Bump the testing group in /scripts with 6 updates

[dependabot]

Bumps the testing group in /scripts with 6 updates:

Package	From	To
chardet	7.4.3	7.6.0
gitpython	3.1.58	3.1.59
idna	3.18	3.19
mako	1.3.12	1.4.1
packaging	26.2	26.3
pygithub	2.9.1	2.10.0

Updates chardet from 7.4.3 to 7.6.0

Release notes

Sourced from chardet's releases.

7.6.0

Big release: a Cython scoring kernel joins mypyc in compiled wheels, every model retrained on a deduplicated corpus, UTF-7 fixed in both directions, and a guarantee that detect() never returns an encoding that can't decode your complete input.

Performance

• Compiled wheels now score bigram profiles through a small Cython kernel alongside mypyc, and the pair is 4.7x faster than the pure wheel on CPython 3.14. _kernel.py stays plain Python (PyPy and pure wheels run it interpreted, unchanged), and detection output is bit-identical. The kernel declares itself safe without the GIL, so free-threaded CPython scales instead of silently re-enabling the GIL on import: 3.14t runs the whole suite in ~340ms across 8 threads, the fastest configuration measured. Compiled builds now need both hooks: HATCH_BUILD_HOOK_ENABLE_MYPYC=true HATCH_BUILD_HOOK_ENABLE_CUSTOM=true.
• Added support for CPython 3.15, including the free-threaded build. No code changes were needed.

Bug Fixes

• detect() no longer returns an encoding that cannot decode the input it was given (#380, thanks @​yarikoptic). When the whole input has been examined and the winner's only multi-byte evidence is an incomplete trailing sequence, the best candidate that decodes the input completely wins instead. Genuinely truncated data keeps its answer.
• Fixed delimited ASCII data like |NAME,+LAY| misdetecting as UTF-7 (#371 follow-up, thanks @​agreenburg). The whole buffer must now actually decode as UTF-7, and a lone shifted character must land in a plausible script range.
• Signed UTF-7 no longer reads as ASCII: the BOM stage recognizes the four UTF-7 signature prefixes when the rest of the buffer decodes as UTF-7.
• Fixed short apostrophe-heavy English being labeled Scottish Gaelic or Breton: a rare-language label on an input under 128 bytes now needs a 0.03 lead over the best mainstream language (ADR-0005).
• Fixed Hungarian text losing to a Czech reading in confusion rescoring; tied pairs are compared only under language models both encodings have.
• Fixed space-padded text matching a degenerate Serbian model at high confidence; statistical scoring now skips repeated-whitespace bigrams. This also fixes windows-1251 logs misdetecting as windows-1250 (#379).
• Fixed EBCDIC text being invisible to the early pipeline stages, and the last two EBCDIC sibling misdetections.
• Fixed training normalization gaps that starved ISO-8859-16 and the 26 pre-euro encodings at exactly their distinguishing bytes.

Improvements

• Retrained every bigram model on a refreshed, deduplicated corpus with training provenance now recorded per model.
• New ANSI-art model for cp437, trained on 16,621 text-mode art files from 16colo.rs.
• Rare-language arbitration (ADR-0005): low-confidence statistical winners from languages with no documented legacy-encoding population yield to near-tied mainstream candidates.
• Confusion-group resolution is context-aware: per-occurrence votes, word-shape demotions, art-model exemption.
• Statistical dead heats no longer resolve by candidate enumeration order.
• Training pipeline hardening after a cache-loss post-mortem.

Full Changelog: chardet/chardet@7.5.1...7.6.0

7.5.1

Patch release: three detection fixes found while benchmarking against charset-normalizer's char-dataset.

