[dependabot]

Bumps the development group with 9 updates:

Package	From	To
ruff	0.16.3	0.17.2
grpcio-tools	1.83.0	1.84.1
hypothesis	6.165.10	6.168.5
inline-snapshot	0.35.4	0.36.1
pytest-mock	3.15.1	3.17.0
types-protobuf	7.34.1.20260816	7.35.1.20260906
mkdocs-git-revision-date-localized-plugin	1.5.3	1.6.0
mkdocstrings-python	2.0.7	2.0.9
markupsafe	3.0.3	3.0.4

Updates ruff from 0.16.3 to 0.17.2

Release notes

Sourced from ruff's releases.

0.17.2

Release Notes

Released on 2026-10-22.

Preview features

• [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

• Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
• [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
• [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
• [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
• [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

• Avoid intermediate names in lint name resolution (#29506)
• Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
• Share postfix parsing and reduce expression copies (#29480)

Configuration

• [pylint] Add a configurable allowlist for magic-value-comparison (PLR2004) (#18961)

Documentation

• Clarify documentation and correct stale guidance (#29374)
• [pyupgrade] Remove mentions of variance related to fix safety (UP040, UP047) (#29592)

Contributors

• @​fixfon
• @​MichaReiser
• @​zaniebot
• @​FrancescoPezzella
• @​anishgirianish
• @​rajveer3x
• @​charliermarsh
• @​LckyLike
• @​DaniBodor

Install ruff 0.17.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.2/ruff-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.2

Released on 2026-10-22.

Preview features

• [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

• Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
• [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
• [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
• [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
• [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

• Avoid intermediate names in lint name resolution (#29506)
• Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
• Share postfix parsing and reduce expression copies (#29480)

Configuration

• [pylint] Add a configurable allowlist for magic-value-comparison (PLR2004) (#18961)

Documentation

• Clarify documentation and correct stale guidance (#29374)
• [pyupgrade] Remove mentions of variance related to fix safety (UP040, UP047) (#29592)

Contributors

• @​fixfon
• @​MichaReiser
• @​zaniebot
• @​FrancescoPezzella
• @​anishgirianish
• @​rajveer3x
• @​charliermarsh
• @​LckyLike
• @​DaniBodor

0.17.1

Released on 2026-10-15.

Preview features

• [pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

... (truncated)

Commits

• 30516b4 Bump version to 0.17.2 (#29637)
• 59a9e85 [ty] Generalize nested types in inferred return types (#29488)
• 0d562aa [ty] Check inherited attribute conflicts (#28559)
• 48dcdd0 [ty] Restrict range implications from gradual equivalence (#29577)
• 734d75a [ty] Check for unsatisfiable bodies before existentially quantifying (#29504)
• b0f9526 [ty] Preserve checks for recursive descriptor setter types (#29148)
• 32869b4 Avoid creating deployments for automation jobs (#29626)
• ec891ba Link the commit in pull request report footers (#29621)
• 8958748 [ty] Publish ecosystem reports from GitHub Actions (#29609)
• 01f5394 [ty] Publish typing conformance reports from GitHub Actions (#29608)
• Additional commits viewable in compare view

Updates grpcio-tools from 1.83.0 to 1.84.1

Release notes

Sourced from grpcio-tools's releases.

Release v1.84.1

This is release gRPC Core 1.84.1 (gimbal).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [Backport][v1.84.x][security] Update gRPC repo roots. (#43700)

Release v1.84.0

This is release 1.84.0 (gimbal) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [promise_based_filter] enable v2_non_owning_waker_implementation experiment. (#43253)
• [xDS] allow server listener address to match wildcard port. (#43247)
• [WRR] remove env var guard for custom backend metrics. (#43198)
• [subchannel] enable connection scaling service config fields. (#43116)
• [subchannel] add metrics as per A94. (#43140)
• Fix incorrect hostname suffix matching in no_proxy handling (prevents proxy bypass). (#41915)

C#

• [C# Grpc.Tools] Add native macOS ARM64 support via universal binaries. (#41222)

Python

• [Python] Fix -Werror=unused-result error triggered by Cythonized code. (#43313)
• [Python] Release Python 3.15 wheels publicly. (#43259)
• [Python][AsyncIO] Fixed reference cycles. (#43121)
• [Python] fix: remove ghost key in grpc.aio.Metadata.delitem when last value is deleted. (#42974)
• [Python] Fix the StatusCode Enums to be int. (#43167)
• [Python] Fixed the parenthesis placement. (#43111)
• [Python] Removed UsageError exception from registered method. (#43086)
• [Python] Added registered methods support in AsyncIO stack . (#41796)
• [Python] AIO Part 4 - Typehints fixes and add Pyright for aio/_channel.py. (#42736)
• [Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#43000)
• [Python] Observability plugin fixes. (#42785)

