chore(deps): update all dependencies #2401

renovate-bot · Jun 2, 2025

This PR contains the following updates:

Package	Change	Type	Update
aiohttp	`==3.11.18` -> `==3.12.12`		minor
cachetools	`==5.5.2` -> `==6.0.0`		major
click (changelog)	`==8.2.0` -> `==8.2.1`		patch
frozenlist	`==1.6.0` -> `==1.7.0`		minor
google-api-core	`==2.24.2` -> `==2.25.1`		minor
google-auth	`==2.40.1` -> `==2.40.3`		patch
grpcio (source)	`==1.71.0` -> `==1.73.0`		minor
libcst (changelog)	`==1.7.0` -> `==1.8.1`		minor
multidict	`==6.4.3` -> `==6.4.4`		patch
propcache	`==0.3.1` -> `==0.3.2`		patch
protobuf	`==6.31.0` -> `==6.31.1`		patch
pytest (changelog)	`==8.3.5` -> `==8.4.0`		minor
pytest-asyncio (changelog)	`==0.26.0` -> `==1.0.0`		major
python	`3.10` -> `3.13`	uses-with	minor
typing-extensions (changelog)	`==4.13.2` -> `==4.14.0`		minor
ubuntu	`22.04` -> `24.04`	github-runner	major
yarl	`==1.20.0` -> `==1.20.1`		patch

Release Notes

aio-libs/aiohttp (aiohttp)

`v3.12.12`

Compare Source

====================

Bug fixes

Fixed cookie unquoting to properly handle octal escape sequences in cookie values (e.g., \012 for newline) by vendoring the correct _unquote implementation from Python's http.cookies module -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:11173.
Fixed Cookie header parsing to treat attribute names as regular cookies per :rfc:6265#section-5.4 -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:11178.

`v3.12.11`

Compare Source

====================

Features

Improved SSL connection handling by changing the default ssl_shutdown_timeout
from 0.1 to 0 seconds. SSL connections now use Python's default graceful
shutdown during normal operation but are aborted immediately when the connector
is closed, providing optimal behavior for both cases. Also added support for
ssl_shutdown_timeout=0 on all Python versions. Previously, this value was
rejected on Python 3.11+ and ignored on earlier versions. Non-zero values on
Python < 3.11 now trigger a RuntimeWarning -- by :user:bdraco.

The ssl_shutdown_timeout parameter is now deprecated and will be removed in
aiohttp 4.0 as there is no clear use case for changing the default.

Related issues and pull requests on GitHub:
:issue:11148.

Deprecations (removal in next major release)

Improved SSL connection handling by changing the default ssl_shutdown_timeout
from 0.1 to 0 seconds. SSL connections now use Python's default graceful
shutdown during normal operation but are aborted immediately when the connector
is closed, providing optimal behavior for both cases. Also added support for
ssl_shutdown_timeout=0 on all Python versions. Previously, this value was
rejected on Python 3.11+ and ignored on earlier versions. Non-zero values on
Python < 3.11 now trigger a RuntimeWarning -- by :user:bdraco.

The ssl_shutdown_timeout parameter is now deprecated and will be removed in
aiohttp 4.0 as there is no clear use case for changing the default.

Related issues and pull requests on GitHub:
:issue:11148.

`v3.12.10`

Compare Source

====================

Bug fixes

Fixed leak of aiodns.DNSResolver when :py:class:~aiohttp.TCPConnector is closed and no resolver was passed when creating the connector -- by :user:Tasssadar.

This was a regression introduced in version 3.12.0 (:pr:10897).

Related issues and pull requests on GitHub:
:issue:11150.

`v3.12.9`

Compare Source

===================

Bug fixes

Fixed IOBasePayload and TextIOPayload reading entire files into memory when streaming large files -- by :user:bdraco.

When using file-like objects with the aiohttp client, the entire file would be read into memory if the file size was provided in the Content-Length header. This could cause out-of-memory errors when uploading large files. The payload classes now correctly read data in chunks of READ_SIZE (64KB) regardless of the total content length.