Bug Fixes

• Fixed markup-declared encodings being reported under a name that can't decode the input. A page declaring Shift_JIS but using CP932 extension characters (like ①) came back as SHIFT_JIS, which fails .decode() on those same bytes. Superset promotion (CP932, CP949) now always fires when the reported name can't decode the data but the superset can.
• Fixed a lying charset declaration beating genuine UTF-8 content. A UTF-8 page declaring <meta charset="iso-8859-1"> came back as ISO-8859-1, which decodes to mojibake. Valid multi-byte UTF-8 now wins over a conflicting declaration.
• Fixed BOM-less UTF-16 byte-order detection for pure-CJK text: short Chinese UTF-16 samples came back with reversed endianness at full confidence. Byte order is now chosen by decoding both ways and comparing text quality.

Full Changelog: chardet/chardet@7.5.0...7.5.1

7.5.0

Accuracy and speed release: truncation-proof byte validity, statistical pruning worth ~2.9x, and half the peak memory.

Bug Fixes

• Fixed multi-byte encodings being eliminated when the input ends in an incomplete character. Byte-validity filtering used a one-shot strict decode, which cannot tell a truncated tail from corrupt data, so a single dangling lead byte dropped every CJK candidate and the result came down to input-length parity. Also reachable on complete files through chardet's own max_bytes and _SCAN_LIMIT slicing. Validity checks now decode incrementally with final=False. (#376, thanks @​aadsm)
• Fixed compat_names (the default) leaking internal Python codec names for seven encodings (ISO-8859-2, ISO-8859-6, ISO-8859-13, Windows-1250, Windows-1256, Windows-1257, CP874). (#374, thanks @​aadsm)
• Fixed compat_names leaking the internal cp932 codec name; detect() now returns CP932. (#375, thanks @​uttam12331)

... (truncated)

Changelog

Sourced from chardet's changelog.

7.6.0 (2026-08-14)

Performance:

• Compiled wheels now score bigram profiles through a small Cython kernel alongside mypyc, and the pair is 4.7x faster than the pure wheel on CPython 3.14. _kernel.py stays plain Python (PyPy and pure wheels run it interpreted, unchanged), _kernel.pxd adds C types at build time and ships nothing, and detection output is bit-identical. The kernel declares itself safe without the GIL, so free-threaded CPython scales instead of silently re-enabling the GIL on import: 3.14t runs the whole suite in ~340ms across 8 threads, the fastest configuration measured. Compiled builds now need both hooks::

  HATCH_BUILD_HOOK_ENABLE_MYPYC=true HATCH_BUILD_HOOK_ENABLE_CUSTOM=true uv build
  

  (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude)

• Added support for CPython 3.15, including the free-threaded build. No code changes were needed. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude)

Bug Fixes:

• Fixed delimited ASCII data like |NAME,+LAY| misdetecting as UTF-7, a follow-up to [#371](https://github.com/chardet/chardet/issues/371) <https://github.com/chardet/chardet/issues/371>. Two new checks: the whole buffer must actually decode as UTF-7 (+| is an illegal shift, so tabular data fails immediately), and a block encoding a single code unit must land in a script range where a lone shifted character plausibly occurs. +LAY decodes to U+2C06, Glagolitic; no genuine lone block in the corpus lands anywhere like it, while em dashes, ellipses, kanji, and accented letters all pass. (Dan Blanchard <https://github.com/dan-blanchard> via Claude)
• Signed UTF-7 no longer reads as ASCII. The BOM stage recognizes the four UTF-7 signature prefixes (+/v8- and friends) when the rest of the buffer decodes as UTF-7 --- the prefix alone is ordinary ASCII (a diff of V8 source paths starts with +/v8). This is a deliberate divergence from WHATWG's browser-security exclusion of UTF-7: chardet already detects the unsigned form, so refusing only the signed one made no sense. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude)
• detect() no longer returns an encoding that cannot decode the input it was given ([#380](https://github.com/chardet/chardet/issues/380) <https://github.com/chardet/chardet/issues/380>_). When the whole input has been examined and the winner's only multi-byte evidence is an incomplete trailing sequence, the best candidate that decodes the input completely wins instead. Genuinely truncated data keeps its answer: CJK cut mid-character, or input sliced at

... (truncated)

