Bump the production-dependencies group across 1 directory with 6 updates by dependabot[bot] · Pull Request #1960 · opensafely/documentation

dependabot · 2026-04-08T11:32:35Z

Bumps the production-dependencies group with 6 updates in the / directory:

Package	From	To
mkdocs-material	`9.7.5`	`9.7.6`
pygments	`2.19.2`	`2.20.0`
pymdown-extensions	`10.21`	`10.21.2`
requests	`2.33.0`	`2.33.1`
build	`1.4.0`	`1.4.2`
python-discovery	`1.1.3`	`1.2.1`

Updates mkdocs-material from 9.7.5 to 9.7.6

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.6

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

Automatically disable MkDocs 2.0 warning for forks of MkDocs

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.6 (2026-03-19)

Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

Limited version range of mkdocs to <2

Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

Hardened social cards plugin by switching to sandboxed environment

Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

Opened up version ranges of optional dependencies for forward-compatibility

Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

Updated requests to 2.30+ to mitigate CVE in urllib

Fixed privacy plugin not picking up protocol-relative URLs

Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved unsustainable to maintain and represent architectural dead ends. They are provided as-is without ongoing support.

Changes:

... (truncated)

Commits

6c52ed6 Prepare 9.7.6 release
51d9b76 Automatically disable MkDocs 2.0 warning for forks of MkDocs
6f9a48b Updated links
See full diff in compare view

Updates pygments from 2.19.2 to 2.20.0

Release notes

Sourced from pygments's releases.

2.20.0

New lexers:

Rell (#2914)

Updated lexers:

archetype: Fix catastrophic backtracking in GUID and ID patterns (#3064)

ASN.1: Recognize minus sign and fix range operator (#3014, #3060)

C++: Add C++26 keywords (#2955), add integer literal suffixes (#2966)

ComponentPascal: Fix analyse_text (#3028, #3032)

Coq renamed to Rocq (#2883, #2908)

Cython: Various improvements (#2932, #2933)

Debian control: Improve architecture parsing (#3052)

Devicetree: Add support for overlay/fragments (#3021), add bytestring support (#3022), fix catastrophic backtracking (#3057)

Fennel: Various improvements (#2911)

Haskell: Handle escape sequences in character literals (#3069, #1795)

Java: Add module keywords (#2955)

Lean4: Add operators ]', ]?, ]! (#2946)

LESS: Support single-line comments (#3005)

LilyPond: Update to 2.25.29 (#2974)

LLVM: Support C-style comments (#3023, #2978)

Lua(u): Fix catastrophic backtracking (#3047)

Macaulay2: Update to 1.25.05 (#2893), 1.25.11 (#2988)

Mathematica: Various improvements (#2957)

meson: Add additional operators (#2919)

MySQL: Update keywords (#2970)

org-Mode: Support both schedule and deadline (#2899)

PHP: Add __PROPERTY__ magic constant (#2924), add reserved keywords (#3002)

PostgreSQL: Add more keywords (#2985)

protobuf: Fix namespace tokenization (#2929)

Python: Add t-string support (#2973, #3009, #3010)

Tablegen: Fix infinite loop (#2972, #2940)

Tera Term macro: Add commands introduced in v5.3 through v5.6 (#2951)

TOML: Support TOML 1.1.0 (#3026, #3027)

Turtle: Allow empty comment lines (#2980)

XML: Added .xbrl as file ending (#2890, #2891)

Drop Python 3.8, and add Python 3.14 as a supported version (#2987, #3012)

Various improvements to autopygmentize (#2894)

Update onedark style to support more token types (#2977)

Update rtt style to support more token types (#2895)

Cache entry points to improve performance (#2979)

Fix xterm-256 color table (#3043)

Fix kwargs dictionary getting mutated on each call (#3044)

Changelog

Sourced from pygments's changelog.

Version 2.20.0

(released March 29th, 2026)

New lexers:

Rell (#2914)

Updated lexers:

archetype: Fix catastrophic backtracking in GUID and ID patterns (#3064)

ASN.1: Recognize minus sign and fix range operator (#3014, #3060)

C++: Add C++26 keywords (#2955), add integer literal suffixes (#2966)

ComponentPascal: Fix analyse_text (#3028, #3032)

Coq renamed to Rocq (#2883, #2908)

Cython: Various improvements (#2932, #2933)

Debian control: Improve architecture parsing (#3052)

Devicetree: Add support for overlay/fragments (#3021), add bytestring support (#3022), fix catastrophic backtracking (#3057)

Fennel: Various improvements (#2911)

Haskell: Handle escape sequences in character literals (#3069, #1795)

Java: Add module keywords (#2955)

Lean4: Add operators ]', ]?, ]! (#2946)

LESS: Support single-line comments (#3005)

LilyPond: Update to 2.25.29 (#2974)

LLVM: Support C-style comments (#3023, #2978)

Lua(u): Fix catastrophic backtracking (#3047)

Macaulay2: Update to 1.25.05 (#2893), 1.25.11 (#2988)

Mathematica: Various improvements (#2957)

meson: Add additional operators (#2919)

MySQL: Update keywords (#2970)

org-Mode: Support both schedule and deadline (#2899)

PHP: Add __PROPERTY__ magic constant (#2924), add reserved keywords (#3002)

PostgreSQL: Add more keywords (#2985)

protobuf: Fix namespace tokenization (#2929)

Python: Add t-string support (#2973, #3009, #3010)

Tablegen: Fix infinite loop (#2972, #2940)

Tera Term macro: Add commands introduced in v5.3 through v5.6 (#2951)

TOML: Support TOML 1.1.0 (#3026, #3027)

Turtle: Allow empty comment lines (#2980)

XML: Added .xbrl as file ending (#2890, #2891)

Drop Python 3.8, and add Python 3.14 as a supported version (#2987, #3012)

Various improvements to autopygmentize (#2894)

Update onedark style to support more token types (#2977)

Update rtt style to support more token types (#2895)

Cache entry points to improve performance (#2979)

Fix xterm-256 color table (#3043)

Fix kwargs dictionary getting mutated on each call (#3044)

Commits

708197d Fix underline length.
1d4538a Prepare 2.20 release.
2ceaee4 Update CHANGES.
e3a3c54 Fix Haskell lexer: handle escape sequences in character literals (#3069)
d7c3453 Merge pull request #3071 from pygments/harden-html-formatter
0f97e7c Harden the HTML formatter against CSS.
9f981b2 Update CHANGES.
1d88915 Update CHANGES.
c3d93ad Fix ASN.1 lexer: recognize minus sign and fix range operator (#3060)
4f06bcf fix bad behaving backtracking regex in CommonLispLexer
Additional commits viewable in compare view

Updates pymdown-extensions from 10.21 to 10.21.2

Release notes

Sourced from pymdown-extensions's releases.

10.21. 2

10.21.2

FIX: Highlight: Latest Pygments versions cannot handle a "filename" for code block titles of None.

10.20.1

FIX: Quotes: Ensure the first class for callouts (the alert type) is always rendered lowercase.

Commits

a4fdd73 Skip tag 10.21.1 has we accidentally already used it
8afb4cd Docs: Update JS deps
7bf5b29 Pygments needs a non-None value for code block title (#2863)
20b11eb Fix some spelling and formatting
c9edba3 Docs: strengthen Snippets warning and add security considerations
See full diff in compare view

Updates requests from 2.33.0 to 2.33.1

Release notes

Sourced from requests's releases.

v2.33.1

2.33.1 (2026-03-30)

Bugfixes

Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)

Fixed Content-Type header parsing for malformed values. (#7309)

Improved error consistency for malformed header values. (#7308)

New Contributors

@ferdnyc made their first contribution in psf/requests#7277

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2331-2026-03-30

Changelog

Sourced from requests's changelog.

