Bump the patch-updates group with 5 updates by dependabot[bot] · Pull Request #139 · IntelligenceModding/Advanced-Peripherals-Documentation

dependabot · 2026-09-03T03:07:31Z

Bumps the patch-updates group with 5 updates:

Package	From	To
mkdocs-material	`9.7.6`	`9.7.7`
mkdocs-git-revision-date-localized-plugin	`1.5.1`	`1.5.4`
gitpython	`3.1.59`	`3.1.61`
platformdirs	`4.11.3`	`4.11.5`
importlib-metadata	`9.0.0`	`9.0.1`

Updates mkdocs-material from 9.7.6 to 9.7.7

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.7

[!WARNING]

Material for MkDocs is approaching end of life

Material for MkDocs is scheduled to reach end of life on November 5, 2026. Until then, maintenance is limited to critical bug fixes and security updates. After this date, the project will remain available on PyPI and GitHub, but no further maintenance is planned except in exceptional circumstances.

For users looking for a long-term, actively developed successor, we're building Zensical – a next-generation static site generator designed for technical documentation. If you're planning a new documentation project or evaluating your long-term options, we invite you to take a look.

Organizations requiring support beyond this date are welcome to get in touch to discuss available options.

Read the full announcement on our blog

Changes

Fixed a DOM-based XSS vulnerability in search suggestions

Thanks to @p- for responsibly reporting this issue.

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.7 (2026-07-17)

Fixed DOM-based XSS vulnerability in search suggestions

mkdocs-material-9.7.6 (2026-03-19)

Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

Limited version range of mkdocs to <2

Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

Hardened social cards plugin by switching to sandboxed environment

Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

Opened up version ranges of optional dependencies for forward-compatibility

Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

Updated requests to 2.30+ to mitigate CVE in urllib

Fixed privacy plugin not picking up protocol-relative URLs

Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved

... (truncated)

Commits

b3e6dd8 Prepare 9.7.7 release
52fb6be Merge commit from fork
901e633 Added SECURITY.md with EOL notice
5b36f2a Bump js-yaml from 4.1.1 to 4.2.0 (#8598)
2d11e7b Bump form-data from 3.0.4 to 3.0.5 (#8597)
ae05a53 Bump esbuild from 0.27.2 to 0.28.1 (#8596)
434af93 Bump shell-quote from 1.7.3 to 1.8.4 (#8593)
4447cda Documentation (#8590)
8f8d551 Updated copyright year (#8588)
08d8514 Bump fast-uri from 3.0.3 to 3.1.2 (#8587)
Additional commits viewable in compare view

Updates mkdocs-git-revision-date-localized-plugin from 1.5.1 to 1.5.4

Release notes

Sourced from mkdocs-git-revision-date-localized-plugin's releases.

v1.5.4

Security

Raises the gitpython floor from >=3.1.44 to >=3.1.59.

Earlier dependabot bumps only touched this repo's uv.lock, which pins the CI environment and nothing else. Downstream users installing from PyPI resolved against pyproject.toml, so they could still land on a GitPython carrying the 2026 option-injection advisories — GHSA-wvpp-8hx9-p66j and GHSA-jm78-9fvv-mhgr among them, all patched by 3.1.58, with further option hardening in 3.1.59.

This plugin never passes user input as git options, so it was not exploitable through those. The floor bump forces the upgrade in environments that already hold an older GitPython, and clears the warnings downstream scanners report.

Thanks to @nucleus-ffm for reporting it in #222.

