chore: bump the patch-updates group across 1 directory with 3 updates

[dependabot]

Bumps the patch-updates group with 3 updates in the / directory: pyparsing, tomlkit and pydantic.

Updates pyparsing from 3.3.2 to 3.3.3

Changelog

Sourced from pyparsing's changelog.

Version 3.3.3 - in development

• Added support for Python 3.15.

• Parse actions that return a tuple value for a named expression formerly saved just the first value of the tuple. Now they return the entire tuple. Partially fixes Issue #401, PR #640 submitted by Vincent Gao et AI.

• Fixed CI unit test jobs selecting a tox environment with no test commands. The matrix and fallback now select py-unit, as diagnosed and proposed by glaziermag in issue #662; submitted by Neal Lin et AI.

• Fixed Dict returning an empty nested ParseResults.as_dict() as [] instead of {}. Incorporates partial solution submitted in PR #635 submitted by Leo Ji.

  Additional fixes found as part of this work:

  • Removed vestigial unused ParseResults._modal attribute.

  • Fixed incidental bug when Dict tries to create a dict with a ParseResults value for a key (not hashable).

• Fixed Word(..., max=n) raising instead of matching up to max characters when the character set contained whitespace - Word(nums, max=3) and Word(nums + " ", max=3) gave opposite results on the same input. Now both forms match up to max and leave the rest for the next parser. PR #646 submitted by Andrew Chen et AI.

• Fixed QuotedString stripping whitespace that is part of a multi-character quote delimiter, e.g. the leading newline in QuotedString("\n;", multiline=True). The delimiter was silently collapsed to ";", so the newline was ignored when matching. QuotedString now only rejects quote_char/end_quote_char values that are empty or entirely whitespace, and preserves any surrounding whitespace that is part of a valid delimiter. Reported in issue #492.

• Fixed pyparsing_common.as_datetime raising Invalid date/time: microsecond must be in 0..999999 for valid ISO-8601 timestamps whose fractional seconds round up to a full second (e.g. 2021-06-15T12:30:59.9999995, common in nanosecond-precision timestamps). The rounded microseconds are now added via timedelta so the value carries into the next second instead of overflowing the datetime microsecond argument. PR submitted by Andrew Chen et AI.

• Fixed debug output corruption when a parsed line contains a carriage return or other control character. set_debug() printed the source line verbatim, so a stray \r returned the terminal cursor to column 0 and overwrote the "Match ... at loc" text. Control characters in the debug line are now shown escaped, and the marker caret stays aligned with the match location. Issue #496, reported by Matthew Rowles.

... (truncated)

Commits

• d90d38b Update flit version and exclusion of generated railroad diagrams from source ...
• 4220992 Updated CI to execute unit tests, PR #663; update test_unit.py to add test ca...
• e266043 Reworked internal recursive implementations to use local stack vars or iterat...
• See full diff in compare view

Updates tomlkit from 0.15.0 to 0.15.1

Release notes

Sourced from tomlkit's releases.