Commits

• dcf07fb Scope the 7.6.0 changelog to the 7.5.1..7.6.0 delta
• 1177ee0 Release 7.6.0
• e3a7d78 docs: final pre-release benchmark refresh on the 3,125-file corpus
• 6bbb2af Stop UTF-7 misdetections both ways: decode-gate the class, sniff the signature
• e20d6c1 docs: publish the first x86 benchmark run
• c7f62c5 Credit patrikha's PEP 263 request; make the x86 benchmark debuggable
• 9d63eca Credit deedy5's chunked-processing proposal; add an x86 benchmark workflow
• 060c6b8 docs: address the accurate parts of charset-normalizer's rebuttal
• 7e25984 Fix two docstring lint violations the pre-push check missed
• 75b751f docs: rewrite the 7.6.0 changelog as a point-in-time view of main vs 7.5.1
• Additional commits viewable in compare view

Updates gitpython from 3.1.58 to 3.1.59

Release notes

Sourced from gitpython's releases.

3.1.59 - Security

What's Changed

• prepare changelog for upcoming release by @​Byron in gitpython-developers/GitPython#2207
• Block file-reading Git options by @​Byron in gitpython-developers/GitPython#2208
• index: write blobs via git hash-object, not gitdb's odb.store by @​caroescm in gitpython-developers/GitPython#2209
• Block separate git directories during clone by @​Byron in gitpython-developers/GitPython#2210
• fix: harden config parsing boundaries by @​Byron in gitpython-developers/GitPython#2211
• repo.index.add() now respects worktree filters gitpython-developers/GitPython#2209

Full Changelog: gitpython-developers/GitPython@3.1.58...3.1.59

Commits

• 66340d7 prepare changelog prior to release
• a5e047d Merge pull request #2211 from gitpython-developers/config-sanitize-more
• ef7568e fix: ignore includes in submodule configuration
• 4b4e47f fix: preserve multiline config values when writing
• b473abb Merge pull request #2210 from gitpython-developers/fix-clone-unsafe-option
• 5ff52cc Merge pull request #2209 from caroescm/fix-index-add-chmod
• b68afff Block separate git directories during clone
• 93677a0 fix: index.add() now supports filters (#2021)
• 9729ed3 Merge pull request #2208 from gitpython-developers/security-fixes
• ce9d8e8 prepare next release
• Additional commits viewable in compare view

Updates idna from 3.18 to 3.19

Release notes

Sourced from idna's releases.

v3.19

• Restore the std3_rules option, which had no effect since changes to UTS #46 processing in Unicode 16. Note that uts46_remap() defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again.
• Performance improvements to UTS #46 mapping, particularly for ASCII-only domains.
• Test on free-threaded CPython with the GIL disabled and document thread safety.
• Expose the Unicode version of the generated tables as idna.unicode_version, and show it in idna --version.
• Add code, text, codepoint and position attributes to IDNAError so that the failed rule and the offending character can be identified without parsing the exception message.
• The deprecated transitional argument to encode() and uts46_remap() is now completely ignored, and gives a deprecation warning for the latter.
• Reject A-labels that are not the canonical Punycode encoding of their U-label.
• Fix CONTEXTJ violations raising IDNAError instead of InvalidCodepointContext.
• Consistently raise IDNAError for empty labels and non-ASCII bytes passed to label helper functions and the incremental codec.
• Add property-based tests, extended fuzzing targets, coverage measurement, and CI checks that the data tables match the generator output.
• Various code quality and tooling improvements.

Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for contributions to this release.

Changelog

Sourced from idna's changelog.

