chore(deps): bump the pip group across 1 directory with 5 updates

[dependabot]

Bumps the pip group with 5 updates in the / directory:

Package	From	To
black	25.1.0	25.9.0
pyinstaller	6.15.0	6.16.0
pyside6	6.9.1	6.9.2
pytest	8.4.1	8.4.2
requests	2.32.4	2.32.5

Updates black from 25.1.0 to 25.9.0

Release notes

Sourced from black's releases.

25.9.0

Highlights

• Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

• Fix crash while formatting a long del statement containing tuples (#4628)
• Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
• Handle # fmt: skip followed by a comment at the end of file (#4635)
• Fix crash when a tuple appears in the as clause of a with statement (#4634)
• Fix crash when tuple is used as a context manager inside a with statement (#4646)
• Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
• Fix crash on a \\r\n (#4673)
• Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
• Fix crash on parenthesized expression inside a type parameter bound (#4684)
• Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

• Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
• Improve multiline_string_handling with ternaries and dictionaries (#4657)
• Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
• Wrap the in clause of comprehensions across lines if necessary (#4699)
• Remove parentheses around multiple exception types in except and except* without as. (#4720)
• Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

• Rewrite tokenizer to improve performance and compliance (#4536)
• Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

• Avoid using an extra process when running with only one worker (#4734)

Integrations

• Fix the version check in the vim file to reject Python 3.8 (#4567)
• Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
• Build gallery docker image with python3-slim and reduce image size (#4686)

... (truncated)

Changelog

Sourced from black's changelog.

25.9.0

Highlights

• Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

• Fix crash while formatting a long del statement containing tuples (#4628)
• Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
• Handle # fmt: skip followed by a comment at the end of file (#4635)
• Fix crash when a tuple appears in the as clause of a with statement (#4634)
• Fix crash when tuple is used as a context manager inside a with statement (#4646)
• Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
• Fix crash on a \\r\n (#4673)
• Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
• Fix crash on parenthesized expression inside a type parameter bound (#4684)
• Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

• Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
• Improve multiline_string_handling with ternaries and dictionaries (#4657)
• Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
• Wrap the in clause of comprehensions across lines if necessary (#4699)
• Remove parentheses around multiple exception types in except and except* without as. (#4720)
• Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

• Rewrite tokenizer to improve performance and compliance (#4536)
• Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

• Avoid using an extra process when running with only one worker (#4734)

Integrations

• Fix the version check in the vim file to reject Python 3.8 (#4567)
• Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)

... (truncated)

Commits

• af0ba72 Prepare docs for release 25.9.0 (#4751)
• ffc01a0 Fix schema generation error caused by new click version (#4750)
• 626b32f Add normalizing for \r style newlines (#4710)
• 57a4612 Fix mypy type issue (#4745)
• 4f6ad7c Wrap the in clause of comprehensions across lines if necessary (#4699)
• 24f5169 ci: Run diff-shades on unstable instead of preview (#4741)
• 4d55e60 Bump actions/setup-python from 5 to 6 (#4744)
• 0cf39ef Improve the performance of get_string_prefix (#4742)
• 1f779de Fix line ranges decorator edge case (#4670)
• 203fd6b Optimize Line string method (#4739)
• Additional commits viewable in compare view

Updates pyinstaller from 6.15.0 to 6.16.0

Release notes

Sourced from pyinstaller's releases.

v6.16.0

Please see the v6.16.0 section of the changelog for a list of the changes since v6.15.0.

Changelog

Sourced from pyinstaller's changelog.

6.16.0 (2025-09-13)

Features

* (POSIX) Adjust the destination directory for collected python's standard
  extensions, from ``lib-dynload`` to ``python3.x/lib-dynload`` directory,
  in order to preserve the relative relationship between the extension
  location and the (grand-parent) shared library directory that is commonly
  found in POSIX python environments. This is required for compatibility
  with upcoming Linux builds of ``astral-sh/python-build-standalone#`` that
  will set relative library paths in extensions via both ``DT_NEEDED`` and
  ``DT_RPATH``. (:issue:`9212`)
* Rework the anonymization of the ``co_filename`` attribute in collected
  code objects - instead of trying to obtain anonymized relative name by
  removing known path prefixes from the original absolute-path ``co_filename``,
  we now construct the anonymized relative name directly from the collected
  module's (or script's) destination name w.r.t. its destination container
  (i.e., the ``PKG`` archive, the ``PYZ`` archive, or the ``base_library.zip``
  archive). (:issue:`9226`)
* Rework the search for python shared library in order to reduce amount of
  guess-work and better accommodate variations in naming across platforms
  and due to different build options (e.g., debug build with "d" suffix,
  free-thread build with "t" suffix, combination of both).
On Windows, the loaded python DLL is now resolved by calling
GetModuleFileName
on the handle exposed by :data:sys.dllhandle; this applies to python.org
Windows
builds, Anaconda python on Windows, and MSYS2 python.
On other platforms, first explicitly verify that shared library is enabled,
by checking the value of Py_ENABLE_SHARED variable exposed by the
sysconfig module. On macOS, also check if .framework bundle is
enabled instead, which is implied by a non-empty PYTHONFRAMEWORK
variable in sysconfig. If shared library is enabled, use INSTSONAME
variable exposed by sysconfig module as the only source of truth
w.r.t. its name. This works even with Debian-packaged python and
astral-sh/python-build-standalone POSIX builds; while they have
their python executable statically linked against python shared
library, they seem to properly set these variables.
In contrast, both Linux and macOS builds of Anaconda python seem to
build their interpreter executable and python shared library separately,
so the interpreter reports Py_ENABLE_SHARED variable to be set to 0
(and INSTSONAME gives name of the static library). Therefore, for
Anaconda python on non-Windows, use the old approach of guessing the
library name from the major and minor version and whether free-threading
is enabled or not (i.e., the presence of the "t" suffix).
</tr></table>

... (truncated)

Commits

• 7f2ae63 Release v6.16.0. [skip ci]
• 2683834 ci: move work-around for potentially broken setuptools upgrade
• 383196a ci: fix check for broken setuptools upgrade
• 5447da7 ci/test requirements: Track setuptools in tests/requirements-libraries.txt
• 95226da Remove empty pytest.ini allegedly needed by test entrypoints
• 255305d setup: Drop questionable/pointless project keywords
• 5df0f47 setup: Drop setuptools, move to hatchling
• 100c9ce bootloader build: Address noisy deprecation warning from waf
• 52782f8 release: Add retry for compiling with qemu
• 9e84501 Move non packaging configuration out of setup.cfg/pyproject.toml
• Additional commits viewable in compare view

Updates pyside6 from 6.9.1 to 6.9.2

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

• #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

• #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

• #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

  This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

• #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

• #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

• #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

• #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
• #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
• #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.

Commits

• bfae422 Prepare release version 8.4.2
• 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
• ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
• 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
• 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
• b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
• 2c94c4a add missing colon (#13640) (#13641)
• c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
• dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
• f87289c Fix crash with times output style and skipped module (#13573) (#13579)
• Additional commits viewable in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

Commits

• b25c87d v2.32.5
• 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
• b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
• 46e939b Update publish workflow to use artifact-id instead of name
• 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
• 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
• 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
• fec96cd Update Makefile rules (#6996)
• d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
• 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions