[py] Bump dependencies for dev and fix script #16244
Merged
Add this suggestion to a batch that can be applied as a single commit. This suggestion is invalid because no changes were made to the code. Suggestions cannot be applied while the pull request is closed. Suggestions cannot be applied while viewing a subset of changes. Only one suggestion per line can be applied in a batch. Add this suggestion to a batch that can be applied as a single commit. Applying suggestions on deleted lines is not supported. You must change the existing code in this line in order to create a valid suggestion. Outdated suggestions cannot be applied. This suggestion has been applied or marked resolved. Suggestions cannot be applied from pending reviews. Suggestions cannot be applied on multi-line comments. Suggestions cannot be applied while the pull request is queued to merge. Suggestion cannot be applied right now. Please check back later.
User description
💥 What does this PR do?
This PR bumps development dependencies to their latest versions and re-generates dependency hashes.
Notes:
markdown-it-pytransitive dependency is pinned to version3.0.0because the latest version (4.0.0) requires Python 3.10 and we need to support 3.9.docutilstransitive dependency is pinned to version0.21.2because the latest version (0.22) isn't compatible with the version of sphinx we use.🔄 Types of changes
PR Type
Bug fix, Other
Description
• Fixed regex pattern in dependency update script to correctly parse pip list output
• Bumped multiple Python development dependencies to their latest versions including
certifi,charset-normalizer,cryptography,debugpy, and others• Regenerated dependency hashes in requirements_lock.txt to match updated versions
• Note:
markdown-it-pyremains pinned to version 3.0.0 for Python 3.9 compatibilityDiagram Walkthrough
File Walkthrough
update_py_dependencies.sh
Fix dependency update script regex patternscripts/update_py_dependencies.sh
• Fixed regex pattern in pip list parsing to match "Version" instead
of "Version Latest"
• This corrects the script's ability to properly
identify outdated packages from pip list output
requirements_lock.txt
Bump locked development dependencies to latest versionspy/requirements_lock.txt
• Updated
certififrom 2025.6.15 to 2025.8.3 with new SHA256 hashes•
Updated
charset-normalizerfrom 3.4.2 to 3.4.3 with new SHA256 hashes• Updated
cryptographyfrom 45.0.5 to 45.0.6 with new SHA256 hashes•
Updated
debugpyfrom 1.8.14 to 1.8.16 with new SHA256 hashes• Updated
multiple other dependencies including
distlib,docutils,filelock,jaraco-functools,multidict,nh3,requests,rich,tox, andvirtualenvrequirements.txt
Update development dependencies to latest versionspy/requirements.txt
• Updated multiple development dependencies to their latest versions
•
Key updates include
certifi,charset-normalizer,cryptography,debugpy,distlib,docutils,filelock, and others• All version bumps
align with the corresponding changes in requirements_lock.txt