fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
authlib	1.5.2 -> 1.6.1
flask (changelog)	3.1.0 -> 3.1.1
flask-compress	1.17 -> 1.18
flask-cors	6.0.0 -> 6.0.1
gevent (changelog)	25.4.2 -> 25.5.1
pycodestyle (changelog)	2.13.0 -> 2.14.0
pylint (changelog)	3.3.7 -> 3.3.8
python-keycloak (changelog)	5.5.0 -> 5.7.0

---

Release Notes

authlib/authlib (authlib)

v1.6.1: Version 1.6.1

Compare Source

• Filter key set with additional "alg" and "use" parameters.

v1.6.0: Version 1.6.0

Compare Source

• Fix issue when RFC9207 is enabled and the authorization endpoint response is not a redirection. pull request #​733
• Fix missing state parameter in authorization error responses. issue #​525
• Support for acr and amr claims in id_token. issue #​734
• Support for the none JWS algorithm.
• Fix response_types strict order during dynamic client registration. issue #​760
• Implement RFC9101 The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR). issue #​723
• OIDC UserInfo endpoint support. issue #​459

pallets/flask (flask)

v3.1.1

Compare Source

Released 2025-05-13

• Fix signing key selection order when key rotation is enabled via
  SECRET_KEY_FALLBACKS. :ghsa:4grg-w6v8-c28g
• Fix type hint for cli_runner.invoke. :issue:5645
• flask --help loads the app and plugins first to make sure all commands
  are shown. :issue:5673
• Mark sans-io base class as being able to handle views that return
  AsyncIterable. This is not accurate for Flask, but makes typing easier
  for Quart. :pr:5659

colour-science/flask-compress (flask-compress)

v1.18

Compare Source

• Support, and test against, Python 3.14, see #​61 by @​kurtmckee
• Migrate from zstandard to pyzstd, which is now included in the Python 3.14 standard library, also part of #​61
• Restore flask_compress.DictCache() that is needed to configure Flask-Compress with caching, without relying on Flask-Caching

corydolphin/flask-cors (flask-cors)

v6.0.1

Compare Source

What's Changed

• Invert regex sorting to make it correctly match the intent (sorting by specificity descending) #​391 by @​joshuamorton in https://github.com/corydolphin/flask-cors/pull/392
• Fix README file extension in pyproject.toml by @​lafrech in https://github.com/corydolphin/flask-cors/pull/386

New Contributors

• @​joshuamorton made their first contribution in https://github.com/corydolphin/flask-cors/pull/392
• @​lafrech made their first contribution in https://github.com/corydolphin/flask-cors/pull/386

Full Changelog: corydolphin/flask-cors@6.0.0...6.0.1

pylint-dev/pylint (pylint)

v3.3.8

Compare Source

What's new in Pylint 3.3.8?

Release date: 2025-08-09

This patch release includes an exceptional fix for a false negative issue. For details, see: https://github.com/pylint-dev/pylint/pull/10482#issuecomment-3164514082

False Positives Fixed

• Fix false positives for possibly-used-before-assignment when variables are exhaustively
  assigned within a match block.

  Closes #​9668

• Fix false positive for missing-raises-doc and missing-yield-doc when the method length is less than docstring-min-length.

  Refs #​10104

• Fix a false positive for unused-variable when multiple except handlers bind the same name under a try block.

  Closes #​10426

False Negatives Fixed

• Fix false-negative for used-before-assignment with from __future__ import annotations in function definitions.

  Refs #​10482

Other Bug Fixes

• Fix a bug in Pyreverse where aggregations and associations were included in diagrams regardless of the selected --filter-mode (such as PUB_ONLY, ALL, etc.).

  Closes #​10373

• Fix double underscores erroneously rendering as bold in pyreverse's Mermaid output.

  Closes #​10402

---

Configuration

📅 Schedule: Branch creation - "before 6am every weekday" in timezone America/Vancouver, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.