0.15.1

What's Changed

• Fix inline table separator after append by @​cyliu0 in python-poetry/tomlkit#477
• chore(deps): bump idna from 3.7 to 3.15 in /docs by @​dependabot[bot] in python-poetry/tomlkit#481
• chore(deps-dev): bump idna from 3.7 to 3.15 by @​dependabot[bot] in python-poetry/tomlkit#480
• chore(deps): bump urllib3 from 2.5.0 to 2.7.0 in /docs by @​dependabot[bot] in python-poetry/tomlkit#475
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#478
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#484
• Fix duplicated comma when removing a middle inline table element by @​sarathfrancis90 in python-poetry/tomlkit#486
• Add native contains to Container, Table and InlineTable by @​tfoutrein in python-poetry/tomlkit#487
• Make Source index-based instead of materializing a char list by @​tfoutrein in python-poetry/tomlkit#489
• reject surrogate code points in \U unicode escapes by @​netliomax25-code in python-poetry/tomlkit#493
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#496
• Scan character runs in bulk while parsing by @​tfoutrein in python-poetry/tomlkit#490
• Fix doubled comma when inserting into a comma-first array by @​gaoflow in python-poetry/tomlkit#499
• reject tab characters in bare keys by @​netliomax25-code in python-poetry/tomlkit#497
• reject non-hex digits in \u and \U escapes by @​netliomax25-code in python-poetry/tomlkit#501
• Bulk-scan single-line string bodies by @​tfoutrein in python-poetry/tomlkit#491
• Remove the internal TOMLChar wrapper by @​tfoutrein in python-poetry/tomlkit#492
• Fix corrupt output when adding to a dotted key inside an inline table by @​gaoflow in python-poetry/tomlkit#500
• Compare StringType members by identity instead of building a set by @​tfoutrein in python-poetry/tomlkit#502
• Merge super tables in place instead of deep-copying on every merge by @​tfoutrein in python-poetry/tomlkit#503
• Move a value replacing a table out of the table region by @​gaoflow in python-poetry/tomlkit#506
• Restore dumps() delegating to as_string for non-Mapping wrappers by @​gaoflow in python-poetry/tomlkit#508
• Limit parser nesting depth instead of crashing with RecursionError by @​gaoflow in python-poetry/tomlkit#510
• Prefix every line of a multiline comment with # by @​gaoflow in python-poetry/tomlkit#511
• Add a native OutOfOrderTableProxy.contains by @​tfoutrein in python-poetry/tomlkit#515
• Place inline-table separator after the value, not a trailing comment (fix #512) by @​gaoflow in python-poetry/tomlkit#514
• reject a table redefined after its parent table header by @​netliomax25-code in python-poetry/tomlkit#516
• Don't build a discarded error when an array closes right after a value by @​tfoutrein in python-poetry/tomlkit#517
• Validate out-of-order tables incrementally while parsing by @​gaoflow in python-poetry/tomlkit#509
• Return a single key from key() for a single-element list (fixes #430) by @​tienvantranspk-tech in python-poetry/tomlkit#520
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#522
• Speed up unwrap() by resolving keys from the key map instead of items() by @​tfoutrein in python-poetry/tomlkit#521
• Merge AoT fragments when building an out-of-order table proxy by @​gaoflow in python-poetry/tomlkit#507
• Bulk-scan multiline string bodies by @​tfoutrein in python-poetry/tomlkit#518
• reject array-of-tables header missing its second closing bracket by @​netliomax25-code in python-poetry/tomlkit#519
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#541
• Fix ParseError when a sub-table extends an array of tables out of order by @​sarathfrancis90 in python-poetry/tomlkit#498
• Render inline tables in O(n) instead of O(n²) by @​tfoutrein in python-poetry/tomlkit#525
• Fix duplicated prefix and captured sibling when replacing a dotted key with a table by @​Labib-Bin-Salam in python-poetry/tomlkit#526
• Reject tables inserted into inline tables by @​gaoflow in python-poetry/tomlkit#532
• raise on malformed array element instead of dropping it by @​netliomax25-code in python-poetry/tomlkit#527
• fix: reject out-of-order concrete+super table redefinitions at parse time by @​gaoflow in python-poetry/tomlkit#530
• fix: keep newline after dotted inline table by @​gaoflow in python-poetry/tomlkit#533
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#548
• chore(deps): bump soupsieve from 2.5 to 2.8.4 in /docs by @​dependabot[bot] in python-poetry/tomlkit#560
• chore(deps-dev): bump soupsieve from 2.4.1 to 2.8.4 by @​dependabot[bot] in python-poetry/tomlkit#559
• Preserve whitespace when replacing super tables by @​gaoflow in python-poetry/tomlkit#534
• Preserve table display names on self assignment by @​gaoflow in python-poetry/tomlkit#537

... (truncated)

Changelog

Sourced from tomlkit's changelog.

