Bump the docs group across 1 directory with 8 updates

[dependabot]

Updates the requirements on mkdocs-callouts, mkdocs-git-authors-plugin, mkdocs-git-revision-date-localized-plugin, mkdocs-material, mkdocs-table-reader-plugin, pandas, pymdown-extensions and python-on-whales to permit the latest version.
Updates mkdocs-callouts to 1.17.1

Release notes

Sourced from mkdocs-callouts's releases.

Minor bugfix when using "Title from first bold"

Fixes (title from first bold enabled only):

• Multiple callout blocks in a row would result in lines being lost
• Bold text has to be on the correct indentation level (stricter regex)

Full Changelog: sondregronas/mkdocs-callouts@v1.17.0...v1.17.1

Commits

• 7c2c11d fix: no backslash in f-string for older python support
• 07d01b7 fix: stricter title from first bold detection
• 7d1089c ci: temporarily add a workflow dispatch to release workflow
• 96d7aae ci: add workflow dispatch to test
• e77a7a7 feat: add an option to use the first bold text as title
• 2cc611b feat: add an option to use the first bold text as title
• d10afb7 Merge pull request #33 from sondregronas/dependabot/github_actions/github-act...
• a1feaa5 Bump actions/setup-python in the github-actions-updates group
• ed2fcd2 Merge pull request #32 from sondregronas/dependabot/github_actions/github-act...
• 90181fe Bump actions/checkout from 6 to 7 in the github-actions-updates group
• Additional commits viewable in compare view

Updates mkdocs-git-authors-plugin to 0.10.0

Release notes

Sourced from mkdocs-git-authors-plugin's releases.

v0.10.0

What's Changed

• New add_co_authors option (disabled by default) by @​fpozzobon in timvink/mkdocs-git-authors-plugin#111

Full Changelog: timvink/mkdocs-git-authors-plugin@v0.9.6...v0.10.0

Commits

• d0fbbda bump to v0.10
• dff4931 Adding documentation of co_authors and set to false by default
• ad20883 Add co authors as option
• 0a216e7 moving co-author filter to page responsibility
• 619b18d list backward compatible
• b582ea1 Code review:
• 927324d Optimise logs
• 370ee36 Bump to 0.9.6
• 4306710 removing warning escape
• c716530 Adding tests, removed first space
• Additional commits viewable in compare view

Updates mkdocs-git-revision-date-localized-plugin to 1.5.4

Release notes

Sourced from mkdocs-git-revision-date-localized-plugin's releases.

v1.5.4

Security

Raises the gitpython floor from >=3.1.44 to >=3.1.59.

Earlier dependabot bumps only touched this repo's uv.lock, which pins the CI environment and nothing else. Downstream users installing from PyPI resolved against pyproject.toml, so they could still land on a GitPython carrying the 2026 option-injection advisories — GHSA-wvpp-8hx9-p66j and GHSA-jm78-9fvv-mhgr among them, all patched by 3.1.58, with further option hardening in 3.1.59.

This plugin never passes user input as git options, so it was not exploitable through those. The floor bump forces the upgrade in environments that already hold an older GitPython, and clears the warnings downstream scanners report.

Thanks to @​nucleus-ffm for reporting it in #222.

Maintenance

• Harden test git repos against flaky "Error building trees" failures by @​timvink in #212
• ci: update GitHub Actions to Node 24 compatible versions by @​timvink in #213
• deps: bump idna and pymdown-extensions to patch security alerts by @​timvink in #214
• Bump gitpython from 3.1.50 to 3.1.58 in #217, #219, #220
• Bump pymdown-extensions from 10.21.3 to 11.0.1 in #218, #221

Full Changelog: timvink/mkdocs-git-revision-date-localized-plugin@v1.5.3...v1.5.4

Commits

• a2313a3 Bump version to 1.5.4
• b1be777 Bump pymdown-extensions from 11.0 to 11.0.1 (#221)
• fd6e3b0 Bump gitpython from 3.1.57 to 3.1.58 (#220)
• 0c308d5 Bump gitpython from 3.1.54 to 3.1.57 (#219)
• 75279a9 Bump pymdown-extensions from 10.21.3 to 11.0 (#218)
• 7756fee Bump gitpython from 3.1.50 to 3.1.54 (#217)
• 0c2e203 deps: bump idna and pymdown-extensions to patch security alerts (#214)
• aa44586 ci: update GitHub Actions to Node 24 compatible versions (#213)
• 58eb930 Harden test git repos against flaky 'Error building trees' failures (#212)
• 30e5876 Bump version to 1.5.3
• Additional commits viewable in compare view

Updates mkdocs-material from 9.7.1 to 9.7.7

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.7

[!WARNING]

Material for MkDocs is approaching end of life

Material for MkDocs is scheduled to reach end of life on November 5, 2026. Until then, maintenance is limited to critical bug fixes and security updates. After this date, the project will remain available on PyPI and GitHub, but no further maintenance is planned except in exceptional circumstances.

For users looking for a long-term, actively developed successor, we're building Zensical – a next-generation static site generator designed for technical documentation. If you're planning a new documentation project or evaluating your long-term options, we invite you to take a look.

Organizations requiring support beyond this date are welcome to get in touch to discuss available options.