3.19 (2026-08-18)

• Restore the std3_rules option, which had no effect since changes to UTS #46 processing in Unicode 16. Note that uts46_remap() defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again.
• Performance improvements to UTS #46 mapping, particularly for ASCII-only domains.
• Test on free-threaded CPython with the GIL disabled and document thread safety.
• Expose the Unicode version of the generated tables as idna.unicode_version, and show it in idna --version.
• Add code, text, codepoint and position attributes to IDNAError so that the failed rule and the offending character can be identified without parsing the exception message.
• The deprecated transitional argument to encode() and uts46_remap() is now completely ignored, and gives a deprecation warning for the latter.
• Reject A-labels that are not the canonical Punycode encoding of their U-label.
• Fix CONTEXTJ violations raising IDNAError instead of InvalidCodepointContext.
• Consistently raise IDNAError for empty labels and non-ASCII bytes passed to label helper functions and the incremental codec.
• Add property-based tests, extended fuzzing targets, coverage measurement, and CI checks that the data tables match the generator output.
• Various code quality and tooling improvements.

Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for contributions to this release.

Commits

• 03a9a11 Release 3.19
• 2d2a7ef Pre-release 3.19rc0
• 5cce130 Merge pull request #268 from kjd/fix-std3-regex-alert
• 3914b75 Split the STD3 disallowed-character range so uppercase is explicit
• ce9fd98 Merge pull request #267 from kjd/housekeeping
• 809240c Fail CI when the license copyright year is behind the current year
• d9e16c5 Consolidate test fixtures, prune stale gitignore entries, and fix doc typos
• ef30fee Remove dead code and pare back superfluous comments
• b907913 Tighten the version support and Unicode notes in the README
• 6204cbe Ignore local build artifacts and stop packaging stray tooling config
• Additional commits viewable in compare view

Updates mako from 1.3.12 to 1.4.1

Release notes

Sourced from mako's releases.

1.4.1

Released: Wed Aug 5 2026

bug

• [bug] [installation] Fixed issue in the 1.4.0 packaging where the repository's internal tools/ directory was detected by setuptools package discovery and installed as a top-level tools package into site-packages, shadowing unrelated tools packages belonging to other applications. Package discovery is now limited to the mako package explicitly.

  References: #438

1.4.0

Released: Tue Aug 4 2026

changed

• [changed] [examples] The examples/bench folder has been removed as it used mostly long-obsolete template engines. The examples/wsgi/run_wsgi.py example has been updated to remove the use of the removed-in-Python-3.13 cgi module, and to be runnable as a module from the project root.

• [changed] [installation] Minimum MarkupSafe dependency version bumped from 0.9.2 to 2.0.

• [changed] [tests] The test suite now runs via nox. The old tox.ini remains however nox will be the only system that's maintained.

• [changed] [installation] Project metadata has been migrated to PEP 621 pyproject.toml-based configuration. setup.cfg remains only for the [mako_testing] section used by Mako's own test suite. The build requirements now set the minimum setuptools version at 77.0.0 in order to build Mako from source.

• [changed] [installation] Minimum Python version is now 3.10. Mako 1.4.0 has been tested up through Python 3.15.0b4.

bug

• [bug] [ext] The minimum Lingua version supported by LinguaMakoExtractor is now 4.16. The test suite had continued to pin Lingua below 4 long after the extractor itself was repaired to work with Lingua 4 in version 1.2.0, with the result that the plugin was no longer covered by tests at all; the pinned version additionally imports pkg_resources at startup, which is not present in current setuptools releases and left the package

... (truncated)

Commits

• See full diff in compare view

Updates packaging from 26.2 to 26.3

Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

• Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)
• PEP 808: accept Metadata-Version: 2.6. (#1194)
• Add a limit argument to parse_tag() for compressed tag sets. (#1220)
• Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)
• Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)
• Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

• Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)
• Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

• Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)
• Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)
• Fix an AttributeError when hashing internally trimmed versions. (#1242)
• Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

• Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)
• Normalize requested extra names before comparing or hashing requirements. (#644)
• Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)
• Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)
• Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)
• Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)
• Keep the parentheses of a nested group when serializing markers. (#1316)
• Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)
• Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)
• Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)
• Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)
• Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

• Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)
• Accept the UTF-8 charset case-insensitively in email payloads. (#1330)
• Reject malformed Description-Content-Type values. (#1329)
• Don't rewrite user values that contain {field} placeholders in error messages. (#1327)
• Route multipart email payloads to unparsed instead of asserting. (#1247)
• Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)
• Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03

Features:

Add a public :class:~packaging.ranges.VersionRange API and

:meth:SpecifierSet.to_range() <packaging.specifiers.SpecifierSet.to_range>,

representing the versions a specifier set accepts as an interval set that

supports intersection, union, difference, complement, set relations,

membership tests, and filtering.