[0.15.1] - 2026-07-17

Changed

• Speed up membership tests (key in ...) on Container, Table and InlineTable with native __contains__ implementations, avoiding the inherited MutableMapping round-trip through __getitem__ (which resolves the value and builds an exception on every absent key). (#483)
• Speed up parsing by making Source index-based: it now tracks an integer position over the input string instead of materializing a list of (index, char) tuples up front, so construction is O(1) and state save/restore no longer copies an iterator. (#489)
• Speed up parsing by scanning character runs in bulk: Source.advance_while/advance_until consume a whole run of whitespace, bare-key or number characters in a single pass over the input string instead of one inc() call per character. (#490)
• Speed up parsing of single-line strings by bulk-appending the run of ordinary characters up to the next delimiter, backslash or control character in one pass, instead of one character at a time. (#491)
• Speed up parsing by removing the internal TOMLChar wrapper: the parser now reads plain str characters from Source and detects end-of-input positionally, avoiding a per-character object construction and method dispatch. (#492)
• Speed up parsing by comparing StringType members by identity (is) instead of building a set on every is_basic/is_literal/is_singleline/is_multiline call, avoiding millions of enum hashes while parsing. (#502)
• Speed up merging super tables by merging in place instead of deep-copying the growing target on every merge, turning the parse of documents with many subtables under a shared super table (e.g. consecutive [a.b.c] / [a.b.d] headers) from O(n²) into O(n). (#503)
• Speed up membership tests (key in ...) on out-of-order tables with a native OutOfOrderTableProxy.__contains__, completing #483 for the last mapping type that still inherited the slow MutableMapping mixin (which resolves the value and builds an exception on every absent key). (#515)
• Speed up parsing documents with many dotted keys or table headers sharing a prefix by validating out-of-order tables incrementally: each new fragment is merged into a cached validation container once, instead of re-merging (and deep-copying) every earlier fragment on each append, turning a super-cubic worst case into linear time (80 shared-prefix dotted keys: ~8 s → ~10 ms). (#479)
• Speed up parsing of arrays that close right after a value (e.g. the files = [...] blocks that dominate lock files): the parser no longer attempts to read a value while sitting on the closing ], which previously built an UnexpectedCharError just to discard it — and constructing that exception eagerly computes a line/column by scanning the whole document, making it O(document size) per such array. (#517)
• Speed up parsing of multiline strings by bulk-appending the run of ordinary characters — across raw line feeds and tabs — up to the next delimiter, backslash, carriage return or control character, instead of one character at a time. This extends to """/''' bodies the single-line fast path added in #491; a \r still stops the scan so \r\n stays validated and byte-for-byte preserved. (#518)
• Speed up unwrap() (converting a parsed document to a plain dict) by resolving each key directly from the container's key map instead of iterating the inherited MutableMapping view, which rebuilt a SingleKey from the bare string for every key just to re-look-up the value. Out-of-order tables still resolve through their proxy, so their validation is unchanged. (#521)
• Speed up rendering (as_string() / dumps()) of inline tables with many keys by precomputing the last-key and last-deleted-element indices in a single pass, instead of rescanning the remaining body on every separator comma — turning an O(n²) render into O(n). (#525)
• Raise on malformed array element instead of dropping it, (#527)