Maintenance

Harden test git repos against flaky "Error building trees" failures by @timvink in #212

ci: update GitHub Actions to Node 24 compatible versions by @timvink in #213

deps: bump idna and pymdown-extensions to patch security alerts by @timvink in #214

Bump gitpython from 3.1.50 to 3.1.58 in #217, #219, #220

Bump pymdown-extensions from 10.21.3 to 11.0.1 in #218, #221

Full Changelog: timvink/mkdocs-git-revision-date-localized-plugin@v1.5.3...v1.5.4

v1.5.3

What's Changed

Fix paths in MANIFEST.in by @mitya57 in timvink/mkdocs-git-revision-date-localized-plugin#211

New Contributors

@mitya57 made their first contribution in timvink/mkdocs-git-revision-date-localized-plugin#211

Full Changelog: timvink/mkdocs-git-revision-date-localized-plugin@v1.5.2...v1.5.3

v1.5.2

What's Changed

Bug fixes

Guard against page is None in mkdocs theme override Jinja2 templates by @Copilot in timvink/mkdocs-git-revision-date-localized-plugin#202

Dependency updates (security)

Bump requests from 2.32.5 to 2.33.0 by @dependabot in timvink/mkdocs-git-revision-date-localized-plugin#203

Bump pytest from 8.4.2 to 9.0.3 by @dependabot in timvink/mkdocs-git-revision-date-localized-plugin#204

Bump gitpython from 3.1.45 to 3.1.50 by @dependabot in timvink/mkdocs-git-revision-date-localized-plugin#205, timvink/mkdocs-git-revision-date-localized-plugin#207, timvink/mkdocs-git-revision-date-localized-plugin#208

Bump pygments from 2.19.2 to 2.20.0 by @dependabot in timvink/mkdocs-git-revision-date-localized-plugin#206

Bump urllib3 from 2.6.3 to 2.7.0 by @dependabot in timvink/mkdocs-git-revision-date-localized-plugin#209

Full Changelog: timvink/mkdocs-git-revision-date-localized-plugin@v1.5.1...v1.5.2

Commits

a2313a3 Bump version to 1.5.4
b1be777 Bump pymdown-extensions from 11.0 to 11.0.1 (#221)
fd6e3b0 Bump gitpython from 3.1.57 to 3.1.58 (#220)
0c308d5 Bump gitpython from 3.1.54 to 3.1.57 (#219)
75279a9 Bump pymdown-extensions from 10.21.3 to 11.0 (#218)
7756fee Bump gitpython from 3.1.50 to 3.1.54 (#217)
0c2e203 deps: bump idna and pymdown-extensions to patch security alerts (#214)
aa44586 ci: update GitHub Actions to Node 24 compatible versions (#213)
58eb930 Harden test git repos against flaky 'Error building trees' failures (#212)
30e5876 Bump version to 1.5.3
Additional commits viewable in compare view

Updates gitpython from 3.1.59 to 3.1.61

Release notes

Sourced from gitpython's releases.

3.1.61

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

What's Changed

Fix repository discovery precedence by @Byron in gitpython-developers/GitPython#2218

fix: wait for git daemon to listen before connecting by @Vogtinator in gitpython-developers/GitPython#2219

fix: restore Actor.name_email_regex by @Byron in gitpython-developers/GitPython#2221

New Contributors

@Vogtinator made their first contribution in gitpython-developers/GitPython#2219

Full Changelog: gitpython-developers/GitPython@3.1.60...3.1.61

3.1.60 Security

What's Changed

prepare changelog prior to release by @Byron in gitpython-developers/GitPython#2212

Preserve Git config escape semantics by @Byron in gitpython-developers/GitPython#2213

Harden diff path and actor identity parsing by @Byron in gitpython-developers/GitPython#2215

Require explicit opt-in for filesystem diffs by @Byron in gitpython-developers/GitPython#2217

Full Changelog: gitpython-developers/GitPython@3.1.59...3.1.60

Commits

5346d1b prepare next release
d81336b Merge pull request #2221 from gitpython-developers/re-add-regex
bc63b02 fix: restore Actor.name_email_regex (#2220)
a9fb008 Merge pull request #2219 from Vogtinator/main
db1a2cf fix: wait for git daemon to listen before connecting
3481da9 Merge pull request #2218 from gitpython-developers/fix-repo-open
56636c3 prepare new release
c7cf4d1 fix: prefer .git during repository discovery
d160fb4 Merge pull request #2217 from gitpython-developers/fix-advisory
09f2cf3 fix: require opt-in for no-index diffs
Additional commits viewable in compare view

Updates platformdirs from 4.11.3 to 4.11.5

Release notes

Sourced from platformdirs's releases.

