Combined PRs (#18220)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>

Author: pypi-combine-prs[bot]

.github/workflows/codeql-analysis.yml

@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+      uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+      uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+      uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/zizmor.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Run zizmor
         run: pipx run zizmor --format sarif . > results.sarif
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           # Path to SARIF file relative to the root of the repository
           sarif_file: results.sarif

Dockerfile

@@ -3,7 +3,7 @@ ARG PYTHON_IMAGE_VERSION=3.13.2-slim-bookworm
 
 # First things first, we build an image which is where we're going to compile
 # our static assets with. We use this stage in development.
-FROM node:24.0.1-bookworm AS static-deps
+FROM node:24.1.0-bookworm AS static-deps
 
 WORKDIR /opt/warehouse/src/
 

requirements/deploy.in

@@ -1,2 +1,2 @@
 gunicorn==23.0.0
-ddtrace==3.5.1
+ddtrace==3.8.1

requirements/deploy.txt

@@ -8,66 +8,66 @@ bytecode==0.16.2 \
     --hash=sha256:0a7dea0387ec5cae5ec77578690c5ca7470c8a202c50ce64a426d86380cddd7f \
     --hash=sha256:f05020b6dc1f48cdadd946f7c3a03131ba0f312bd103767c5d75559de5c308f8
     # via ddtrace
-ddtrace==3.5.1 \
-    --hash=sha256:044e3540417acee8b22918ccaedd1d14ef662d723b6b3ef9da8d7e8bbe706c8e \
-    --hash=sha256:069f091ee6febbbbe0a354e894119e2d6884553d55402cc73f3acefc1bad69c6 \
-    --hash=sha256:0fc17c5c34410b232079482af48a2234ce89f129d3934396e4c5f1cde2dd50c4 \
-    --hash=sha256:11e79162ea54a0124c1d2f27c2c983f15c22f5c249c41e5b3923fe6213723017 \
-    --hash=sha256:1d158990483f061e0bf3431e189729bb5814e7e241bd95af7b1ed43979259090 \
-    --hash=sha256:261a59cf942477a2cfa365972872d64e3b59ed2a28aa2669747a550bfa333e4a \
-    --hash=sha256:29da11bdaf7c78a179569b69cdc0c0a1f21fc5ea48415aabb71fa240f703fab3 \
-    --hash=sha256:2a72bf5a02d6c448c28a19453e4312f5694cb917871415b1ca1be9de6326b674 \
-    --hash=sha256:3c31b9e28a386961a7e3d40381b193f150a6ea73d03593893eb176e5ca79811d \
-    --hash=sha256:3de385fcd7d7a9dea2c4a31482974fbf97c8de7a8a4824d510045cb980b78869 \
-    --hash=sha256:422730a2e4f255113d6de61052b81cb85b1e4188009f648ebdb5a616406007e1 \
-    --hash=sha256:43c86c8e08286f2d71d9c283ebed6b81c2fee926cf1727db84a2d4e3cd8d8159 \
-    --hash=sha256:43f71d0e7110c38bf4a663b0d02f37e486a44e831bb668b62776a8545a39b785 \
-    --hash=sha256:657d855b98dc88b7869af86f66b01d111160582233dc4fcc60bfdfc266016881 \
