#839)
b1d8cd7 Use lowercase environment value during searching
See full diff in compare view

Updates tomli from 2.2.1 to 2.3.0

Changelog

Sourced from tomli's changelog.

2.3.0

Added

Binary wheels for Python 3.14 (also free-threaded)

Performance

Reduced import time

Commits

3fccd16 Bump version: 2.2.1 → 2.3.0
6504016 Add 2.3.0 changelog
0bc66fc Remove now off-by-default PyPy from cibuildwheel skip list
0aa242f Update license metadata to appease PEP 639
a18221e Bump GitHub CI actions
6fa4d90 [pre-commit.ci] pre-commit autoupdate (#260)
b974fa1 [pre-commit.ci] pre-commit autoupdate (#248)
f574f36 Update mypy to 1.15 and use --strict mode (#257)
1da01ef Reduce import time by removing typing import (#251)
4188188 Reduce import time by removing string and tomli._types imports
Additional commits viewable in compare view

Updates pydantic-settings from 2.10.1 to 2.11.0

Release notes

Sourced from pydantic-settings's releases.

v2.11.0

What's Changed

CLI Serialize Support by @kschwab in pydantic/pydantic-settings#643

Inspect type aliases to determine if an annotation is complex by @tselepakis in pydantic/pydantic-settings#644

Revert "fix: Respect 'cli_parse_args' from model_config with settings_customise_sources (#611)" by @hramezani in pydantic/pydantic-settings#655

Remove parsing of command line arguments from CliSettingsSource.__init__. by @trygve-baerland in pydantic/pydantic-settings#656

turn off allow_abbrev on subparsers by @mroch in pydantic/pydantic-settings#658

CLI Serialization Fixes by @kschwab in pydantic/pydantic-settings#649

Fix PydanticModel type checking. by @kschwab in pydantic/pydantic-settings#659

Avoid env_prefix falling back to env vars without prefix by @tselepakis in pydantic/pydantic-settings#648

Warn if model_config sets unused keys for missing settings sources by @HomerusJa in pydantic/pydantic-settings#663

Included endpoint_url kwarg in AWSSecretsManagerSettingsSource class by @adrianohrl in pydantic/pydantic-settings#664

Fix typo ("Accesing") in the "Adding sources" docs by @deepyaman in pydantic/pydantic-settings#668

CLI Windows Path Fix by @kschwab in pydantic/pydantic-settings#669

Cli root model support by @kschwab in pydantic/pydantic-settings#677

Snake case conversion in Azure Key Vault by @AndreuCodina in pydantic/pydantic-settings#680

Make InitSettingsSource resolution deterministic by @enrico-stauss in pydantic/pydantic-settings#681

Update deps by @hramezani in pydantic/pydantic-settings#683

New Contributors

@tselepakis made their first contribution in pydantic/pydantic-settings#644

@trygve-baerland made their first contribution in pydantic/pydantic-settings#656

@mroch made their first contribution in pydantic/pydantic-settings#658

@HomerusJa made their first contribution in pydantic/pydantic-settings#663

@adrianohrl made their first contribution in pydantic/pydantic-settings#664

@deepyaman made their first contribution in pydantic/pydantic-settings#668

@enrico-stauss made their first contribution in pydantic/pydantic-settings#681

Full Changelog: pydantic/pydantic-settings@2.10.1...v2.11.0

Commits

3e66430 Prepare release 2.11.0 (#684)
44fb5b7 Update deps (#683)
0497ef2 Make InitSettingsSource resolution deterministic (#681)
c22cef4 Snake case conversion in Azure Key Vault (#680)
9c6c9b5 Cli root model support (#677)
a164b73 CLI Windows Path Fix (#669)
d81f8d8 Fix typo ("Accesing") in the "Adding sources" docs (#668)
53ade97 Included endpoint_url kwarg in AWSSecretsManagerSettingsSource class (#664)
1967d6f Warn if model_config sets unused keys for missing settings sources (#663)
1fc2087 Avoid env_prefix falling back to env vars without prefix (#648)
Additional commits viewable in compare view

Updates email-validator from 2.2.0 to 2.3.0

Release notes

Sourced from email-validator's releases.

v2.3.0

The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.