Fixed

• Fix string() dropping a leading newline of a multiline string on round-trip: a value beginning with a newline is now rendered with an extra leading newline (the one the parser trims after the opening delimiter) so it survives re-parsing.
• Fix invalid serialization with a duplicated comma when removing a non-edge element from a parsed inline table. (#486)
• Fix invalid serialization with a duplicated comma when appending or inserting into a comma-first formatted array. (#499)
• Fix ParseError when a sub-table extends the last element of an array of tables after an unrelated table. (#261)
• Fix unparseable serialization when adding a key to a dotted-key table inside an inline table. (#500)
• Fix a table replaced by a plain value being serialized inside the preceding table's body when other tables follow; the value now moves before the first table like other root-level values. (#504)
• Fix assigning a table over a dotted key (e.g. doc["a"] = {...} where a came from a.b = ...): the dotted prefix was duplicated onto the new [a] header, and the header then swallowed any sibling that follows it on round-trip. The replacement now renders as a plain table and, when needed, moves before the inline entries (values and dotted keys) it would otherwise capture. (#513, #524)
• Restore dumps() rendering mapping-like wrappers around a parsed document (e.g. dotty_dict's Dotty) through their delegated as_string, preserving the original table order and layout instead of re-encoding through a plain dict — a 0.15.0 regression. (#482)
• Fix uncontrolled recursion when parsing deeply nested documents: crafted input could crash the process with a RecursionError. Values nested more than 100 levels deep and keys with more than 100 dotted fragments now raise ParseError. (#459)
• Fix comment() producing invalid TOML for a multiline string by prefixing every line with #, not just the first. (#449)
• Fix the separator comma being swallowed by a trailing comment when appending a key to a multiline inline table, leaving the new key without a separator so the result no longer round-trips. (#512)
• Fix a KeyAlreadyPresent error when parsing or accessing an out-of-order table whose array-of-tables elements are split across the table's parts. (#505)
• Out-of-order value-vs-table and dotted-key-vs-table redefinitions are now rejected at parse time instead of being silently accepted or raising only on access. The parser also detects when a non-dotted key is a prefix of an existing dotted key, matching the stdlib tomllib behaviour. (#523)
• Reject tables inserted into inline tables instead of serializing invalid TOML. (#531)
• Fix assigning an array of tables over a dotted key (e.g. doc["a"] = aot(...) where a came from a.b = ...): the new [[a]] header kept the dotted key's inline position and swallowed the following dotted sibling on round-trip. The array of tables now renders past the inline entries it would otherwise capture, mirroring the table fix for #513. (#542)
• Fix a new top-level scalar being captured by a table rendered from a dotted key: appending a scalar after a dotted-key entry (e.g. a.b = 1) whose table had gained a [a.c]-style child placed the scalar inside that table's scope, silently re-nesting it on round-trip. Scalars now move before such an entry, like they do before regular tables. (#543)
• Fix invalid serialization with a duplicated [table] header when adding a key to an out-of-order table whose concrete header is declared after its sub-tables; the new key now lands in the existing concrete part instead of giving the header-less super part a second header. (#545)
• Fix a table's display name (its exact header spelling, including whitespace and quoting) being normalised when the table is assigned onto itself, e.g. doc[k] = doc[k] rewriting [keys .'a'.'c'] to [keys.a.'c']. (#291)
• Fix missing newlines when appending a key after a dotted inline table, including when the original document has no trailing newline. (#533)
• Preserve trailing whitespace when replacing a super table, including assigning it onto itself. (#534)
• Fix str() and repr() of out-of-order table proxies to show their merged values. (#536)
• Reject decimal integer literals that exceed Python's integer-string conversion limit instead of coercing them to infinity. (#538)

Commits

• 1bd7e3b chore: release 0.15..1
• 94e62fb Float is not a sequence (#563)
• 495a42e Fix top-level scalar captured by a table rendered from a dotted key (#550)
• 21a4942 reject a comment containing line breaks in Item.comment and add_line (#544)
• 8cd44f5 fix: preserve leading newline of multiline string built with string() (#551)
• 67d3e86 Fix array of tables replacing a dotted key swallowing the next sibling (#542)...
• e23a254 fix: avoid duplicate table header when adding a key to an out-of-order table ...
• 34e51e2 Update CHANGELOG.md to reflect recent fixes and enhancements
• b48c094 reject overlong decimal integer instead of coercing to inf (#538)
• cc05afa Represent out-of-order table proxies with merged values (#536)
• Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Commits

• 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
• 558379f Bump twine to v7.0.0
• 2cfd5d3 Do not check for docs build
• a735bee Fix more Clippy lints
• 7eed4a1 Fix Clippy 0.1.95 warnings
• b353bbb Prepare release v2.13.5
• 63d2ccc Count validated model fields once in smart unions
• a53ec2e Speed up PyPy CI tests
• d65e0f9 Workaround circular import error in Mypy
• 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
• Additional commits viewable in compare view