:meth:~packaging.ranges.VersionRange.to_specifier_set converts a range back

to a :class:~packaging.specifiers.SpecifierSet where a PEP 440 form exists.

(:pull:1267, :pull:1270, :pull:1298)
PEP 808: accept Metadata-Version: 2.6. (:pull:1194)
Add a limit argument to parse_tag() for compressed tag sets.

(:issue:1220)
Add a prefer_sdist_predicate argument to Pylock.select() to prefer

source distributions over wheels for selected packages. (:pull:1334)
Add :func:~packaging.tags.pure_python_tags to generate the pure-Python

tags for a Python version without touching the running platform.

(:pull:1346)
Add :meth:SpecifierSet.is_subset() <packaging.specifiers.SpecifierSet.is_subset>, :meth:~packaging.specifiers.SpecifierSet.is_superset,

and :meth:~packaging.specifiers.SpecifierSet.is_disjoint, which compare the

versions two specifier sets accept. (:pull:1313)

Behavior adaptations:

Drop support for Python 3.8; packaging now requires Python 3.9 or later.

(:pull:1157)
Prefer native linux_* platform tags over manylinux and musllinux

tags on Linux. (:issue:160)

Fixes for versions and specifiers:

Raise InvalidVersion instead of TypeError when Version is given a

non-string. (:pull:1319)
Raise InvalidVersion for non-string pre-release letters passed to

Version.from_parts. (:pull:1241)
Fix an AttributeError when hashing internally trimmed versions.

(:pull:1242)
Fix SpecifierSet.is_unsatisfiable for post-release boundary

intersections. (:pull:1257)

Fixes for requirements and markers:

Make Requirement.__hash__ consistent with __eq__ for

trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and

foo==1.0.0.0), so equal requirements hash equal and deduplicate in

sets and dicts. (:pull:1232)

</tr></table>

... (truncated)

Commits

• 929fd4b Bump for release
• f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
• f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
• b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
• 2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
• 413d006 docs: changelog for 26.3 (#1343)
• 4eb0753 docs(metadata): explain selective field validation (#1342)
• 77e9ed4 feat(tags): add pure Python tag generator (#1346)
• 7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
• 45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
• Additional commits viewable in compare view

Updates pygithub from 2.9.1 to 2.10.0

Release notes

Sourced from pygithub's releases.

2.10.0

Notable changes

Drop Python 3.9 support due to End-of-Life

Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features

• Allow to specify the Github API version by @​EnricoMi in PyGithub/PyGithub#3480
• Add issue dependency endpoints by @​james-geiger in PyGithub/PyGithub#3477

Improvements

• Add incomplete_results property to PaginatedList by @​Felixoid in PyGithub/PyGithub#3396
• Add WorkflowRun.get_attempt and Repository.get_workflow_job functions by @​cecheta in PyGithub/PyGithub#3401
• Add support for head_repo when creating pull request by @​shannon in PyGithub/PyGithub#3479
• Add max_rate_limit_wait to GithubRetry to cap rate limit backoff by @​tanistheta in PyGithub/PyGithub#3540
• Add return_run_details parameter to Workflow.create_dispatch by @​SebastienSyd in PyGithub/PyGithub#3471
• Update SecurityAndAnalysis by @​EnricoMi in PyGithub/PyGithub#3503