... (truncated)

Commits

• b0c0c4f [Release] Bump version to 1.84.1 (on v1.84.x branch) (#43709)
• 3252a89 Bump release version to 1.84.0 on v1.84.x branch (#43405)
• c633e39 [Release] Bump version to 1.84.0-pre2 (on v1.84.x branch) (#43401)
• 12cafee [Backport][v1.84.x] Revert "[Python] Revert Python 3.15 changes due to sanity...
• 56e86cb Bump release version to 1.84.0-pre1 on v1.84.x branch (#43327)
• 5646e4c [Python] Revert Python 3.15 changes due to sanity failure (#43293)
• f311bf0 [Python] Release Python 3.15 wheels publicly (#43259)
• 8f3bb34 [Release] Bump version to 1.84.0-dev (on master branch) (#42935)
• See full diff in compare view

Updates hypothesis from 6.165.10 to 6.168.5

Commits

• ca2a4c6 Bump hypothesis version to 6.168.5 and update changelog
• c1c9957 Merge pull request #4894 from MarcoGorelli/django-from-field-return-type
• d862501 Bump hypothesis version to 6.168.4 and update changelog
• de4ec1c Merge pull request #4887 from HypothesisWorks/create-pull-request/patch
• 8a80889 add pypy312 support
• 9ee265d Update pinned dependencies
• f92f61c Fix the return type of django's from_field
• 44b82b2 Bump hypothesis version to 6.168.3 and update changelog
• aeaafb5 Merge pull request #4888 from gpacix/fix-quadratic-statistics
• f3f4a29 wording, remove hardcoded test
• Additional commits viewable in compare view

Updates inline-snapshot from 0.35.4 to 0.36.1

Release notes

Sourced from inline-snapshot's releases.

v0.36.1

Changed

• Defer generating source representations until they are needed, improving performance when comparing matching snapshots with updates disabled.

• Speed up snapshot conversion for literal constants, especially in large lists and dictionaries.

• Built-in literal values are always managed; attempting to register their types as unmanaged raises TypeError.

• Scope unmanaged type registrations to the current snapshot context, inheriting registrations from the parent context.

• Speed up snapshot comparisons by avoiding unnecessary deep copies of immutable built-in values.

• Speed up snapshot conversion by reading AST constant values directly instead of compiling and evaluating them.

Fixed

• Respect show-updates in the short report, hiding snapshot representation change messages when it is disabled.

0.36.0

Added

• The customize hook now receives a snapshot_value argument with the corresponding existing snapshot value, or ... when there is no corresponding snapshot.

Changelog

Sourced from inline-snapshot's changelog.

v0.36.1 — 2026-10-12

Changed

• Defer generating source representations until they are needed, improving performance when comparing matching snapshots with updates disabled.

• Speed up snapshot conversion for literal constants, especially in large lists and dictionaries.

• Built-in literal values are always managed; attempting to register their types as unmanaged raises TypeError.

• Scope unmanaged type registrations to the current snapshot context, inheriting registrations from the parent context.

• Speed up snapshot comparisons by avoiding unnecessary deep copies of immutable built-in values.

• Speed up snapshot conversion by reading AST constant values directly instead of compiling and evaluating them.

Fixed

• Respect show-updates in the short report, hiding snapshot representation change messages when it is disabled.

0.36.0 — 2026-10-02

Added

• The customize hook now receives a snapshot_value argument with the corresponding existing snapshot value, or ... when there is no corresponding snapshot.

Commits

• 5471fe0 bump: version 0.36.0 → 0.36.1
• 17fd47d Merge pull request #396 from 15r10nk/fix/scriv-release-tag-prefix
• a8c4ebd ci: align Scriv release tags with Commitizen
• 114e1d0 Merge pull request #392 from 15r10nk/performance
• f9df27d perf: measure snapshot comparisons with cold caches
• 65b7cec perf: evaluate AST constants directly
• e907681 perf: skip deepcopy for immutable built-in values
• e9af200 perf: speed up literal snapshot conversion and scope unmanaged types
• 40be64f perf: defer snapshot source representation generation
• 323de2f perf: skip update processing for matching snapshots
• Additional commits viewable in compare view

Updates pytest-mock from 3.15.1 to 3.17.0

Release notes

Sourced from pytest-mock's releases.

