[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
cryptography (changelog)	50.0.1 → 50.0.2
httpx2 (changelog)	2.13.0 → 2.13.1
mypy (changelog)	2.3.1 → 2.4.0
prek (source, changelog)	0.5.3 → 0.5.4
scim2-client (changelog)	0.12.0 → 0.13.2
scim2-tester (changelog)	0.5.1 → 0.5.2
sphinx (changelog)	9.0.4 → 9.1.0
tox-uv (changelog)	1.36.0 → 1.36.1

---

Release Notes

pyca/cryptography (cryptography)

v50.0.2

Compare Source

pydantic/httpx2 (httpx2)

v2.13.1

Compare Source

Highlights

📤 Accurate file upload lengths

Passing a file as content= now calculates Content-Length from its remaining bytes, respecting the current file position (#​1214).

🔐 Reliable proxy TLS and HTTP/2 negotiation

TLS hostname overrides now apply inside HTTP proxy tunnels without affecting the proxy's own TLS connection (#​1223). HTTP/2 is advertised first when enabled, and HTTP/1.1 is omitted when disabled (#​1155).

🧹 Clean WebSocket shutdown

The sync WebSocket keepalive thread now exits cleanly when a ping races with connection shutdown (#​1228).

httpx2

Fixed

• Calculate Content-Length from the remaining bytes when a file is passed as content=, respecting its current position (#​1214).
• Stop the sync WebSocket keepalive thread cleanly when a ping races with connection shutdown (#​1228).

httpcore2

Fixed

• Honor the sni_hostname extension for TLS inside HTTP proxy tunnels without applying it to the proxy's TLS connection (#​1223).
• Prefer HTTP/2 during TLS protocol negotiation when enabled, and stop advertising HTTP/1.1 when it is disabled (#​1155).

Full Changelog: pydantic/httpx2@v2.13.0...v2.13.1

python/mypy (mypy)

v2.4.0

Compare Source

j178/prek (prek)

v0.5.4

Compare Source

Released on 2026-09-28.

Highlights

Faster builtin hooks

In our end-to-end benchmark, prek is about 38% faster than 0.5.3, with some builtin
hooks up to 273% faster (check-yaml: 273%, check-json: 80%,
check-merge-conflict: 71%).

Enhancements

• Add include_deleted to allow hooks to include deleted files (#​2733)
• Add --check and simplify end-of-file-fixer (#​2764)
• Add --check to file-contents-sorter (#​2765)
• Add --check to requirements-txt-fixer (#​2766)
• Add --check to trailing-whitespace (#​2763)
• Expose and document prek util generate-shell-completion (#​2727)
• Support hide_status in project and user configuration (#​2760)
• Support look-around regex in builtin pattern hooks (#​2732)

Performance

• Cache the resolved Git executable on macOS (#​2726)
• Combine and cache Git repository path queries (#​2724)
• Optimize common builtin hook execution (#​2768)
• Optimize scanning in mixed-line-ending and trailing-whitespace (#​2769)
• Scan check-merge-conflict files in fixed-size blocks (#​2781)
• Use SIMD UTF-8 validation in check-json, check-toml, and check-yaml (#​2770)

Bug fixes

• Retry transient rename failures on Windows (#​2756)
• Use PATH to resolve prek in completion scripts (#​2719)

Documentation

• Clarify the flow and scope of usage guides (#​2710)
• Reorganize usage guides and reference documentation (#​2709)

Other changes

• Sync latest identify tags (#​2762)

Contributors

• @​github-actions
• @​j178

python-scim/scim2-client (scim2-client)

v0.13.2

Compare Source

v0.13.1

Compare Source

v0.13.0

Compare Source

python-scim/scim2-tester (scim2-tester)

v0.5.2

Compare Source

sphinx-doc/sphinx (sphinx)

v9.1.0

Compare Source

=====================================

Dependencies

• #​14153: Drop Python 3.11 support.
• #​12555: Drop Docutils 0.20 support.
  Patch by Adam Turner

Features added

• Add :meth:~sphinx.application.Sphinx.add_static_dir for copying static
  assets from extensions to the build output.
  Patch by Jared Dillard

Bugs fixed

• #​14189: autodoc: Fix duplicate :no-index-entry: for modules.
  Patch by Adam Turner
• #​13713: Fix compatibility with MyST-Parser.
  Patch by Adam Turner
• Fix tests for Python 3.15.
  Patch by Adam Turner
• #​14089: autodoc: Fix default option parsing.
  Patch by Adam Turner
• Remove incorrect static typing assertions.
  Patch by Adam Turner
• #​14050: LaTeXTranslator fails to build documents using the "acronym"
  standard role.
  Patch by Günter Milde
• LaTeX: Fix rendering for grid filled merged vertical cell.
  Patch by Tim Nordell
• #​14228: LaTeX: Fix overrun footer for cases of merged vertical table cells.
  Patch by Tim Nordell
• #​14207: Fix creating HTMLThemeFactory objects in third-party extensions.
  Patch by Adam Turner
• #​3099: LaTeX: PDF build crashes if a code-block contains more than
  circa 1350 codelines (about 27 a4-sized pages at default pointsize).
  Patch by Jean-François B.
• #​14064: LaTeX: TABs ending up in sphinxVerbatim fail to obey tab stops.
  Patch by Jean-François B.
• #​14089: autodoc: Improve support for non-weakreferencable objects.
  Patch by Adam Turner
• LaTeX: Fix accidental removal at 3.5.0 (#​8854) of the documentation of
  literalblockcappos key of :ref:'sphinxsetup' <latexsphinxsetup>.
  Patch by Jean-François B.

tox-dev/tox-uv (tox-uv)

v1.36.1

Compare Source

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • "before 7am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.