Bug Fixes

• Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() by @​Krishnachaitanyakc in PyGithub/PyGithub#3472
• Fix GithubException.__str__ decoding bytes data by @​SAY-5 in PyGithub/PyGithub#3494
• Fixing OrganizationVariable.value by properly using base class by @​EnricoMi in PyGithub/PyGithub#3507
• Parse only the query string for PaginatedList.totalCount by @​Noethix55555 in PyGithub/PyGithub#3518
• Encode boolean query parameters as lowercase by @​Noethix55555 in PyGithub/PyGithub#3516
• Fix doubled slash in request path for base_url with trailing slash by @​Noethix55555 in PyGithub/PyGithub#3537
• Fix WorkflowRun schema suggestion by @​EnricoMi in PyGithub/PyGithub#3559
• Fix OAuth2 authorization state / code_verifier parameters by @​TheoGoudout in PyGithub/PyGithub#3440
• Allow creating custom property with values_editable_by param by @​chawlajay9 in PyGithub/PyGithub#3548
• Fix OrganizationSecret.edit() to seal the value and use PUT by @​Noethix55555 in PyGithub/PyGithub#3529
• Fix lazy retrieval of latest tag name by @​sathieu in PyGithub/PyGithub#3487
• Fix typing and typos by @​EnricoMi in PyGithub/PyGithub#3485

Maintenance

• Add support for Python 3.15 and drop EOL 3.9 by @​hugovk in PyGithub/PyGithub#3551
• Move self-link awareness into CompletableGithubObject by @​EnricoMi in PyGithub/PyGithub#3432
• Add documentation for agents, add Claude skills by @​EnricoMi in PyGithub/PyGithub#3509
• Add sphinx-copybutton for code blocks by @​DivyanshiGautam31 in PyGithub/PyGithub#3493
• Add support to OpenAPI script for applying schema to methods by @​EnricoMi in PyGithub/PyGithub#3374
• Improve OpenAPI apply properties and methods by @​EnricoMi in PyGithub/PyGithub#3495
• Fix OpenAPI method verb detection by @​EnricoMi in PyGithub/PyGithub#3496
• Add OpenAPI script tests by @​EnricoMi in PyGithub/PyGithub#3489
• Fix OpenAPI apply method by @​EnricoMi in PyGithub/PyGithub#3498
• Reordering OpenAPI test sequence by @​EnricoMi in PyGithub/PyGithub#3500
• Apply typing convention by @​EnricoMi in PyGithub/PyGithub#3504
• Bump mypy Python version to 3.12 by @​EnricoMi in PyGithub/PyGithub#3505
• Use @overload to type get_user by @​xmo-odoo in PyGithub/PyGithub#3502
• Add overload type annotations by @​EnricoMi in PyGithub/PyGithub#3506
• Simplify OrganizationVariable by @​EnricoMi in PyGithub/PyGithub#3508
• Add OpenAPI script filename option to create class by @​EnricoMi in PyGithub/PyGithub#3512
• OpenAPI script improvements by @​EnricoMi in PyGithub/PyGithub#3511

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.10.0 (August 20, 2026)

Notable changes ^^^^^^^^^^^^^^^

Drop Python 3.9 support due to End-of-Life """""""""""""""""""""""""""""""""""""""""" Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features ^^^^^^^^^^^^

• Allow to specify the Github API version ([#3480](https://github.com/pygithub/pygithub/issues/3480) <https://github.com/PyGithub/PyGithub/pull/3480>) (546b0ee7e <https://github.com/PyGithub/PyGithub/commit/546b0ee7e>)
• Add issue dependency endpoints ([#3477](https://github.com/pygithub/pygithub/issues/3477) <https://github.com/PyGithub/PyGithub/pull/3477>) (b0ee6e0c7 <https://github.com/PyGithub/PyGithub/commit/b0ee6e0c7>)

Improvements ^^^^^^^^^^^^

• Add incomplete_results property to PaginatedList ([#3396](https://github.com/pygithub/pygithub/issues/3396) <https://github.com/PyGithub/PyGithub/pull/3396>) (7806e7dcc <https://github.com/PyGithub/PyGithub/commit/7806e7dcc>)
• Add WorkflowRun.get_attempt and Repository.get_workflow_job functions ([#3401](https://github.com/pygithub/pygithub/issues/3401) <https://github.com/PyGithub/PyGithub/pull/3401>) (fdf9ed869 <https://github.com/PyGithub/PyGithub/commit/fdf9ed869>)
• Add support for head_repo when creating pull request ([#3479](https://github.com/pygithub/pygithub/issues/3479) <https://github.com/PyGithub/PyGithub/pull/3479>) (8ddfd6b11 <https://github.com/PyGithub/PyGithub/commit/8ddfd6b11>)
• Add max_rate_limit_wait to GithubRetry to cap rate limit backoff ([#3540](https://github.com/pygithub/pygithub/issues/3540) <https://github.com/PyGithub/PyGithub/pull/3540>) (8b50a098f <https://github.com/PyGithub/PyGithub/commit/8b50a098f>)
• Add return_run_details parameter to Workflow.create_dispatch ([#3471](https://github.com/pygithub/pygithub/issues/3471) <https://github.com/PyGithub/PyGithub/pull/3471>) (162ce9d0e <https://github.com/PyGithub/PyGithub/commit/162ce9d0e>)
• Update SecurityAndAnalysis ([#3503](https://github.com/pygithub/pygithub/issues/3503) <https://github.com/PyGithub/PyGithub/pull/3503>) (9674c5799 <https://github.com/PyGithub/PyGithub/commit/9674c5799>)

Bug Fixes ^^^^^^^^^

• Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() ([#3472](https://github.com/pygithub/pygithub/issues/3472) <https://github.com/PyGithub/PyGithub/pull/3472>) (a2e76eb8e <https://github.com/PyGithub/PyGithub/commit/a2e76eb8e>)
• Fix GithubException.__str__ decoding bytes data ([#3494](https://github.com/pygithub/pygithub/issues/3494) <https://github.com/PyGithub/PyGithub/pull/3494>) (7a3b22ed6 <https://github.com/PyGithub/PyGithub/commit/7a3b22ed6>)
• Fixing OrganizationVariable.value by properly using base class ([#3507](https://github.com/pygithub/pygithub/issues/3507) <https://github.com/PyGithub/PyGithub/pull/3507>) (39a7464ff <https://github.com/PyGithub/PyGithub/commit/39a7464ff>)
• Parse only the query string for PaginatedList.totalCount ([#3518](https://github.com/pygithub/pygithub/issues/3518) <https://github.com/PyGithub/PyGithub/pull/3518>) (645d2a2e8 <https://github.com/PyGithub/PyGithub/commit/645d2a2e8>)
• Encode boolean query parameters as lowercase ([#3516](https://github.com/pygithub/pygithub/issues/3516) <https://github.com/PyGithub/PyGithub/pull/3516>) (f4e29299e <https://github.com/PyGithub/PyGithub/commit/f4e29299e>)
• Fix doubled slash in request path for base_url with trailing slash ([#3537](https://github.com/pygithub/pygithub/issues/3537) <https://github.com/PyGithub/PyGithub/pull/3537>) (c15572f23 <https://github.com/PyGithub/PyGithub/commit/c15572f23>)
• Fix WorkflowRun schema suggestion ([#3559](https://github.com/pygithub/pygithub/issues/3559) <https://github.com/PyGithub/PyGithub/pull/3559>) (5f707d64b <https://github.com/PyGithub/PyGithub/commit/5f707d64b>)
• Fix OAuth2 authorization state / code_verifier parameters ([#3440](https://github.com/pygithub/pygithub/issues/3440) <https://github.com/PyGithub/PyGithub/pull/3440>) (4785224bc <https://github.com/PyGithub/PyGithub/commit/4785224bc>)
• Allow creating custom property with values_editable_by param ([#3548](https://github.com/pygithub/pygithub/issues/3548) <https://github.com/PyGithub/PyGithub/pull/3548>) (134f38a63 <https://github.com/PyGithub/PyGithub/commit/134f38a63>)
• Fix OrganizationSecret.edit() to seal the value and use PUT ([#3529](https://github.com/pygithub/pygithub/issues/3529) <https://github.com/PyGithub/PyGithub/pull/3529>) (4f8674b72 <https://github.com/PyGithub/PyGithub/commit/4f8674b72>)
• Fix lazy retrieval of latest tag name ([#3487](https://github.com/pygithub/pygithub/issues/3487) <https://github.com/PyGithub/PyGithub/pull/3487>) (33071b35d <https://github.com/PyGithub/PyGithub/commit/33071b35d>)
• Fix typing and typos ([#3485](https://github.com/pygithub/pygithub/issues/3485) <https://github.com/PyGithub/PyGithub/pull/3485>) (fd7abf6a7 <https://github.com/PyGithub/PyGithub/commit/fd7abf6a7>)