v3.17.0

2026-10-17

• #641: Failures of mock assertions such as assert_called_with are again reported only once, instead of two or three times with the original error from the mock module chained before them.
• #642: Mock assertion failures no longer show misleading introspection when they are not about the arguments of the last call: assert_called, assert_called_once, assert_not_called, assert_any_call, their await counterparts, and assert_called_once_with/assert_awaited_once_with when the mock was not called (awaited) exactly once. The introspection also no longer reports arguments passed by position versus by keyword as different for autospecced mocks, and no longer shows empty Args:/Kwargs: sections when assertion rewriting is not available.
• #643: assert_has_calls and assert_has_awaits failures no longer show pytest introspection, which compared the expected and actual calls position by position and so reported differences between unrelated calls. The mock's own message, listing the expected and actual calls, is still shown.

v3.16.1

2026-10-17

• #617: Fixed assert_has_calls raising ValueError instead of AssertionError (or showing misleading introspection) when the expected calls are plain tuples rather than call(...) objects, such as (args, kwargs) entries of another mock's call_args_list, (args,), (kwargs,), (name, args) or (name, kwargs).
• #621: Fixed mocker.stop() sometimes stopping the wrong mock, for example with mocks from mocker.create_autospec.
• #621: mocker.stop() now undoes the most recent patch first when the same object is used in several patches.
• #623: Fixed misleading introspection in assert_has_awaits failures, and assert_has_calls/assert_has_awaits raising IndexError instead of AssertionError when calls is passed by keyword.
• #624: Clear spy_return_iter after a spied synchronous or asynchronous function raises, matching spy_return.
• #627: Document async_stub await assertions and the distinction between call and await tracking.
• #629: Fixed mocker.resetall() skipping the mocks patched with mocker.patch.multiple(), both the ones it creates and the ones passed explicitly.
• #630: mocker.resetall() now also resets spy_return and spy_exception of spies, like it already did for spy_return_list and spy_return_iter, and no longer overwrites attributes with these names on mocks that are not spies.
• #633: Fixed spies on classmethod, staticmethod, builtins and classes returning a MagicMock instead of calling the spied code after mocker.resetall(side_effect=True). Resetting a spy's side_effect now goes back to calling the spied code, also clearing any side_effect set on the spy.

v3.16.0

2026-09-27

• #604: Fixed duplicate_iterators=True for async functions spied with mocker.spy.
• #611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
• #606: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.
• #547: Added SpyType for annotating mocker.spy results.
• Dropped support for EOL Python 3.9.
• #147: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.
• Added support for Python 3.15.

Changelog

Sourced from pytest-mock's changelog.

3.17.0

2026-10-17

• [#641](https://github.com/pytest-dev/pytest-mock/issues/641) <https://github.com/pytest-dev/pytest-mock/pull/641>_: Failures of mock assertions such as assert_called_with are again reported only once, instead of two or three times with the original error from the mock module chained before them.
• [#642](https://github.com/pytest-dev/pytest-mock/issues/642) <https://github.com/pytest-dev/pytest-mock/pull/642>_: Mock assertion failures no longer show misleading introspection when they are not about the arguments of the last call: assert_called, assert_called_once, assert_not_called, assert_any_call, their await counterparts, and assert_called_once_with/assert_awaited_once_with when the mock was not called (awaited) exactly once. The introspection also no longer reports arguments passed by position versus by keyword as different for autospecced mocks, and no longer shows empty Args:/Kwargs: sections when assertion rewriting is not available.
• [#643](https://github.com/pytest-dev/pytest-mock/issues/643) <https://github.com/pytest-dev/pytest-mock/pull/643>_: assert_has_calls and assert_has_awaits failures no longer show pytest introspection, which compared the expected and actual calls position by position and so reported differences between unrelated calls. The mock's own message, listing the expected and actual calls, is still shown.