Related issues and pull requests on GitHub:
:issue:11138.

`v3.12.8`

Compare Source

===================

Features

Added preemptive digest authentication to :class:~aiohttp.DigestAuthMiddleware -- by :user:bdraco.

The middleware now reuses authentication credentials for subsequent requests to the same
protection space, improving efficiency by avoiding extra authentication round trips.
This behavior matches how web browsers handle digest authentication and follows
:rfc:7616#section-3.6.

Preemptive authentication is enabled by default but can be disabled by passing
preemptive=False to the middleware constructor.

Related issues and pull requests on GitHub:
:issue:11128, :issue:11129.

`v3.12.7`

Compare Source

===================

Bug fixes

Fixed cookie parsing to be more lenient when handling cookies with special characters
in names or values. Cookies with characters like {, }, and / in names are now
accepted instead of causing a :exc:~http.cookies.CookieError and 500 errors. Additionally,
cookies with mismatched quotes in values are now parsed correctly, and quoted cookie
values are now handled consistently whether or not they include special attributes
like Domain. Also fixed :class:~aiohttp.CookieJar to ensure shared cookies (domain="", path="")
respect the quote_cookie parameter, making cookie quoting behavior consistent for
all cookies -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:2683, :issue:5397, :issue:7993, :issue:11112.
Fixed an issue where cookies with duplicate names but different domains or paths
were lost when updating the cookie jar. The :class:~aiohttp.ClientSession
cookie jar now correctly stores all cookies even if they have the same name but
different domain or path, following the :rfc:6265#section-5.3 storage model -- by :user:bdraco.

Note that :attr:ClientResponse.cookies <aiohttp.ClientResponse.cookies> returns
a :class:~http.cookies.SimpleCookie which uses the cookie name as a key, so
only the last cookie with each name is accessible via this interface. All cookies
can be accessed via :meth:ClientResponse.headers.getall('Set-Cookie') <multidict.MultiDictProxy.getall> if needed.

Related issues and pull requests on GitHub:
:issue:4486, :issue:11105, :issue:11106.

Miscellaneous internal changes

Avoided creating closed futures in ResponseHandler that will never be awaited -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:11107.
Downgraded the logging level for connector close errors from ERROR to DEBUG, as these are expected behavior with TLS 1.3 connections -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:11114.

`v3.12.6`

Compare Source

===================

Bug fixes

Fixed spurious "Future exception was never retrieved" warnings for connection lost errors when the connector is not closed -- by :user:bdraco.

When connections are lost, the exception is now marked as retrieved since it is always propagated through other means, preventing unnecessary warnings in logs.

Related issues and pull requests on GitHub:
:issue:11100.

`v3.12.4`

Compare Source

===================

Bug fixes

Fixed connector not waiting for connections to close before returning from :meth:~aiohttp.BaseConnector.close (partial backport of :pr:3733) -- by :user:atemate and :user:bdraco.

Related issues and pull requests on GitHub:
:issue:1925, :issue:11074.

`v3.12.3`

Compare Source

===================

Bug fixes

Fixed memory leak in :py:meth:~aiohttp.CookieJar.filter_cookies that caused unbounded memory growth
when making requests to different URL paths -- by :user:bdraco and :user:Cycloctane.

Related issues and pull requests on GitHub:
:issue:11052, :issue:11054.

`v3.12.2`

Compare Source

===================

Bug fixes

Fixed Content-Length header not being set to 0 for non-GET requests with None body -- by :user:bdraco.

Non-GET requests (POST, PUT, PATCH, DELETE) with None as the body now correctly set the Content-Length header to 0, matching the behavior of requests with empty bytes (b""). This regression was introduced in aiohttp 3.12.1.

Related issues and pull requests on GitHub:
:issue:11035.

`v3.12.1`

Compare Source

====================

Bug fixes

Fixed cookie unquoting to properly handle octal escape sequences in cookie values (e.g., \012 for newline) by vendoring the correct _unquote implementation from Python's http.cookies module -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:11173.
Fixed Cookie header parsing to treat attribute names as regular cookies per :rfc:6265#section-5.4 -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:11178.

`v3.12.0`

Compare Source

===================

Bug fixes

Fixed :py:attr:~aiohttp.web.WebSocketResponse.prepared property to correctly reflect the prepared state, especially during timeout scenarios -- by :user:bdraco

Related issues and pull requests on GitHub:
:issue:6009, :issue:10988.
Response is now always True, instead of using MutableMapping behaviour (False when map is empty)

Related issues and pull requests on GitHub:
:issue:10119.
Fixed connection reuse for file-like data payloads by ensuring buffer
truncation respects content-length boundaries and preventing premature
connection closure race -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:10325, :issue:10915, :issue:10941, :issue:10943.
Fixed pytest plugin to not use deprecated :py:mod:asyncio policy APIs.

Related issues and pull requests on GitHub:
:issue:10851.
Fixed :py:class:~aiohttp.resolver.AsyncResolver not using the loop argument in versions 3.x where it should still be supported -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:10951.

Features

Added a comprehensive HTTP Digest Authentication client middleware (DigestAuthMiddleware)
that implements RFC 7616. The middleware supports all standard hash algorithms
(MD5, SHA, SHA-256, SHA-512) with session variants, handles both 'auth' and
'auth-int' quality of protection options, and automatically manages the
authentication flow by intercepting 401 responses and retrying with proper
credentials -- by :user:feus4177, :user:TimMenninger, and :user:bdraco.

Related issues and pull requests on GitHub:
:issue:2213, :issue:10725.
Added client middleware support -- by :user:bdraco and :user:Dreamsorcerer.

This change allows users to add middleware to the client session and requests, enabling features like
authentication, logging, and request/response modification without modifying the core
request logic. Additionally, the session attribute was added to ClientRequest,
allowing middleware to access the session for making additional requests.

Related issues and pull requests on GitHub:
:issue:9732, :issue:10902, :issue:10945, :issue:10952, :issue:10959, :issue:10968.
Allow user setting zlib compression backend -- by :user:TimMenninger

This change allows the user to call :func:aiohttp.set_zlib_backend() with the
zlib compression module of their choice. Default behavior continues to use
the builtin zlib library.

Related issues and pull requests on GitHub:
:issue:9798.
Added support for overriding the base URL with an absolute one in client sessions
-- by :user:vivodi.

Related issues and pull requests on GitHub:
:issue:10074.
Added host parameter to aiohttp_server fixture -- by :user:christianwbrock.

Related issues and pull requests on GitHub:
:issue:10120.
Detect blocking calls in coroutines using BlockBuster -- by :user:cbornet.

Related issues and pull requests on GitHub:
:issue:10433.
Added socket_factory to :py:class:aiohttp.TCPConnector to allow specifying custom socket options
-- by :user:TimMenninger.

Related issues and pull requests on GitHub:
:issue:10474, :issue:10520, :issue:10961, :issue:10962.
Started building armv7l manylinux wheels -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:10797.
Implemented shared DNS resolver management to fix excessive resolver object creation
when using multiple client sessions. The new _DNSResolverManager singleton ensures
only one DNSResolver object is created for default configurations, significantly
reducing resource usage and improving performance for applications using multiple
client sessions simultaneously -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:10847, :issue:10923, :issue:10946.
Upgraded to LLHTTP 9.3.0 -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:10972.
Optimized small HTTP requests/responses by coalescing headers and body into a single TCP packet -- by :user:bdraco.

This change enhances network efficiency by reducing the number of packets sent for small HTTP payloads, improving latency and reducing overhead. Most importantly, this fixes compatibility with memory-constrained IoT devices that can only perform a single read operation and expect HTTP requests in one packet. The optimization uses zero-copy writelines when coalescing data and works with both regular and chunked transfer encoding.

When aiohttp uses client middleware to communicate with an aiohttp server, connection reuse is more likely to occur since complete responses arrive in a single packet for small payloads.

This aligns aiohttp with other popular HTTP clients that already coalesce small requests.