Maintenance ^^^^^^^^^^^

• Add support for Python 3.15 and drop EOL 3.9 ([#3551](https://github.com/pygithub/pygithub/issues/3551) <https://github.com/PyGithub/PyGithub/pull/3551>) (5e2de3144 <https://github.com/PyGithub/PyGithub/commit/5e2de3144>)
• Move self-link awareness into CompletableGithubObject ([#3432](https://github.com/pygithub/pygithub/issues/3432) <https://github.com/PyGithub/PyGithub/pull/3432>) (92ec3fab0 <https://github.com/PyGithub/PyGithub/commit/92ec3fab0>)
• Add documentation for agents, add Claude skills ([#3509](https://github.com/pygithub/pygithub/issues/3509) <https://github.com/PyGithub/PyGithub/pull/3509>) (28f140d10 <https://github.com/PyGithub/PyGithub/commit/28f140d10>)
• Add sphinx-copybutton for code blocks ([#3493](https://github.com/pygithub/pygithub/issues/3493) <https://github.com/PyGithub/PyGithub/pull/3493>_)
• Add support to OpenAPI script for applying schema to methods ([#3374](https://github.com/pygithub/pygithub/issues/3374) <https://github.com/PyGithub/PyGithub/pull/3374>) (b7a6d2324 <https://github.com/PyGithub/PyGithub/commit/b7a6d2324>)
• Improve OpenAPI apply properties and methods ([#3495](https://github.com/pygithub/pygithub/issues/3495) <https://github.com/PyGithub/PyGithub/pull/3495>_)
• Fix OpenAPI method verb detection ([#3496](https://github.com/pygithub/pygithub/issues/3496) <https://github.com/PyGithub/PyGithub/pull/3496>_)
• Add OpenAPI script tests ([#3489](https://github.com/pygithub/pygithub/issues/3489) <https://github.com/PyGithub/PyGithub/pull/3489>) (09242d9b0 <https://github.com/PyGithub/PyGithub/commit/09242d9b0>)
• Fix OpenAPI apply method ([#3498](https://github.com/pygithub/pygithub/issues/3498) <https://github.com/PyGithub/PyGithub/pull/3498>) (8f8697235 <https://github.com/PyGithub/PyGithub/commit/8f8697235>)

... (truncated)

Commits

• 5cdf6ab Release 2.10.0 (#3560)
• 33071b3 Fix lazy retrieval of latest tag name (#3487)
• 4f8674b Fix OrganizationSecret.edit() to seal the value and use PUT (#3529)
• c63d09e docs: add example for uploading multiple files in a single commit (#3545)
• 4785224 Fix OAuth2 authorization state / code_verifier parameters (#3440)
• 134f38a Allow creating custom property with values_editable_by param (#3548)
• 5f707d6 Fix WorkflowRun schema suggestion (#3559)
• 8280929 docs: add exception handling example (#3543)
• c15572f Fix doubled slash in request path for base_url with trailing slash (#3537)
• 162ce9d Add return_run_details parameter to Workflow.create_dispatch (#3471)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Thanks for your pull request!

A maintainer will review this pull request and trigger functional testing by adding the ok-to-test label.

This comment was auto-generated by GitHub Actions.