2.33.1 (2026-03-30)

Bugfixes

Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)

Fixed Content-Type header parsing for malformed values. (#7309)

Improved error consistency for malformed header values. (#7308)

Commits

111d2b7 v2.33.1
f0198e6 Fix malformed value parsing for Content-Type (#7309)
bc7dd0f Fix cosmetic header validity parsing regex (#7308)
4443b1a Fix unintended test extra (#7306)
389eea5 Cleanup extracted file after extract_zipped_path test (#7305)
7407309 Packaging: DRY out extras definition (#7277)
See full diff in compare view

Updates build from 1.4.0 to 1.4.2

Release notes

Sourced from build's releases.

1.4.2

What's Changed

fix(uv): always pass the python to use by @henryiii in pypa/build#996

🐛 fix(release): detect pre-commit environment inconsistencies by @gaborbernat in pypa/build#1001

🔧 fix(towncrier): match docstrfmt RST formatting expectations by @gaborbernat in pypa/build#1002

Fix _has_valid_outer_pip when pip is missing by @notatallshaw in pypa/build#1003

fix: release changelog issue by @henryiii in pypa/build#1006

New Contributors

@notatallshaw made their first contribution in pypa/build#1003

Full Changelog: pypa/build@1.4.1...1.4.2

1.4.1

What's Changed

Fix documentation grammar and typos by @DimitriPapadopoulos in pypa/build#979

Allow setting build constraints by @layday in pypa/build#963

fix: pip hack workaround by @henryiii in pypa/build#980

📚 docs: reorganize using Diataxis framework by @gaborbernat in pypa/build#988

✨ feat(ci): automate releases and harden workflows by @gaborbernat in pypa/build#991

chore: avoid template injection zizmor issue by @henryiii in pypa/build#994

chore: fix PR template by @henryiii in pypa/build#995

chore: fix fix job by @henryiii in pypa/build#997

🐛 fix(ci): resolve pre-release auth failure and change detection by @gaborbernat in pypa/build#999

🐛 fix(deps): add pre-commit to release dependency group by @gaborbernat in pypa/build#1000

Full Changelog: pypa/build@1.4.0...1.4.1

Changelog

Sourced from build's changelog.

#################### 1.4.2 (2026-03-25) ####################

Bugfixes

Ensure the uv installer uses the current version of Python, avoiding an issue if UV_PYTHON is set, for example. (:issue:977)

Fix _has_valid_outer_pip returning True when pip is missing, causing build to try using a non-existent pip instead of falling back to virtualenv. (:issue:1003)

#################### 1.4.1 (2026-03-24) ####################

Features

Allow setting build constraints - by :user:gaborbernat (:issue:963)

Automate releases with pre-release workflow and trusted publishing - by :user:gaborbernat (:issue:991)

Documentation

Fix documentation grammar and typos (:issue:979)

Reorganize documentation using Diataxis framework - by :user:gaborbernat (:issue:988)

Document release process and workflow security practices in contributing guide (:issue:991)

Miscellaneous

:issue:991

Bugfixes

Fix pip hack workaround - by :user:gaborbernat (:issue:980)

#################### 1.4.0 (2026-01-08) ####################

Add --quiet flag (:pr:947)

Add option to dump PEP 517 metadata with --metadata (:pr:940, :pr:943)

... (truncated)

Commits

7b7ae07 chore: prepare for 1.4.2
17f3b57 fix: release changelog issue (#1006)
b945752 fix: _has_valid_outer_pip when pip is missing (#1003)
74ae997 🔧 fix(towncrier): match docstrfmt RST formatting expectations (#1002)
3786929 🐛 fix(release): detect pre-commit environment inconsistencies (#1001)
737bdb7 fix(uv): always pass the python to use (#996)
bd88956 chore: prepare for 1.4.1
062e7e2 🐛 fix(deps): add pre-commit to release dependency group (#1000)
3d8e260 🐛 fix(ci): resolve pre-release auth failure and change detection (#999)
f2a2610 chore: fix fix job (#997)
Additional commits viewable in compare view

Updates python-discovery from 1.1.3 to 1.2.1

Release notes

Sourced from python-discovery's releases.