The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new strict=True parameter, and the overall 254 character email address length limit is still in place.

New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.

When using allow_display_name=True, display names are now returned with Unicode NFC normalization.

TypeError is now raised if something other than str (or bytes) is passed as the email address.

Changelog

Sourced from email-validator's changelog.

2.3.0 (August 26, 2025)

The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.

The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new strict=True parameter, and the overall 254 character email address length limit is still in place.

New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.

When using allow_display_name=True, display names are now returned with Unicode NFC normalization.

TypeError is now raised if something other than str (or bytes) is passed as the email address.

Commits

030a63a Version 2.3.0
e943a0f Raise TypeError when an invalid argument is passed for email, closes #155
f90d256 Remove local part length check unless new strict flag is given, fixes #158
98800ba Add explicit checks for internationalized domain name characters invalid unde...
936aead Fix final syntax checks on normalized internationalized domains checking the ...
8043de4 NFC-normalize display names per UTS #39
bc08faa Add one-off error messages for full-width-at and small-commercial-at which ar...
a1c90ab Split exceptions_types.py into exceptions.py and types.py
dbcf07c Change package name from using underscore to dash to match PyPi normalized pa...
7c22208 Support ALLOW_DISPLAY_NAME and ALLOW_EMPTY_LOCAL in the CLI (#145)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot · 2025-11-17T12:49:38Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

… 5 updates Bumps the production-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.1` | | [msal](https://github.com/AzureAD/microsoft-authentication-library-for-python) | `1.33.0` | `1.34.0` | | [tomli](https://github.com/hukkin/tomli) | `2.2.1` | `2.3.0` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.10.1` | `2.11.0` | | [email-validator](https://github.com/JoshData/python-email-validator) | `2.2.0` | `2.3.0` | Updates `python-dotenv` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.1.1...v1.2.1) Updates `msal` from 1.33.0 to 1.34.0 - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-python/releases) - [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-python/blob/dev/RELEASES.md) - [Commits](AzureAD/microsoft-authentication-library-for-python@1.33.0...1.34.0) Updates `tomli` from 2.2.1 to 2.3.0 - [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md) - [Commits](hukkin/tomli@2.2.1...2.3.0) Updates `pydantic-settings` from 2.10.1 to 2.11.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@2.10.1...v2.11.0) Updates `email-validator` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/JoshData/python-email-validator/releases) - [Changelog](https://github.com/JoshData/python-email-validator/blob/main/CHANGELOG.md) - [Commits](JoshData/python-email-validator@v2.2.0...v2.3.0) --- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: msal dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: tomli dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: pydantic-settings dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: email-validator dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-11-18T21:43:20Z

Dependabot couldn't access the repository. Because of this, Dependabot cannot update this pull request.

dependabot bot added dependencies Related with project dependencies maintenance Package and maintenance related labels Oct 27, 2025

github-actions bot removed the maintenance Package and maintenance related label Oct 27, 2025

dependabot bot force-pushed the dependabot/pip/production-dependencies-4e401f1c17 branch from af69f8f to acab682 Compare November 17, 2025 12:32

dependabot bot force-pushed the dependabot/pip/production-dependencies-4e401f1c17 branch from 1a77044 to 3e91bf0 Compare November 17, 2025 21:16

chore: adding changelog file 292.miscellaneous.md [dependabot-skip]

3446438

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

CHORE: Bump the production-dependencies group across 1 directory with 5 updates #292

CHORE: Bump the production-dependencies group across 1 directory with 5 updates #292

Uh oh!

dependabot bot commented on behalf of github Oct 27, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 18, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

CHORE: Bump the production-dependencies group across 1 directory with 5 updates #292

Are you sure you want to change the base?

CHORE: Bump the production-dependencies group across 1 directory with 5 updates #292

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.2.1

What's Changed

New Contributors

v1.2.0

What's Changed

New Contributors

[1.2.1] - 2025-10-26

[1.2.0] - 2025-10-26

MSAL Python 1.34.0

What's Changed

New Contributors

MSAL Python 1.34.0b1

What's Changed

New Contributors

2.3.0

v2.11.0

What's Changed

New Contributors

v2.3.0

2.3.0 (August 26, 2025)

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 18, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Oct 27, 2025 •

edited

Loading