Related issues and pull requests on GitHub:
:issue:10991.

Improved documentation

Improved documentation for middleware by adding warnings and examples about
request body stream consumption. The documentation now clearly explains that
request body streams can only be read once and provides best practices for
sharing parsed request data between middleware and handlers -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:2914.

Packaging updates and notes for downstreams

Removed non SPDX-license description from setup.cfg -- by :user:devanshu-ziphq.

Related issues and pull requests on GitHub:
:issue:10662.
Added support for building against system llhttp library -- by :user:mgorny.

This change adds support for :envvar:AIOHTTP_USE_SYSTEM_DEPS environment variable that
can be used to build aiohttp against the system install of the llhttp library rather
than the vendored one.

Related issues and pull requests on GitHub:
:issue:10759.
aiodns is now installed on Windows with speedups extra -- by :user:bdraco.

As of aiodns 3.3.0, SelectorEventLoop is no longer required when using pycares 4.7.0 or later.

Related issues and pull requests on GitHub:
:issue:10823.
Fixed compatibility issue with Cython 3.1.1 -- by :user:bdraco

Related issues and pull requests on GitHub:
:issue:10877.

Contributor-facing changes

Sped up tests by disabling blockbuster fixture for test_static_file_huge and test_static_file_huge_cancel tests -- by :user:dikos1337.

Related issues and pull requests on GitHub:
:issue:9705, :issue:10761.
Updated tests to avoid using deprecated :py:mod:asyncio policy APIs and
make it compatible with Python 3.14.

Related issues and pull requests on GitHub:
:issue:10851.
Added Winloop to test suite to support in the future -- by :user:Vizonex.

Related issues and pull requests on GitHub:
:issue:10922.

Miscellaneous internal changes

Added support for the partitioned attribute in the set_cookie method.

Related issues and pull requests on GitHub:
:issue:9870.
Setting :attr:aiohttp.web.StreamResponse.last_modified to an unsupported type will now raise :exc:TypeError instead of silently failing -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:10146.

tkem/cachetools (cachetools)

`v6.0.0`

Compare Source

===================

Require Python 3.9 or later (breaking change).
Remove MRUCache and the @func.mru_cache decorator (breaking
change).
Add an optional condition parameter to the @cached and
@cachedmethod decorators, which, when used with a
threading.Condition instance, should improve cache stampede <https://en.wikipedia.org/wiki/Cache_stampede>_ issues in massively
parallel environments. Note that this will inflict some performance
penalty, and therefore has to be enabled explicitly.
Convert the cachetools.func decorators to use a
threading.Condition instance to deal with cache stampede <https://en.wikipedia.org/wiki/Cache_stampede>_ issues. Note that
this may result in a noticable performance degradation, depending
on your actual use case.
Deprecate support for cache(self) returning None to suppress
caching with the @cachedmethod decorator.
Improve documentation.
Update CI environment.

pallets/click (click)

`v8.2.1`

Compare Source

Released 2025-05-20

Fix flag value handling for flag options with a provided type. :issue:2894
:issue:2897 :pr:2930
Fix shell completion for nested groups. :issue:2906 :pr:2907
Flush sys.stderr at the end of CliRunner.invoke. :issue:2682
Fix EOF handling for stdin input in CliRunner. :issue:2787

aio-libs/frozenlist (frozenlist)

`v1.7.0`

Compare Source

======

(2025-06-09)

Features

Added deepcopy support to FrozenList -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:659.

Packaging updates and notes for downstreams

Fixed an issue where frozenlist binary wheels would be built with debugging symbols and line tracing enabled, which significantly impacted performance. Line tracing is now disabled by default and can only be enabled explicitly -- by :user:bdraco.

This change ensures that production builds are optimized for performance. Developers who need line tracing for debugging purposes can still enable it by:
1. Setting the FROZENLIST_CYTHON_TRACING environment variable
2. Using the --config-setting=with-cython-tracing=true option with pip
Related issues and pull requests on GitHub:
:issue:660.
Enabled PIP_CONSTRAINT environment variable in the build configuration to ensure the pinned Cython version from requirements/cython.txt is used during wheel builds.