4.11.5

What's Changed

docs: fix the iterator order claim in api.rst by @gaborbernat in tox-dev/platformdirs#533

fix: return one site applications path for multipath by @tunglambk in tox-dev/platformdirs#532

fix: accept app arguments in the applications functions by @gaborbernat in tox-dev/platformdirs#534

refactor: keyword-only booleans on the applications functions by @gaborbernat in tox-dev/platformdirs#535

fix: accept app arguments in user_preference_dir by @dylanpulver in tox-dev/platformdirs#531

New Contributors

@tunglambk made their first contribution in tox-dev/platformdirs#532

@dylanpulver made their first contribution in tox-dev/platformdirs#531

Full Changelog: tox-dev/platformdirs@4.11.4...4.11.5

4.11.4

What's Changed

🔧 chore: batch dependency updates weekly on Tuesday by @gaborbernat in tox-dev/platformdirs#528

fix: stop iter_*_dirs yielding the same directory twice by @darrenhuai in tox-dev/platformdirs#524

docs: fix merge order in the config how-to by @gaborbernat in tox-dev/platformdirs#529

Full Changelog: tox-dev/platformdirs@4.11.3...4.11.4

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

4.11.7 (2026-09-01)

4.11.6 (2026-09-01)

Give :func:~platformdirs.user_bin_dir and :func:~platformdirs.user_bin_path the use_site_for_root argument. They took none, so neither could reach the Unix redirect of root to :func:~platformdirs.site_bin_dir. :pr:537

4.11.5 (2026-08-27)

Give :func:~platformdirs.user_preference_dir and :func:~platformdirs.user_preference_path the same arguments as :func:~platformdirs.user_config_dir. Added without arguments in :pr:491, they could only return the unscoped base directory even though the property they wrap appends the app name and version. :pr:531

Make :func:~platformdirs.site_applications_path return the first entry when multipath=True, matching :func:~platformdirs.site_data_path. On Unix and macOS it passed the whole $XDG_DATA_DIRS list to :class:~pathlib.Path, giving one unusable path such as /first/applications:/second/applications. :pr:532

Give :func:~platformdirs.user_applications_dir, :func:~platformdirs.user_applications_path, :func:~platformdirs.site_applications_dir and :func:~platformdirs.site_applications_path the app arguments. Android scopes both applications directories to the app, so without them the functions could only return the unscoped base directory there. On the two site functions they are keyword-only, keeping multipath first positional as it has been since 4.9.0; the two user functions take their boolean options keyword-only. :pr:534

Correct the ordering note on the iterator methods. use_site_for_root drops the user directory entirely, so the iterators are documented as yielding the most specific directory first rather than always yielding the user one. :pr:533

4.11.4 (2026-08-24)

Stop the iter_*_dirs methods yielding the same directory twice when a site directory resolves to its user equivalent - :pr:520 covered only Unix with use_site_for_root. It also hit :meth:~platformdirs.PlatformDirs.iter_runtime_dirs on Unix with $XDG_RUNTIME_DIR set, on Windows and macOS, and all six iterators on Android. :pr:524

Fix the config merging example in the how-to guide. iter_config_paths yields the user directory first, so the config.update loop let the site defaults override the user's config instead of the other way round. :pr:529

... (truncated)

Commits

bd77b0d Release 4.11.5
2a3ab96 fix: accept app arguments in user_preference_dir (#531)
56a9bc7 refactor: keyword-only booleans on the applications functions (#535)
8147f77 fix: accept app arguments in the applications functions (#534)
8ea7338 fix: return one site applications path for multipath (#532)
4d4279f docs: fix the iterator order claim in api.rst (#533)
babf239 [pre-commit.ci] pre-commit autoupdate (#530)
e5fd9ea Release 4.11.4
4bf9228 docs: fix merge order in the config how-to (#529)
c653668 fix: stop iter_*_dirs yielding the same directory twice (#524)
Additional commits viewable in compare view