3.16.1

2026-10-17

• [#617](https://github.com/pytest-dev/pytest-mock/issues/617) <https://github.com/pytest-dev/pytest-mock/pull/617>_: Fixed assert_has_calls raising ValueError instead of AssertionError (or showing misleading introspection) when the expected calls are plain tuples rather than call(...) objects, such as (args, kwargs) entries of another mock's call_args_list, (args,), (kwargs,), (name, args) or (name, kwargs).
• [#621](https://github.com/pytest-dev/pytest-mock/issues/621) <https://github.com/pytest-dev/pytest-mock/pull/621>_: Fixed mocker.stop() sometimes stopping the wrong mock, for example with mocks from mocker.create_autospec.
• [#621](https://github.com/pytest-dev/pytest-mock/issues/621) <https://github.com/pytest-dev/pytest-mock/pull/621>_: mocker.stop() now undoes the most recent patch first when the same object is used in several patches.
• [#623](https://github.com/pytest-dev/pytest-mock/issues/623) <https://github.com/pytest-dev/pytest-mock/pull/623>_: Fixed misleading introspection in assert_has_awaits failures, and assert_has_calls/assert_has_awaits raising IndexError instead of AssertionError when calls is passed by keyword.
• [#624](https://github.com/pytest-dev/pytest-mock/issues/624) <https://github.com/pytest-dev/pytest-mock/pull/624>_: Clear spy_return_iter after a spied synchronous or asynchronous function raises, matching spy_return.
• [#627](https://github.com/pytest-dev/pytest-mock/issues/627) <https://github.com/pytest-dev/pytest-mock/pull/627>_: Document async_stub await assertions and the distinction between call and await tracking.
• [#629](https://github.com/pytest-dev/pytest-mock/issues/629) <https://github.com/pytest-dev/pytest-mock/pull/629>_: Fixed mocker.resetall() skipping the mocks patched with mocker.patch.multiple(), both the ones it creates and the ones passed explicitly.
• [#630](https://github.com/pytest-dev/pytest-mock/issues/630) <https://github.com/pytest-dev/pytest-mock/pull/630>_: mocker.resetall() now also resets spy_return and spy_exception of spies, like it already did for spy_return_list and spy_return_iter, and no longer overwrites attributes with these names on mocks that are not spies.
• [#633](https://github.com/pytest-dev/pytest-mock/issues/633) <https://github.com/pytest-dev/pytest-mock/pull/633>_: Fixed spies on classmethod, staticmethod, builtins and classes returning a MagicMock instead of calling the spied code after mocker.resetall(side_effect=True). Resetting a spy's side_effect now goes back to calling the spied code, also clearing any side_effect set on the spy.

3.16.0

2026-09-27

• [#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixed duplicate_iterators=True for async functions spied with mocker.spy.
• [#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
• [#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.
• [#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: Added SpyType for annotating mocker.spy results.
• Dropped support for EOL Python 3.9.
• [#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.
• Added support for Python 3.15.

Commits

• 5c2f207 Release 3.17.0
• 9625271 Bump the minor version for releases that change existing behavior
• 34b87ae Drop introspection from assert_has_calls and assert_has_awaits (#643)
• 866520f Only show introspection for failures about the call arguments (#642)
• 5ab41c1 Do not chain the original mock error to wrapped assertion failures (#641)
• 1916b14 Merge pull request #635 from nicoddemus/docs-contributing-resetall
• 212fcd9 Document resetall, the changelog format and running tests with tox
• 9374b2c Merge pull request #634 from pytest-dev/release-3.16.1
• fab730d Release 3.16.1
• d26d41b Merge pull request #627 from xiehuanyi/docs/async-stub-awaits-20261012-r2
• Additional commits viewable in compare view

Updates types-protobuf from 7.34.1.20260816 to 7.35.1.20260906

Commits

• See full diff in compare view

Updates mkdocs-git-revision-date-localized-plugin from 1.5.3 to 1.6.0

Release notes

Sourced from mkdocs-git-revision-date-localized-plugin's releases.

v1.6.0

Highlights

Faster builds

Every page asked git which tag pointed at its commit, and asked again for the site-wide revision commit — the same answer, recomputed for each page. Those lookups are now cached.

The bigger your site, the more you save: on a 1000 page site this removes roughly 18 seconds of build time.

custom_format keeps your own words

If your format had any text around the date directives, that text came out scrambled:

custom_format: "Updated on %d %B %Y"

before:   Up23AMt723 on 23 January 2022
now:      Updated on 23 January 2022

Any format that was made up purely of % directives (including the %d. %B %Y default) was unaffected and still renders exactly as before. Unrecognised directives such as %Q are now left alone instead of being quietly reinterpreted as a different date field.

Creation date commit hash and tag now work

page.meta.git_creation_date_localized_hash and page.meta.git_creation_date_localized_tag were documented but always came back empty. If you use them in a theme override to link back to the commit or release that introduced a page, they now contain what you expect.

Shallow clone warnings reach more setups

The warning that tells you your dates will be wrong because CI only fetched part of the history was silently skipped whenever your .git was not in the directory you ran mkdocs from — a repository inside docs/, or a temporary checkout made by plugins such as monorepo. It now fires there too.

Clearer messages when something goes wrong

• A bad type: now produces a proper MkDocs config error listing the valid values, instead of a bare AssertionError.
• If reading git history in parallel fails, the error explains what enable_parallel_processing: false actually does, rather than suggesting a fallback it never attempted.
• Plugin messages now go through MkDocs' own logger, so they are formatted and coloured like every other message in your build output.

Type hints are now visible

The package ships py.typed, so mypy, pyright and ty can see the plugin's annotations.

Upgrading

mkdocs build --strict is now stricter. Warnings from this plugin previously bypassed MkDocs' warning counter, so --strict ignored them. They now count.

In practice this means a build that combines --strict with a shallow clone will start failing where it used to pass — most commonly GitHub Actions, which checks out with fetch-depth: 1 by default. The dates in that build really are wrong, so the right fix is to fetch the full history:

- uses: actions/checkout@v6
</tr></table> 

... (truncated)

Commits

• 8db2449 Bump version to 1.6.0
• 1f6eb6d Merge pull request #226 from timvink/refactor/page-rendering-and-packaging
• 604005a Merge pull request #224 from timvink/fix/date-formatting-and-git-detection
• 6e9e4e4 Cache tag lookups, split up on_page_markdown, tidy packaging
• bf270f7 Fix custom_format literals, creation commit hash and shallow clone detection
• 97ecbac Bump mkdocs-material from 9.7.6 to 9.7.7 (#223)
• a2313a3 Bump version to 1.5.4
• b1be777 Bump pymdown-extensions from 11.0 to 11.0.1 (#221)
• fd6e3b0 Bump gitpython from 3.1.57 to 3.1.58 (#220)
• 0c308d5 Bump gitpython from 3.1.54 to 3.1.57 (#219)
• Additional commits viewable in compare view

Updates mkdocstrings-python from 2.0.7 to 2.0.9

Release notes

Sourced from mkdocstrings-python's releases.

2.0.9

2.0.9 - 2026-09-22

Compare with 2.0.8

Bug Fixes

• Improve inventory object types (incorrectly called roles in mkdocstrings) (d754326 by Timothée Mazzucotelli). Issue-339, PR-340
• Expand relative cross-references against the object the docstring was written on (a9a4ca3 by Dev M). Issue-341, PR-342

Performance Improvements

• Small performance improvement when getting aliases and formatting/highlighting signatures (2263163 by Timothée Mazzucotelli).

2.0.8

2.0.8 - 2026-08-31

Compare with 2.0.7

Performance Improvements

• Make template existence test (for locale templates) faster (c0424f2 by Timothée Mazzucotelli).

Changelog

Sourced from mkdocstrings-python's changelog.

2.0.9 - 2026-09-22

Compare with 2.0.8

Bug Fixes

• Improve inventory object types (incorrectly called roles in mkdocstrings) (d754326 by Timothée Mazzucotelli). Issue-339, PR-340
• Expand relative cross-references against the object the docstring was written on (a9a4ca3 by Dev M). Issue-341, PR-342

Performance Improvements

• Small performance improvement when getting aliases and formatting/highlighting signatures (2263163 by Timothée Mazzucotelli).

2.0.8 - 2026-08-31

Compare with 2.0.7

Performance Improvements

• Make template existence test (for locale templates) faster (c0424f2 by Timothée Mazzucotelli).

Commits

• c888dc2 chore: Prepare release 2.0.9
• 2263163 perf: Small performance improvement when getting aliases and formatting/highl...
• d754326 fix: Improve inventory object types (incorrectly called roles in mkdocstrings)
• a9a4ca3 fix: Expand relative cross-references against the object the docstring was wr...
• 8125b0d chore: Prepare release 2.0.8
• 5054240 chore: Be a bit more minijinja compatible
• c0424f2 perf: Make template existence test (for locale templates) faster
• See full diff in compare view

Updates markupsafe from 3.0.3 to 3.0.4

Release notes

Sourced from markupsafe's releases.

3.0.4

This is the MarkupSafe 3.0.4 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.4/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-4 Milestone: https://github.com/pallets/markupsafe/milestone/17?closed=1

• Build Python 3.15, armv7l, ppc64le, Android, and iOS wheels.
• Improve performance of striptags. #521

Changelog

Sourced from markupsafe's changelog.

Version 3.0.4

Released 2026-10-02

• Build Python 3.15, armv7l, ppc64le, Android, and iOS wheels.
• Improve performance of striptags. :issue:521

Commits

• ece2607 release version 3.0.4
• 620bc80 split archs
• 73c3be1 fix wheel builds (#536)
• d8ae19e fix wheel builds
• ff1eaff Build Android and iOS wheels (#516)
• 87e64f9 build Android and iOS wheels
• bc33c55 Build ppc64le wheels (#518)
• 0ddd6ea build ppc64le wheels
• 3e07758 Build armv7l wheels (#514)
• 39b9aae build armv7l wheels
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.