-    --hash=sha256:6ec82a77c8eb696cf60d92ded7d43b67fa9047c5d70efcd1f998d6e7381b51bd \
-    --hash=sha256:7101b92d6146de30879e5d80e574ebd95e6a3d71b5ad78589aace13e2289ad4c \
-    --hash=sha256:7149dbd72a2c9d7c6688b5ae9e74990c8d6de2069fec70255b31952cbeb2d240 \
-    --hash=sha256:717bc8e0e377634f0cdf153b74bd31dadbdb52d71052a9bab8b4d3838ebfb382 \
-    --hash=sha256:7bd2f384c464d8736da85949839ca2e52ccb500276f305d0133c5d1363fa96a1 \
-    --hash=sha256:80e3d20ce1b1612b3e9c127fdffe34617389cf91fc44b9c86bfd2d7a48e65f5a \
-    --hash=sha256:82ae098bc483b7c26704eb57d9ed538c167647d8a85fdc2d8ba1fb94c06c4ee3 \
-    --hash=sha256:86d964398ae90f1593ffea9c23dc3cb1b6c9439d2c431f9ad34bc3d243bcac76 \
-    --hash=sha256:8f8da69955f02c3d6fa39618d56cb1dcafa03369c13a432d6b095f6fc545089b \
-    --hash=sha256:91976d75b1713372c5225d0a72fbc61845c3fa169532cf631bde7d7bab013cd6 \
-    --hash=sha256:9496ba39eec187a816566b253da556873c0f4217bcd09330c6d6d112ce7f518c \
-    --hash=sha256:94d11d1b4fb0d2f56e8824760c6f58c07eb925a812b292fabd42e969f89c673a \
-    --hash=sha256:94e5c41917df72453ad5345e94b814d0632bafd742bad79db3651ee81464c53d \
-    --hash=sha256:9570b1a8e6004ee4a4e94b34a00c15b59a4cdd9bed0fd5372fd82c27feebbc6b \
-    --hash=sha256:9c099eafc75a1462b819c4c65a6a4eb526bff7234249fdded02ec701200f77e6 \
-    --hash=sha256:9f058cf000d365f368c9e7a5b76f9038739d28c79e908335554bfe3e82f0c538 \
-    --hash=sha256:a0e0000eedb94c7ede7e4f7bb02b1dfdd6bdb0cbbe3d85564699183f7bf7c62f \
-    --hash=sha256:a4fab5a35130353b3f20d1216a43cb3f78eaa80bfd57b1920d9a1ded181e9e51 \
-    --hash=sha256:a6bf7c64fb453df4f7f743406dbdaf87ca2872b39a5230c46a0ad975f8a60cb1 \
-    --hash=sha256:a7904809262f4735aa07a37364a3964d5e86724dcbecb44aabd8fa514324596b \
-    --hash=sha256:a8407d10694981561bcf38ab96c0b243fcc93fc2e19468bf3a864f1f5fdbba7a \
-    --hash=sha256:a9070a02309d10ec838e60faaf4bf83d59657b1d73cf4388e3abb72d24acdb26 \
-    --hash=sha256:ad3da91b06e8e67449f323550eed24727869ac282f1bf1993577b806a7cbd543 \
-    --hash=sha256:ae8f3cca99c5e4625736d47b0733fc5364b423c6432f10ec25996ed1e0b76958 \
-    --hash=sha256:aecf62a0e4e45e7a9bed72c62911c94a2fc99405d3649cb5b9a68ccd293688b3 \
-    --hash=sha256:b33d72779440edf9b05298bbaa40e6d233a5f55f47142abb83298418adde6030 \
-    --hash=sha256:b62412b7d93a8fa83aee23ee6fdd632ee5a63fcb4ee8b27216fac336299ee1af \
-    --hash=sha256:bacd6237363cbdd23b163c87015ac86432a8a57ae8f7a602ba07d2214c426117 \
-    --hash=sha256:c153e7301a6388c5c4fbcd4b941cf3d2b4b265673b411a0d1743ed3cb2481468 \
-    --hash=sha256:c210e3dab7a396701a2b92bca10c6eb793720d3ffdf665f5bf6d9f4d0b5c4723 \
-    --hash=sha256:c35d9ff9255ba7cc8484c4149ad780185ed295c4ba43c0aa3091f96a7bd0b650 \