Updates importlib-metadata from 9.0.0 to 9.0.1

Changelog

Sourced from importlib-metadata's changelog.

v9.0.1

Bugfixes

Marked the other parameter of SimplePath.joinpath and SimplePath.__truediv__ positional-only, so pathlib.Path satisfies the protocol under type checkers that compare parameter names. (#542)

Commits

c5acd62 Finalize
2f37725 👹 Feed the hobgoblins (delint).
91b99f0 Merge https://github.com/jaraco/skeleton
2c43cdfjaraco/skeleton#215
458fdc3 Fix B006 by using an immutable type from the future.
7b59997 Disable nuisance B006; the proposed fix is inelegant.
ecfcc38 👹 Feed the hobgoblins (delint).
7b71202 👹 Feed the hobgoblins (delint).
dbbc36b Merge https://github.com/jaraco/skeleton
49ee2dc Merge pull request #543 from gaborbernat/simplepath-positional-only
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch-updates group with 5 updates: | Package | From | To | | --- | --- | --- | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.7.6` | `9.7.7` | | [mkdocs-git-revision-date-localized-plugin](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin) | `1.5.1` | `1.5.4` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.59` | `3.1.61` | | [platformdirs](https://github.com/tox-dev/platformdirs) | `4.11.3` | `4.11.5` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `9.0.0` | `9.0.1` | Updates `mkdocs-material` from 9.7.6 to 9.7.7 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.7.6...9.7.7) Updates `mkdocs-git-revision-date-localized-plugin` from 1.5.1 to 1.5.4 - [Release notes](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin/releases) - [Commits](timvink/mkdocs-git-revision-date-localized-plugin@v1.5.1...v1.5.4) Updates `gitpython` from 3.1.59 to 3.1.61 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.59...3.1.61) Updates `platformdirs` from 4.11.3 to 4.11.5 - [Release notes](https://github.com/tox-dev/platformdirs/releases) - [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst) - [Commits](tox-dev/platformdirs@4.11.3...4.11.5) Updates `importlib-metadata` from 9.0.0 to 9.0.1 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v9.0.0...v9.0.1) --- updated-dependencies: - dependency-name: mkdocs-material dependency-version: 9.7.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: mkdocs-git-revision-date-localized-plugin dependency-version: 1.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: gitpython dependency-version: 3.1.61 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: platformdirs dependency-version: 4.11.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: importlib-metadata dependency-version: 9.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-03T03:08:04Z

📝 Documentation Preview Ready!

Item	Details
Status	✅ Deployed Successfully
Preview Link	View Documentation
Source Branch	`dependabot/pip/patch-updates-41f2d44c5e`
Version Alias	`pr/139`

Note

The Edit buttons on this preview link directly to your branch. Changes made there will update this preview after a few minutes.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 3, 2026

Navigation Menu

Uh oh!

Bump the patch-updates group with 5 updates - #139

Bump the patch-updates group with 5 updates#139
dependabot[bot] wants to merge 1 commit into
0.7from
dependabot/pip/patch-updates-41f2d44c5e

dependabot Bot commented on behalf of github Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 3, 2026

mkdocs-material-9.7.7

Changes

v1.5.4

Security

Maintenance

v1.5.3

What's Changed

New Contributors

v1.5.2

What's Changed

Bug fixes

Dependency updates (security)

3.1.61

What's Changed

New Contributors

3.1.60 Security

What's Changed

4.11.5

What's Changed

New Contributors

4.11.4

What's Changed

v9.0.1

Bugfixes

Uh oh!

github-actions Bot commented Sep 3, 2026

📝 Documentation Preview Ready!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants