Bump the patches group across 1 directory with 7 updates

[dependabot]

Bumps the patches group with 7 updates in the / directory:

Package	From	To
django-polymorphic	4.11.6	4.11.7
reportlab	5.0.0	5.0.1
markdown	3.10.2	3.10.3
lxml	6.1.1	6.1.3
css-inline	0.21.0	0.21.2
psycopg2	2.9.12	2.9.13
pylint	4.0.6	4.0.8

Updates django-polymorphic from 4.11.6 to 4.11.7

Release notes

Sourced from django-polymorphic's releases.

v4.11.7

What's Changed

• support django 6.1 by @​bckohan in django-commons/django-polymorphic#909
• fix: add kwargs to save method to keep compatability with other tools… by @​hwalinga in django-commons/django-polymorphic#908

New Contributors

• @​hwalinga made their first contribution in django-commons/django-polymorphic#908

Full Changelog: django-commons/django-polymorphic@v4.11.6...v4.11.7

Commits

• f78240b add a regression test for #905
• c1fd7c6 fix: add kwargs to save method to keep compatability with other tools overrid...
• 2b1b76a fix secondary test database 6.1 behavior
• 113d405 exclude django 6.1 postgres <15 tests
• 7051576 fix django 6.1 descriptor get_queryset compat
• 14b9bad support django 6.1
• See full diff in compare view

Updates reportlab from 5.0.0 to 5.0.1

Updates markdown from 3.10.2 to 3.10.3

Release notes

Sourced from markdown's releases.

Release 3.10.3

Fixed

• Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#1606).
• Add AI Policy to Contributing Guide.
• Officially document all included extensions as being in maintenance mode.
• Link the Extension API documentation to the API Reference (#1612).

Changelog

Sourced from markdown's changelog.

[3.10.3] - 2026-07-30

Fixed

• Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#1606).
• Add AI Policy to Contributing Guide.
• Officially document all included extensions as being in maintenance mode.
• Link the Extension API documentation to the API Reference (#1612).

Commits

• bb50627 Bump version to 3.10.3
• 8453df0 Update Extension API documentation
• 93ac448 Document that all extensions are in maintenance mode
• d38fd4a Create AI Policy
• ddead47 Prevent mixed =/- chars in Setext-style headings
• See full diff in compare view

Updates lxml from 6.1.1 to 6.1.3

Changelog

Sourced from lxml's changelog.

6.1.3 (2026-09-02)

Bugs fixed

• LP#2165901: External parameter entity parsing was allowed by default (with resolve_entities="internal"). Issue found by Tomer Fichman.

6.1.2 (2026-08-18)

• GH#526: Some build files were missing in the sdist. Patch by Nicola Soranzo.

• Some minor corrections for error handling cases.

Other changes

• Built with Cython 3.2.9.

Commits

• 3c1a4c7 Prepare release of 6.1.3.
• c1191fc Update changelog.
• 03ec312 Disable parameter entity parsing when internal-only entity parsing is requested.
• 11d03e9 Build: Prevent duplicate Py3.8 wheel builds.
• 9efc586 Build: Exclude musllinux-ARM from Py3.8 wheel building to prevent slow emulat...
• 9716fb1 Build: Include older PyPy versions.
• 0f3327d Build: Exclude Win-Aarch64 from wheel build.
• 6967c96 Build: Make all built wheels downloadable even if they don't pass the release...
• 061218d Build: Exclude Py3.15 i686 wheels from validation (because they are intention...
• ce9fe0d Build: Fix Py3.8 windows build.
• Additional commits viewable in compare view

Updates css-inline from 0.21.0 to 0.21.2

Release notes

Sourced from css-inline's releases.

[C] Release 0.21.2

Fixed

• file:// stylesheet URLs not percent-decoded and broken on Windows drive letters.

[Java] Release 0.21.2

Fixed

• file:// stylesheet URLs not percent-decoded and broken on Windows drive letters.

[JavaScript] Release 0.21.2

Fixed

• file:// stylesheet URLs not percent-decoded and broken on Windows drive letters.

[PHP] Release 0.21.2

Fixed

• file:// stylesheet URLs not percent-decoded and broken on Windows drive letters.

[Python] Release 0.21.2

Fixed

• file:// stylesheet URLs not percent-decoded and broken on Windows drive letters.

[Ruby] Release 0.21.2

Fixed

• file:// stylesheet URLs not percent-decoded and broken on Windows drive letters.

[Rust] Release 0.21.2

Fixed

• file:// stylesheet URLs not percent-decoded and broken on Windows drive letters.

[C] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

[Java] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

[JavaScript] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

... (truncated)

Changelog

Sourced from css-inline's changelog.

[0.21.2] - 2026-08-24

Fixed

• file:// stylesheet URLs not percent-decoded and broken on Windows drive letters.

[0.21.1] - 2026-08-08

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

Commits

• 83b8a7b chore(c): Release 0.21.2
• 3076d35 chore(python): Release 0.21.2
• 4128fd6 fix: file:// stylesheet URLs not percent-decoded and broken on Windows driv...
• 6e4a181 build(deps): update wasm-bindgen requirement in /bindings/javascript
• edce806 chore(ruby): Release 0.21.1
• 69679fd chore(php): Release 0.21.1
• b09dff2 chore(javascript): Release 0.21.1
• da17372 chore(java): Release 0.21.1
• 0f37b40 chore(c): Release 0.21.1
• 948fe99 chore(python): Release 0.21.1
• Additional commits viewable in compare view

Updates psycopg2 from 2.9.12 to 2.9.13

Changelog

Sourced from psycopg2's changelog.

Current release

What's new in psycopg 2.9.13 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Add support for Python 3.15 (:ticket:[#1848](https://github.com/psycopg/psycopg2/issues/1848)).
• Fix parsing of malformed bytea input.
• Fix parsing of malformed int64 input in arrays (:ticket:[#1847](https://github.com/psycopg/psycopg2/issues/1847)).
• Add a pyproject.toml file to declare a PEP 517 build backend (:ticket:[#1788](https://github.com/psycopg/psycopg2/issues/1788)).
• Drop support for Python 3.9.

What's new in psycopg 2.9.12 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Fix infinite loop with malformed interval (:ticket:1835).

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Add support for Python 3.14.
• Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).
• Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).
• ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.
• Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Add support for Python 3.13.
• Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).
• ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.
• Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Add support for Python 3.12.
• Drop support for Python 3.6.

What's new in psycopg 2.9.8

... (truncated)

Commits

• f650e7a chore: bump to release 2.9.13
• 368c8a1 chore!: drop support for Python 3.9
• 9b39e65 chore: drop scaleway build support
• 2ca7041 fix: fix handling of PostgreSQL 18 exceptions
• 5385c02 Build CPython 3.15 wheels
• 1d32e1f ci: only attempt triggering documentation refresh when pushing on main repo
• 433e7b7 chore: add pyproject.toml file to declare a PEP 517 build backend
• 8fb80bc fix: fix parsing of malformed int64 input in arrays
• f98014a fix: fix parsing of malformed bytea input
• 822b79c chore: bump dependencies in binary package
• Additional commits viewable in compare view

Updates pylint from 4.0.6 to 4.0.8

Release notes

Sourced from pylint's releases.

v4.0.8

What's new in Pylint 4.0.8?

Release date: 2026-08-29

False Positives Fixed

• Fix a false positive for :ref:unspecified-encoding when an open call uses a mode argument that cannot be inferred.

  Closes #10201

• Fix a false positive for invalid-name (C0103) on names assigned in an if __name__ == "__main__": block. Such a block reads like a script body, so a name there is now accepted if it matches either the constant or the variable naming style.

  Closes #10766

• Fix false positives for :ref:invalid-str-returned, :ref:invalid-repr-returned, :ref:invalid-format-returned, :ref:invalid-bytes-returned, :ref:invalid-hash-returned, :ref:invalid-index-returned, :ref:invalid-length-returned, :ref:invalid-length-hint-returned, :ref:invalid-getnewargs-returned and :ref:invalid-getnewargs-ex-returned when the returned value is an instance of a subclass of the expected builtin type, such as self in a str subclass or a namedtuple.

  Closes #11306

• Fix false positives for :ref:bad-string-format-type when the argument is an instance of a subclass of int, float or str, such as bool or an IntEnum member formatted with %d.

  Closes #11315

False Negatives Fixed

• redundant-unittest-assert now also flags assertEqual and assertNotEqual when both compared values are constants, e.g. self.assertEqual(5, 5).

  Closes #11321

Other Bug Fixes

... (truncated)

Commits

• ecb84ba Bump pylint to 4.0.8, update changelog (#11355)
• 989e9c5 [Backport maintenance/4.0.x] Support isort 9 (#11354)
• 8c1ee95 Flag assertEqual and assertNotEqual between two constants in W1503
• eadefe3 Fix false positive bad-string-format-type for subclasses of builtin types
• db00e3b [Backport maintenance/4.0.x] fix(docparams): guard decorated_with_property ag...
• 7909c17 Accept subclass instances in the invalid-*-returned checks
• d19640d [Backport maintenance/4.0.x] Fix invalid-name false positive in `if _name...
• 94e5704 Skip unspecified-encoding for unknown open modes (#11163)
• d59b329 fix(refactoring): handle non-AssignName targets in use-yield-from (#11286) (#...
• eea0569 [Backport maintenance/4.0.x] Fix crash in docparams on raising a non-exceptio...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coveralls]

coverage: 81.356%. remained the same — dependabot/uv/patches-1fe100991e into main