Related issues and pull requests on GitHub:
:issue:661.

`v1.6.2`

Compare Source

======

(2025-06-03)

No significant changes.

`v1.6.1`

Compare Source

======

(2025-06-02)

Bug fixes

Correctly use cimport for including PyBool_FromLong -- by :user:lysnikolaou.

Related issues and pull requests on GitHub:
:issue:653.

Packaging updates and notes for downstreams

Exclude _frozenlist.cpp from bdists/wheels -- by :user:musicinmybrain.

Related issues and pull requests on GitHub:
:issue:649.
Updated to use Cython 3.1 universally across the build path -- by :user:lysnikolaou.

Related issues and pull requests on GitHub:
:issue:654.

googleapis/python-api-core (google-api-core)

`v2.25.1`

Compare Source

Bug Fixes

Allow BackgroundConsumer To Inform Caller of Fatal Exceptions with Optional Callback (3206c01)

`v2.25.0`

Compare Source

Features

Add protobuf runtime version to x-goog-api-client header (#812) (118bd96)
Support dynamic retry backoff values (#793) (70697a3)

Bug Fixes

Resolve issue where pre-release versions of dependencies are installed (#808) (1ca7973)

googleapis/google-auth-library-python (google-auth)

`v2.40.3`

Compare Source

Bug Fixes

Auth fetch token from default endpoint (#1779) (88891cc)
Remove unnecessary call to mds service (#1769) (7c61c7d)
Retry 504 errors (#1767) (554f967)

`v2.40.2`

Compare Source

Bug Fixes

Remove sync response logs in AuthorizedSession (97ed1c8)
Update test to consider new error message from cryptography (#1765) (44e38b6)

grpc/grpc (grpcio)

`v1.73.0`

Compare Source

This is release 1.73.0 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

As of this version, gRPC on MacOS & iOS will utilize Abseil's synchronization features, aligning it with other platforms. Should you encounter any issues due to this update, you can disable it by enabling GPR_DISABLE_ABSEIL_SYNC. If you do this, please report any problems by filing a bug at https://github.com/grpc/grpc.

[Dep] Update Protobuf to v31.0. (#39392)
[Core] Added GPR_DISABLE_ABSEIL_SYNC. (#39562)
[xds_override_host] pass through per-endpoint args when creating subchannels. (#39532)
Expose GRPC_OPENSSL_CLEANUP_TIMEOUT to control shutdown grace period. (#39297)
[URI] fix parsing of user_info in proxy settings. (#39004)
[EventEngine] Fix busy loop in thread pool when shutting down. (#39258)
[Dep] Added a flag to build with openssl instead of boringssl. (#39188)
[EventEngine] Cleanup: EventEngine client, listener, and dns experiments are on by default on all platforms. (#39079)

C++

[OpenCensus] Mark OpenCensus and dependent APIs as deprecated. (#39554)

Python

[Python] Pin Cython to 3.1.1. (#39609)
[Python] grpc_tools: make PythonGrpcGenerator handle dot . in proto paths the same way as native Generator/PyiGenerator. (#39586)

Ruby

[Ruby] add remove_unused_artifacts to opt build. (#39593)

`v1.72.1`

Compare Source

This is release gRPC Core 1.72.1 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

Pin Cython to 3.1.1 #39609
- This solves several issues:
  1. #39588: Selecting unstable Cython releases when building gRPC Python artifacts.
  2. Using inconsistent Cython version in released platform-specific wheels within the same grpcio release.
  3. cython/cython#6878 Several published grpcio wheels were built with Cython 3.1.0 and are affected by Cython memory leak issue when using AsyncIO APIs (grpc.aio.*).
Fix Python 3.12 MacOS universal release artifact #39418

`v1.72.0`

Compare Source

This is release gRPC Core 1.72.0 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Instagram/LibCST (libcst)

aio-libs/multidict (multidict)

`v6.4.4`

Compare Source

=====

(2025-05-19)

Bug fixes

Fixed a segmentation fault when calling :py:meth:multidict.MultiDict.setdefault with a single argument -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:1160.
Fixed a segmentation fault when attempting to directly instantiate view objects
(multidict._ItemsView, multidict._KeysView, multidict._ValuesView) -- by :user:bdraco.

View objects now raise a proper :exc:TypeError with the message "cannot create '...' instances directly"
when direct instantiation is attempted.

View objects should only be created through the proper methods: :py:meth:multidict.MultiDict.items,
:py:meth:multidict.MultiDict.keys, and :py:meth:multidict.MultiDict.values.

Related issues and pull requests on GitHub:
:issue:1164.

Miscellaneous internal changes

:class:multidict.MultiDictProxy was refactored to rely only on
:class:multidict.MultiDict public interface and don't touch any implementation
details.

Related issues and pull requests on GitHub:
:issue:1150.
Multidict views were refactored to rely only on
:class:multidict.MultiDict API and don't touch any implementation
details.

Related issues and pull requests on GitHub:
:issue:1152.
Dropped internal _Impl class from pure Python implementation, both pure Python and C
Extension follows the same design internally now.

Related issues and pull requests on GitHub:
:issue:1153.

aio-libs/propcache (propcache)

`v0.3.2`

Compare Source

=====

(2025-06-09)

Improved documentation

Fixed incorrect decorator usage in the :func:~propcache.api.under_cached_property example code -- by :user:meanmail.

Related issues and pull requests on GitHub:
:issue:109.

Packaging updates and notes for downstreams

Updated to use Cython 3.1 universally across the build path -- by :user:lysnikolaou.

Related issues and pull requests on GitHub:
:issue:117.
Made Cython line tracing opt-in via the with-cython-tracing build config setting -- by :user:bdraco.

Previously, line tracing was enabled by default in :file:pyproject.toml, which caused build issues for some users and made wheels nearly twice as slow.

Now line tracing is only enabled when explicitly requested via pip install . --config-setting=with-cython-tracing=true or by setting the PROPCACHE_CYTHON_TRACING environment variable.

Related issues and pull requests on GitHub:
:issue:118.

pytest-dev/pytest (pytest)

`v8.4.0`

Compare Source

pytest 8.4.0 (2025-06-02)

Removals and backward incompatible breaking changes

#11372: Async tests will now fail, instead of warning+skipping, if you don't have any suitable plugin installed.
#12346: Tests will now fail, instead of raising a warning, if they return any value other than None.
#12874: We dropped support for Python 3.8 following its end of life (2024-10-07).
#12960: Test functions containing a yield now cause an explicit error. They have not been run since pytest 4.0, and were previously marked as an expected failure and deprecation warning.

See the docs <yield tests deprecated>{.interpreted-text role="ref"} for more information.

Deprecations (removal in next major release)

#10839: Requesting an asynchronous fixture without a [pytest_fixture_setup]{.title-ref} hook that resolves it will now give a DeprecationWarning. This most commonly happens if a sync test requests an async fixture. This should have no effect on a majority of users with async tests or fixtures using async pytest plugins, but may affect non-standard hook setups or autouse=True. For guidance on how to work around this warning see sync-test-async-fixture{.interpreted-text role="ref"}.

New features

#11538: Added pytest.RaisesGroup{.interpreted-text role="class"} as an equivalent to pytest.raises{.interpreted-text role="func"} for expecting ExceptionGroup{.interpreted-text role="exc"}. Also adds pytest.RaisesExc{.interpreted-text role="class"} which is now the logic behind pytest.raises{.interpreted-text role="func"} and used as parameter to pytest.RaisesGroup{.interpreted-text role="class"}. RaisesGroup includes the ability to specify multiple different expected exceptions, the structure of nested exception groups, and flags for emulating except* <except_star>{.interpreted-text role="ref"}. See assert-matching-exception-groups{.interpreted-text role="ref"} and docstrings for more information.
#12081: Added capteesys{.interpreted-text role="fixture"} to capture AND pass output to next handler set by --capture=.
#12504: pytest.mark.xfail{.interpreted-text role="func"} now accepts pytest.RaisesGroup{.interpreted-text role="class"} for the raises parameter when you expect an exception group. You can also pass a pytest.RaisesExc{.interpreted-text role="class"} if you e.g. want to make use of the check parameter.
#12713: New [--force-short-summary]{.title-ref} option to force condensed summary output regardless of verbosity level.

This lets users still see condensed summary output of failures for quick reference in log files from job outputs, being especially useful if non-condensed output is very verbose.
#12749: pytest traditionally collects classes/functions in the test module namespace even if they are imported from another file.

For example:

contents of src/domain.py

class Testament: ...

contents of tests/test_testament.py

from domain import Testament

def test_testament(): ...
```

In this scenario with the default options, pytest will collect the class [Testament]{.title-ref} from [tests/test_testament.py]{.title-ref} because it starts with [Test]{.title-ref}, even though in this case it is a production class being imported in the test module namespace.

This behavior can now be prevented by setting the new `collect_imported_tests`{.interpreted-text role="confval"} configuration option to `false`, which will make pytest collect classes/functions from test files **only** if they are defined in that file.

\-- by `FreerGit`{.interpreted-text role="user"}

#12765: Thresholds to trigger snippet truncation can now be set with truncation_limit_lines{.interpreted-text role="confval"} and truncation_limit_chars{.interpreted-text role="confval"}.

See truncation-params{.interpreted-text role="ref"} for more information.
#13125: console_output_style{.interpreted-text role="confval"} now supports times to show execution time of each test.
#13192: pytest.raises{.interpreted-text role="func"} will now raise a warning when passing an empty string to match, as this will match against any value. Use match="^$" if you want to check that an exception has no message.
#13192: pytest.raises{.interpreted-text role="func"} will now print a helpful string diff if matching fails and the match parameter has ^ and $ and is otherwise escaped.
#13192: You can now pass with pytest.raises(check=fn): <pytest.raises>{.interpreted-text role="func"}, where fn is a function which takes a raised exception and returns a boolean. The raises fails if no exception was raised (as usual), passes if an exception is raised and fn returns True (as well as match and the type matching, if specified, which are checked before), and propagates the exception if fn returns False (which likely also fails the test).
#13228: hidden-param{.interpreted-text role="ref"} can now be used in id of pytest.param{.interpreted-text role="func"} or in
ids of Metafunc.parametrize <pytest.Metafunc.parametrize>{.interpreted-text role="py:func"}.
It hides the parameter set from the test name.
#13253: New flag: --disable-plugin-autoload <disable_plugin_autoload>{.interpreted-text role="ref"} which works as an alternative to PYTEST_DISABLE_PLUGIN_AUTOLOAD{.interpreted-text role="envvar"} when setting environment variables is inconvenient; and allows setting it in config files with addopts{.interpreted-text role="confval"}.

Improvements in existing functionality

#10224: pytest's short and long traceback styles (how-to-modifying-python-tb-printing{.interpreted-text role="ref"})
now have partial 657{.interpreted-text role="pep"} support and will show specific code segments in the
traceback.

================================= FAILURES =================================
_______________________ test_gets_correct_tracebacks _______________________

test_tracebacks.py:12: in test_gets_correct_tracebacks
    assert manhattan_distance(p1, p2) == 1
           ^^^^^^^^^^^^^^^^^^^^^^^^^^
test_tracebacks.py:6: in manhattan_distance
    return abs(point_1.x - point_2.x) + abs(point_1.y - point_2.y)
                           ^^^^^^^^^
E   AttributeError: 'NoneType' object has no attribute 'x'

-- by ammaraskar{.interpreted-text role="user"}

#11118: Now pythonpath{.interpreted-text role="confval"} configures [$PYTHONPATH]{.title-ref} earlier than before during the initialization process, which now also affects plugins loaded via the [-p]{.title-ref} command-line option.

-- by millerdev{.interpreted-text role="user"}

#11381: The type parameter of the parser.addini method now accepts ["int"]{.title-ref} and "float" parameters, facilitating the parsing of configuration values in the configuration file.

Example:

def pytest_addoption(parser):
    parser.addini("int_value", type="int", default=2, help="my int value")
    parser.addini("float_value", type="float", default=4.2, help="my float value")