Read the full announcement on our blog

Changes

• Fixed a DOM-based XSS vulnerability in search suggestions

Thanks to @​p- for responsibly reporting this issue.

mkdocs-material-9.7.6

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

• Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

... (truncated)

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.7 (2026-07-17)

• Fixed DOM-based XSS vulnerability in search suggestions

mkdocs-material-9.7.6 (2026-03-19)

• Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

• Limited version range of mkdocs to <2
• Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

• Hardened social cards plugin by switching to sandboxed environment
• Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

• Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

• Opened up version ranges of optional dependencies for forward-compatibility
• Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

• Updated requests to 2.30+ to mitigate CVE in urllib
• Fixed privacy plugin not picking up protocol-relative URLs
• Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved

... (truncated)

Commits

• b3e6dd8 Prepare 9.7.7 release
• 52fb6be Merge commit from fork
• 901e633 Added SECURITY.md with EOL notice
• 5b36f2a Bump js-yaml from 4.1.1 to 4.2.0 (#8598)
• 2d11e7b Bump form-data from 3.0.4 to 3.0.5 (#8597)
• ae05a53 Bump esbuild from 0.27.2 to 0.28.1 (#8596)
• 434af93 Bump shell-quote from 1.7.3 to 1.8.4 (#8593)
• 4447cda Documentation (#8590)
• 8f8d551 Updated copyright year (#8588)
• 08d8514 Bump fast-uri from 3.0.3 to 3.1.2 (#8587)
• Additional commits viewable in compare view

Updates mkdocs-table-reader-plugin to 3.1.0

Release notes

Sourced from mkdocs-table-reader-plugin's releases.

table-reader v3.1.0

• Improved documentation on Compatibility with mkdocs-macros-plugin
• Added additional pd_<reader_name> macros (overview on the readers page), available when mkdocs-macros-plugin is enabled. This enables new options like filtering tables, see the examples on the compatibility with mkdocs-macros-plugin

Full Changelog: timvink/mkdocs-table-reader-plugin@v3.0.1...v3.1.0

Commits

• 14a6c4a Update documentation on macros compatibility
• 2cb9b08 typos
• 4902747 Use macros in table-reader docs
• cd9e558 Extend number of macros
• 47ac5d5 update docs on how to use jinja, see #72
• 5dcaeca Merge pull request #69 from timvink/add_support_for_indentation_in_macros
• 572b702 Add support for fixing indentation in jinja
• 9f6b419 Merge pull request #68 from timvink/v2_version
• 80928d8 bump to v3.0.0
• b94523e ruff format
• Additional commits viewable in compare view

Updates pandas to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• e68db09 RLS: 3.0.5
• 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
• 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
• bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
• 8188eb1 RLS: 3.0.4 (#66079)
• bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
• 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
• 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
• 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
• f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
• Additional commits viewable in compare view

Updates pymdown-extensions to 11.0.2

Release notes

Sourced from pymdown-extensions's releases.

11.0.2

• FIX: InlineHilite: Improve performance of inline code matching.
• FIX: Keys: Fix regex pattern inefficiencies.
• FIX: Blocks.HTML: Fix backtracking in HTML extension.

Commits

• b8996d7 Docs: Update JS deps
• 3a190d9 Fix backtracking in HTML blocks extension
• 819f2f8 Keys: Fix regex pattern inefficiencies.
• 34fc8e2 Improve InlineHilite pattern parsing
• 5dfef3f Fix lint
• f263972 Update tests to match latest Pygments
• 6d3688e Make a note about symlinks and snippets
• c684985 Merge commit from fork
• 6d0097b Update changelog
• f4808ea Bump version and update changelog
• Additional commits viewable in compare view

Updates python-on-whales to 0.81.0

Release notes

Sourced from python-on-whales's releases.

v0.81.0

What's Changed

• More accurate error handling when streaming stdout and stderr by @​Hasnainz in gabrieldemarmiesse/python-on-whales#703
• feat(compose): Add support for docker compose up SERVICE --no-deps by @​romeroyonatan in gabrieldemarmiesse/python-on-whales#708

New Contributors

• @​romeroyonatan made their first contribution in gabrieldemarmiesse/python-on-whales#708

Full Changelog: gabrieldemarmiesse/python-on-whales@v0.80.0...v0.81.0

Commits

• 059d89a Bump version to 0.81.0
• f0b529e feat(compose): Add support for docker compose up SERVICE --no-deps (#708)
• b615fc4 More accurate error handling when streaming stdout and stderr (#703)
• ee87a94 Bump version to 0.80.0
• 12efa46 Add support for --metadata-file option with buildx bake (#693)
• 6dfcce4 Add --service-ports flag to compose.run (#701)
• fde7e12 Use the trusted publisher system of pypi (#702)
• 511ca73 Add another test for buildx secrets (#651)
• 5c697f9 fix: missing ipam_config in NetworkInspectResult (#700)
• 6423af2 Add unconditional debug level logging (#696)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

docs/requirements.txt

Package	Version	License	Issue Type
python_on_whales	>= 0.81.0	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
pip/mkdocs-callouts	>= 1.17.1	Unknown	Unknown
pip/mkdocs-git-authors-plugin	>= 0.10.0	Unknown	Unknown
pip/mkdocs-git-revision-date-localized-plugin	>= 1.5.4	Unknown	Unknown
pip/mkdocs-material	9.7.7	Unknown	Unknown
pip/mkdocs-table-reader-plugin	>= 3.1.0	Unknown	Unknown
pip/pandas	>= 3.0.5	Unknown	Unknown
pip/pymdown-extensions	>= 11.0.2	Unknown	Unknown
pip/python_on_whales	>= 0.81.0	Unknown	Unknown

Scanned Files

• docs/requirements.txt