-    --hash=sha256:c5c7fd6814848ca97c512c0afda7e3e3c30e73b0c2e6bd869b788600144fb660 \
-    --hash=sha256:c9a1bfb836a3353f34cfea1862b763b04d6cc4be45b293066ec4033f46eca49a \
-    --hash=sha256:c9ff7596ac71886929c808029eee0e88a1887b6a377064697d7f0b04d11ee28b \
-    --hash=sha256:cdaa7871aea160d0df5664b6318d7532df7f8374beb11dcb836a246481f49b59 \
-    --hash=sha256:d33ece595225c84f8a24744997fa0bb796bd96d0825e16c7391c53d993eb01c7 \
-    --hash=sha256:dd56561b2634c588bd48830410f436a673b060551297dc4f5457da56606b0be8 \
-    --hash=sha256:df4f6d9c733f84bc9f0adc60680ceaa23522950ac89e056fcfa3ade0dc534d16 \
-    --hash=sha256:e470fa14b5644bc45c5959474b0b9f3a9245e99698448acb7bbe5dca027af953 \
-    --hash=sha256:e5ac7c1acc94bbaac4ac19978df92892cd47c5c71c12a6c9d4bb3be9aa80446a \
-    --hash=sha256:ef0dfdf1e13e20ba5fc1fb6124c54b8bb60726a548a8ff76263cc33acab3c61d \
-    --hash=sha256:f1211de200cb52b3c083119000ddbca2157fb11141d4ebf55bccb7d5921d1879 \
-    --hash=sha256:f1efa2f8df1c43f3af9d3907967b64579f15ad67a3cc76bc541a5e62742631f7 \
-    --hash=sha256:f34e5f0b7855fdb1085fedf854d31999cecd5af82b5717025451e793c71ecaba \
-    --hash=sha256:f6dd17a1affb60272d532c3a034c486d9b00a2fcac4bc7e508e0dc88761e5b85
+ddtrace==3.8.1 \
+    --hash=sha256:07aa828cf7dc70c8b780d836f4945e9ab203967938c054c621c9d06bcdbe224d \
+    --hash=sha256:07acff02473360b55d1d563c0106c2ac9bf3ee49f6ca8c912f107ae920a365da \
+    --hash=sha256:0dc4d8f49dd8ccfdb509b83484ce1206285ca865445a42a7b4da806f892d4080 \
+    --hash=sha256:0ee1e969a2758ec7e3ce15600821b60c1fb221b9f2808bf9ba7fa3a954c93619 \
+    --hash=sha256:19bcc17f38728920e062be3b7a5acea7debe11f29bae7841bd1b48745446376a \
+    --hash=sha256:19c1700e6041790480b92731b2bf816f859d6e1736082a5caf8aaa8e5fbb66ac \
+    --hash=sha256:1c1d04d843ac2bff500d05c7d93f8a7f3491019640d80a43c277017bc5ddb99c \
+    --hash=sha256:1c29d475c9cd2c70d8887b99b4ddce4f6c3c8bd2a39611ebcfb7597cf515889f \
+    --hash=sha256:1d48d243022434e7cdfcbdc16d50e0fbc62b99280aaca505c191fea3c0c34a05 \
+    --hash=sha256:1f07789c23165e47452aba26e50c02eed492c1ba99ff0659eee3d3d1eb1e0df7 \
+    --hash=sha256:263c9f3a5a94a462d6c3df158111bf5107607b58646a155630890ce5033a5893 \
+    --hash=sha256:27d57efbfd98200ce26aa80b7c2bd1efe9b2845505c9e25ed9d3cb68dc5f37e8 \
+    --hash=sha256:313fb33ea14315f240f44d296535dea3574e9a79d6c0fa9ffe60d457f1798c4b \
+    --hash=sha256:36c98fc801f6c0cc5ea6ff6ff0bb1f62b0b17e9baf5cad949782eba26783f21c \
+    --hash=sha256:374ec32770dd41d001df0975ea154718aff5412fc6a4dc949313e8dbe9dae330 \
+    --hash=sha256:389ddce623daad8a4b0c7c5e447ac3ea96d0fae098121c52b51f9b8b982465d1 \
+    --hash=sha256:38b745b458f2a3a6d99c266f0b7ef27a7dec20c8975b6faa82732fade0411081 \
+    --hash=sha256:39ca7f86be096f287299f63ca25b3ae522dfb8e4574e9589b34f2454cdb552c4 \
+    --hash=sha256:3a19ec7e1446a006136181eb1604c38edb7844831c2be4318a5caf7669b8662b \
+    --hash=sha256:3baea4b0e223bb86815c91c7ebf97e29a62070e6b96e6ad9d800cf93c279d0a9 \
+    --hash=sha256:3e0ad744c31c9dfc3cf5774fa74cf437f864dc82c407adf7d1a494ebb2da71e6 \
+    --hash=sha256:4108f8b17453a60eb808d420fec35784682acbaa6c91f7a4f3a3d25b089f40b2 \
+    --hash=sha256:49c2326f78c550c2140b5c7ffc25398cb82508413f46be2a485a63ff202622f2 \
+    --hash=sha256:4a57e13151400f54b16f8e0137ce9c1eabe1b1af6293ad53196643246006e0cc \
+    --hash=sha256:4f3457a5de3a820687b74dbf01c08e2939b037c22265e55158bfda4eda84573f \
+    --hash=sha256:5427c5aae00e461d531a9c2853466641cea64965cabf9a8301ba061e42c82021 \
+    --hash=sha256:5606d39be99055260fb942d2f4e07bdbc28d05791fa1cd7e9e42762222f3c8cc \
+    --hash=sha256:5b5a1e4e709c5eb731c06cb6c2a17843a3ee5a384b7f4ca41aca59c94fd082df \
+    --hash=sha256:5bb7da8c2f9db05a2143a8db6f591b0c0c53c2074a9885c7b48cf2c4dcbc29ff \
+    --hash=sha256:66452c34502f0738842ae9c718ec99f81cbd89a67070823f8d4f3ec4cbc13aa9 \
+    --hash=sha256:688fb2d55d2f81a77ab5363f6d71693882d36c927cbad96243d0dbc876f19781 \
+    --hash=sha256:68b15a5cd0452de1d0886b10102cab76cde93734099223940fa7bca4d50a311d \
+    --hash=sha256:70da73b7d1f44ec31ebc2d0c194e1f8c263e11a80652af8ccd39aa2cfabaa7eb \
+    --hash=sha256:715fd83e7395c32167e44ba8591441997258a91179f09f36ea4d3a592fc9fcb4 \
+    --hash=sha256:750d1b0e6810e9624f169bd3e45927eb85beb687914c80d342dff8ccf5fb2c31 \
+    --hash=sha256:7cae1d0b7973c103d38cde427281c8b5cd6108281def30be8c553b633888f3ba \
+    --hash=sha256:88e14e25db20a2eccb35042297d41902de291f65c9c434e921788717702899d8 \
+    --hash=sha256:8acdcad64d1465db7522da2552100343f2e596566e0a4efb279fbfafd44799bb \
+    --hash=sha256:994ffba7772fcea7769bf9274dfb1a766afbf63ec094aab0955ac407ef69c9e7 \
+    --hash=sha256:aa0690e5d3db49a6da09dcc42f86948b4041fe8005768fdc2835dd8a533266a8 \
+    --hash=sha256:acde471007a818bcf9172c330ce179b0a43807b22ae38467388b6441a60b735c \
+    --hash=sha256:b0d2a343ac1dbe842468e3b3c109da4128fcb0df641dcfd983a0b5ddf13c3121 \
+    --hash=sha256:b15675a6f0b7158ec7dca19fa02e7b47e50f3b42afe7931142c297448557255d \
+    --hash=sha256:b427d9f05f74c00244f7fd40cd353789a6148b550f45fe2aef33d7913a3cf0a8 \
+    --hash=sha256:b46d4fc0504977d36202bb31bc14a8a2626511a04c197678f0b56d9a5dce9be3 \
+    --hash=sha256:ba3bf970f09303637f69024ca70748d6fa2e3ef221de21f7aa4734ff26df480c \
+    --hash=sha256:bd795d2d4ee7fc69d049f37ba5a7c681ad98b5d2854c98d9088433a1d08cbe4a \
+    --hash=sha256:bfe83483119f014a9d57d72e9036d3161f1585058a98706762d77f9a005927d1 \
+    --hash=sha256:cf79fecf23c83af42ec04b8cfef8d8c4c8751afa7298597186c6a01dd43383e2 \
+    --hash=sha256:d20e67dd1be1ef07fcd9ac95fa4e630bc9f6a685b141da916dc3b37b96e824b9 \
+    --hash=sha256:d37e343a16b17c59651aeafddb59d756a65350d985a1d74d72cbf085e5a3b904 \
+    --hash=sha256:dccfe22c973f67ee3328a50d1b089bf8dc38aac90c7320c9fd6878ff9fec4c48 \
+    --hash=sha256:e57a2afd7ec8f6b9ee333c493d15c2920363b56b0a44cd4e89891df312219f0c \
+    --hash=sha256:e85f3a65826c16a30b1e32f17ac1f9e3281444a915830abc9ae8bf7c79d75f06 \
+    --hash=sha256:ea1de408999ac4f2d30bd7661a453ef0f0b92d116c11e30b9ce6c873c56ba73b \
+    --hash=sha256:ea54c3bbf4b5fa9020063a1dfb60cf48aaefcbaafddb050846d35bb2353aaa7d \
+    --hash=sha256:f64d9c6849955cb7a42ddd41ce59c60d4f3134c3c86933bf9a51ae61e8ab76b5 \
+    --hash=sha256:f889c20cdda6376037f72766e36bf67eb6843da00c6ef74eb16ef6f10a0ff526 \
+    --hash=sha256:ff5293768a188228e85b269cfd3b369d8cfc6d4b458c41f7b220d6d40047cf95
     # via -r requirements/deploy.in
 deprecated==1.2.18 \
     --hash=sha256:422b6f6d859da6f2ef57857761bfb392480502a64c3028ca9bbe86085d72115d \
@@ -89,9 +89,9 @@ legacy-cgi==2.6.3 \
     --hash=sha256:4c119d6cb8e9d8b6ad7cc0ddad880552c62df4029622835d06dfd18f438a8154 \
     --hash=sha256:6df2ea5ae14c71ef6f097f8b6372b44f6685283dc018535a75c924564183cdab
     # via ddtrace
-opentelemetry-api==1.32.1 \
-    --hash=sha256:a5be71591694a4d9195caf6776b055aa702e964d961051a0715d05f8632c32fb \
-    --hash=sha256:bbd19f14ab9f15f0e85e43e6a958aa4cb1f36870ee62b7fd205783a112012724
+opentelemetry-api==1.33.1 \
+    --hash=sha256:1c6055fc0a2d3f23a50c7e17e16ef75ad489345fd3df1f8b8af7c0bbf8a109e8 \
+    --hash=sha256:4db83ebcf7ea93e64637ec6ee6fabee45c5cbe4abd9cf3da95c43828ddb50b83
     # via ddtrace
 packaging==25.0 \
     --hash=sha256:29572ef2b1f17581046b3a2227d5c611fb25ec70ca1ba8554b24b0e69331a484 \
@@ -201,7 +201,7 @@ xmltodict==0.14.2 \
     --hash=sha256:201e7c28bb210e374999d1dde6382923ab0ed1a8a5faeece48ab525b7810a553 \
     --hash=sha256:20cc7d723ed729276e808f26fb6b3599f786cbc37e06c65e192ba77c40f20aac
     # via ddtrace
-zipp==3.21.0 \
-    --hash=sha256:2c9958f6430a2040341a52eb608ed6dd93ef4392e02ffe219417c1b28b5dd1f4 \
-    --hash=sha256:ac1bbe05fd2991f160ebce24ffbac5f6d11d83dc90891255885223d42b3cd931
+zipp==3.22.0 \
+    --hash=sha256:dd2f28c3ce4bc67507bfd3781d21b7bb2be31103b51a4553ad7d90b84e57ace5 \
+    --hash=sha256:fe208f65f2aca48b81f9e6fd8cf7b8b32c26375266b009b413d45306b6148343
     # via importlib-metadata

requirements/dev.txt

@@ -243,9 +243,9 @@ pip==25.0.1 \
     #   -r requirements/dev.in
     #   pip-api
     #   pip-tools
-setuptools==80.3.1 \
-    --hash=sha256:31e2c58dbb67c99c289f51c16d899afedae292b978f8051efaf6262d8212f927 \
-    --hash=sha256:ea8e00d7992054c4c592aeb892f6ad51fe1b4d90cc6947cc45c45717c40ec537
+setuptools==80.9.0 \
+    --hash=sha256:062d34222ad13e0cc312a4c02d73f059e86a4acbfbdea8f8f76b28c99f306922 \
+    --hash=sha256:f36b47402ecde768dbfafc46e8e4207b4360c654f1f3bb84475f0a28628fb19c
     # via
     #   pip-tools
     #   pyramid

requirements/docs-blog.txt

@@ -24,9 +24,9 @@ cairocffi==1.7.1 \
     --hash=sha256:2e48ee864884ec4a3a34bfa8c9ab9999f688286eb714a15a43ec9d068c36557b \
     --hash=sha256:9803a0e11f6c962f3b0ae2ec8ba6ae45e957a146a004697a1ac1bbf16b073b3f
     # via cairosvg
-cairosvg==2.7.1 \
-    --hash=sha256:432531d72347291b9a9ebfb6777026b607563fd8719c46ee742db0aef7271ba0 \
-    --hash=sha256:8a5222d4e6c3f86f1f7046b63246877a63b49923a1cd202184c3a634ef546b3b
+cairosvg==2.8.2 \
+    --hash=sha256:07cbf4e86317b27a92318a4cac2a4bb37a5e9c1b8a27355d06874b22f85bef9f \
+    --hash=sha256:eab46dad4674f33267a671dce39b64be245911c901c70d65d2b7b0821e852bf5
     # via -r requirements/docs-blog.in
 certifi==2025.4.26 \
     --hash=sha256:0a816057ea3cdefcef70270d2c515e4506bbc954f417fa5ade2021213bb8f0c6 \
@@ -331,19 +331,19 @@ mkdocs-get-deps==0.2.0 \
     --hash=sha256:162b3d129c7fad9b19abfdcb9c1458a651628e4b1dea628ac68790fb3061c60c \
     --hash=sha256:2bf11d0b133e77a0dd036abeeb06dec8775e46efa526dc70667d8863eefc6134
     # via mkdocs
-mkdocs-material==9.6.12 \
-    --hash=sha256:92b4fbdc329e4febc267ca6e2c51e8501fa97b2225c5f4deb4d4e43550f8e61e \
-    --hash=sha256:add6a6337b29f9ea7912cb1efc661de2c369060b040eb5119855d794ea85b473
+mkdocs-material==9.6.14 \
+    --hash=sha256:39d795e90dce6b531387c255bd07e866e027828b7346d3eba5ac3de265053754 \
+    --hash=sha256:3b9cee6d3688551bf7a8e8f41afda97a3c39a12f0325436d76c86706114b721b
     # via
     #   -r requirements/docs-blog.in
     #   material-plausible-plugin
 mkdocs-material-extensions==1.3.1 \
     --hash=sha256:10c9511cea88f568257f960358a467d12b970e1f7b2c0e5fb2bb48cab1928443 \
     --hash=sha256:adff8b62700b25cb77b53358dad940f3ef973dd6db797907c49e3c2ef3ab4e31
     # via mkdocs-material
-mkdocs-rss-plugin==1.17.1 \
-    --hash=sha256:9371d30afb0eda7288c946a89b419aa7a0b8e212d2219584c2dbd23ece93a991 \
-    --hash=sha256:ff81f0ece33befd5a0152c196132e15eb93b4b9f7f53644c6d3db8e9a529e186
+mkdocs-rss-plugin==1.17.3 \
+    --hash=sha256:0a5b3e03dd68cc6b94feb50fc2e47fd427d39c452affe0fc3135289da9810a6d \
+    --hash=sha256:15b99c6b3370f50503fe189e814600b375e5a0d8f99d19f6d8d9b80c1aa56f5c
     # via -r requirements/docs-blog.in
 msgpack==1.1.0 \
     --hash=sha256:06f5fd2f6bb2a7914922d935d3b8bb4a7fff3a9a91cfce6d06c13bc42bec975b \
@@ -587,9 +587,9 @@ pyyaml==6.0.2 \
     #   mkdocs-get-deps
     #   pymdown-extensions
     #   pyyaml-env-tag
-pyyaml-env-tag==0.1 \
-    --hash=sha256:70092675bda14fdec33b31ba77e7543de9ddc88f2e5b99160396572d11525bdb \
-    --hash=sha256:af31106dec8a4d68c60207c1886031cbf839b68aa7abccdb19868200532c2069
+pyyaml-env-tag==1.1 \
+    --hash=sha256:17109e1a528561e32f026364712fee1264bc2ea6715120891174ed1b980d2e04 \
+    --hash=sha256:2eb38b75a2d21ee0475d6d97ec19c63287a7e140231e4214969d0eac923cd7ff
     # via mkdocs
 requests==2.32.3 \
     --hash=sha256:55365417734eb18255590a9ff9eb97e9e1da868d4ccd6402399eaf68af20a760 \