1.2.1

What's Changed

🔒 ci(workflows): add zizmor security auditing by @gaborbernat in tox-dev/python-discovery#55

expose KNOWN_ARCHITECTURES as public API by @rahuldevikar in tox-dev/python-discovery#56

New Contributors

@rahuldevikar made their first contribution in tox-dev/python-discovery#56

Full Changelog: tox-dev/python-discovery@1.2.0...1.2.1

1.2.0

What's Changed

✨ feat(interpreter): increase query timeout to 15s with override by @gaborbernat in tox-dev/python-discovery#53

Full Changelog: tox-dev/python-discovery@1.1.3...1.2.0

Commits

38eac12 expose KNOWN_ARCHITECTURES as public API (#56)
eabb812 🔒 ci(workflows): add zizmor security auditing (#55)
b4cbd35 [pre-commit.ci] pre-commit autoupdate (#54)
98b331e ✨ feat(interpreter): increase query timeout to 15s with override (#53)
7d30958 [pre-commit.ci] pre-commit autoupdate (#51)
See full diff in compare view

StevenMaude · 2026-04-08T11:48:27Z

@dependabot rebase

Bumps the production-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.7.5` | `9.7.6` | | [pygments](https://github.com/pygments/pygments) | `2.19.2` | `2.20.0` | | [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `10.21` | `10.21.2` | | [requests](https://github.com/psf/requests) | `2.33.0` | `2.33.1` | | [build](https://github.com/pypa/build) | `1.4.0` | `1.4.2` | | [python-discovery](https://github.com/tox-dev/python-discovery) | `1.1.3` | `1.2.1` | Updates `mkdocs-material` from 9.7.5 to 9.7.6 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.7.5...9.7.6) Updates `pygments` from 2.19.2 to 2.20.0 - [Release notes](https://github.com/pygments/pygments/releases) - [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES) - [Commits](pygments/pygments@2.19.2...2.20.0) Updates `pymdown-extensions` from 10.21 to 10.21.2 - [Release notes](https://github.com/facelessuser/pymdown-extensions/releases) - [Commits](facelessuser/pymdown-extensions@10.21...10.21.2) Updates `requests` from 2.33.0 to 2.33.1 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.33.0...v2.33.1) Updates `build` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.4.0...1.4.2) Updates `python-discovery` from 1.1.3 to 1.2.1 - [Release notes](https://github.com/tox-dev/python-discovery/releases) - [Commits](tox-dev/python-discovery@1.1.3...1.2.1) --- updated-dependencies: - dependency-name: mkdocs-material dependency-version: 9.7.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: pygments dependency-version: 2.20.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: pymdown-extensions dependency-version: 10.21.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: requests dependency-version: 2.33.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: build dependency-version: 1.4.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: python-discovery dependency-version: 1.2.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 8, 2026

dependabot bot force-pushed the dependabot/pip/production-dependencies-6d01ef6e84 branch from eced030 to 10b0960 Compare April 8, 2026 11:53

StevenMaude approved these changes Apr 8, 2026

View reviewed changes

StevenMaude merged commit 70b4861 into main Apr 8, 2026
1 check passed

StevenMaude deleted the dependabot/pip/production-dependencies-6d01ef6e84 branch April 8, 2026 12:04

StevenMaude mentioned this pull request Apr 8, 2026

Bump pygments from 2.19.2 to 2.20.0 #1953

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the production-dependencies group across 1 directory with 6 updates#1960

Bump the production-dependencies group across 1 directory with 6 updates#1960
StevenMaude merged 1 commit intomainfrom
dependabot/pip/production-dependencies-6d01ef6e84

dependabot bot commented on behalf of github Apr 8, 2026 •

edited

Loading

Uh oh!

StevenMaude commented Apr 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

mkdocs-material-9.7.6

Changes

2.20.0

Version 2.20.0

10.21. 2

10.21.2

10.20.1

v2.33.1

2.33.1 (2026-03-30)

New Contributors

2.33.1 (2026-03-30)

1.4.2

What's Changed

New Contributors

1.4.1

What's Changed

1.2.1

What's Changed

New Contributors

1.2.0

What's Changed

Uh oh!

StevenMaude commented Apr 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Apr 8, 2026 •

edited

Loading