The [pytest.ini]{.title-ref} file:

[pytest]
int_value = 3
float_value = 5.4

#11525: Fixtures are now clearly represented in the output as a "fixture object", not as a normal function as before, making it easy for beginners to catch mistakes such as referencing a fixture declared in the same module but not requested in the test function.

-- by the-compiler{.interpreted-text role="user"} and glyphack{.interpreted-text role="user"}
#12426: A warning is now issued when pytest.mark.usefixtures ref{.interpreted-text role="ref"} is used without specifying any fixtures. Previously, empty usefixtures markers were silently ignored.
[#12707](https

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate-bot requested a review from a team as a code owner June 2, 2025 02:57

trusted-contributions-gcf bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Jun 2, 2025

blunderbuss-gcf bot assigned parthea Jun 2, 2025

product-auto-label bot added the size: l Pull request size is large. label Jun 2, 2025

gcf-owl-bot bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 2, 2025

trusted-contributions-gcf bot added the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 2, 2025

gcf-owl-bot bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 2, 2025

renovate-bot force-pushed the renovate/all branch from 30b2074 to 8516b14 Compare June 9, 2025 03:25

trusted-contributions-gcf bot added the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 9, 2025

gcf-owl-bot bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 9, 2025

renovate-bot force-pushed the renovate/all branch from 8516b14 to c953c2c Compare June 9, 2025 10:43

trusted-contributions-gcf bot added the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 9, 2025

gcf-owl-bot bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 9, 2025

renovate-bot force-pushed the renovate/all branch from c953c2c to 4dc026e Compare June 10, 2025 09:12

product-auto-label bot added size: xl Pull request size is extra large. and removed size: l Pull request size is large. labels Jun 10, 2025

trusted-contributions-gcf bot added the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 10, 2025

gcf-owl-bot bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 10, 2025

renovate-bot force-pushed the renovate/all branch from 4dc026e to 971a6b3 Compare June 10, 2025 17:03

trusted-contributions-gcf bot added the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 10, 2025

gcf-owl-bot bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 10, 2025

chore(deps): update all dependencies

74d2d65

renovate-bot force-pushed the renovate/all branch from 971a6b3 to 74d2d65 Compare June 12, 2025 22:46

trusted-contributions-gcf bot added the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 12, 2025

gcf-owl-bot bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Jun 12, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all dependencies #2401

chore(deps): update all dependencies #2401

Uh oh!

renovate-bot commented Jun 2, 2025 •

edited

Loading

Uh oh!

Uh oh!

Search code, repositories, users, issues, pull requests...

chore(deps): update all dependencies #2401

Are you sure you want to change the base?

chore(deps): update all dependencies #2401

Uh oh!

Conversation

renovate-bot commented Jun 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug fixes

Features

Deprecations (removal in next major release)

Bug fixes

Bug fixes

Features

Bug fixes

Miscellaneous internal changes

Bug fixes

Bug fixes

Bug fixes

Bug fixes

Bug fixes

Bug fixes

Features

Improved documentation

Packaging updates and notes for downstreams

Contributor-facing changes

Miscellaneous internal changes

Features

Packaging updates and notes for downstreams

Bug fixes

Packaging updates and notes for downstreams

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Core

C++

Python

Ruby

Python

Added

Updated

New Contributors

Added

Updated

New Contributors

Bug fixes

Miscellaneous internal changes

Improved documentation

Packaging updates and notes for downstreams

pytest 8.4.0 (2025-06-02)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

New features

contents of src/domain.py

contents of tests/test_testament.py

Improvements in existing functionality

Configuration

Uh oh!

Uh oh!

renovate-bot commented Jun 2, 2025 •

edited

Loading