chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
cryptography (changelog)	==46.0.2 -> ==46.0.3				patch
rpds-py	==0.27.1 -> ==0.28.0				minor
ruamel-yaml	==0.18.15 -> ==0.18.16				patch
	All locks refreshed				lockFileMaintenance
coverage	7.10.7 -> 7.11.0			dependency-groups	minor
cryptography (changelog)	46.0.2 -> 46.0.3			project.dependencies	patch
matplotlib-inline	0.1.7 -> 0.2.1			dependency-groups	minor
pip (changelog)	25.2 -> 25.3			dependency-groups	minor
psutil	7.1.0 -> 7.1.3			dependency-groups	patch
pylint (changelog)	4.0.1 -> 4.0.2			dependency-groups	patch
ruamel-yaml	0.18.15 -> 0.18.16			dependency-groups	patch
ruamel-yaml	0.18.15 -> 0.18.16			project.dependencies	patch
setuptools-scm	9.2.1 -> 9.2.2			dependency-groups	patch
setuptools_scm	9.2.1 -> 9.2.2			build-system.requires	patch
tox (changelog)	4.31.0 -> 4.32.0			dependency-groups	minor

---

Release Notes

pyca/cryptography (cryptography)

v46.0.3

Compare Source

crate-py/rpds (rpds-py)

v0.28.0

Compare Source

What's Changed

• Bump PyO3 to 0.27

Full Changelog: crate-py/rpds@v0.27.1...v0.28.0

nedbat/coveragepy (coverage)

v7.11.0

Compare Source

• Dropped support for Python 3.9, declared support for Python 3.15 alpha.

.. _changes_7-10-7:

ipython/matplotlib-inline (matplotlib-inline)

v0.2.1

Compare Source

pypa/pip (pip)

v25.3

Compare Source

giampaolo/psutil (psutil)

v7.1.3

Compare Source

=====

2025-11-02

Enhancements

• 2667_: enforce clang-format on all C and header files. It is now the
  mandatory formatting style for all C sources.
• 2672_, [macOS], [BSD]: increase the chances to recognize zombie processes and
  raise the appropriate exception (ZombieProcess_).
• 2676_, 2678_: replace unsafe sprintf / snprintf / sprintf_s calls with
  str_format(). Replace strlcat / strlcpy with safe str_copy /
  str_append. This unifies string handling across platforms and reduces
  unsafe usage of standard string functions, improving robustness.

Bug fixes

• 2674_, [Windows]: disk_usage()_ could truncate values on 32-bit platforms,
  potentially reporting incorrect total/free/used space for drives larger than
  4GB.
• 2675_, [macOS]: Process.status()_ incorrectly returns "running" for 99%
  of the processes.
• 2677_, [Windows]: fix MAC address string construction in net_if_addrs()_.
  Previously, the MAC address buffer was incorrectly updated using a fixed
  increment and sprintf_s, which could overflow or misformat the
  string if the MAC length or formatting changed. Also, the final '\n' was
  inserted unnecessarily.
• 2679_, [OpenBSD], [NetBSD], [critical]: can't build due to C syntax error.

v7.1.2

Compare Source

=====

2025-10-25

Enhancements

• 2657_: stop publishing prebuilt Linux and Windows wheels for 32-bit Python.
  32-bit CPython is still supported, but psutil must now be built from source.
  2565_: produce wheels for free-thread cPython 3.13 and 3.14 (patch by
  Lysandros Nikolaou)

Bug fixes

• 2650_, [macOS]: Process.cmdline()_ and Process.environ()_ may incorrectly
  raise NoSuchProcess_ instead of ZombieProcess_.
• 2658_, [macOS]: double free() in Process.environ()_ when it fails
  internally. This posed a risk of segfault.
• 2662_, [macOS]: massive C code cleanup to guard against possible segfaults
  which were (not so) sporadically spotted on CI.

Compatibility notes

• 2657_: stop publishing prebuilt Linux and Windows wheels for 32-bit Python.

v7.1.1

Compare Source

=====

2025-10-19

Enhancements

• 2645_, [SunOS]: dropped support for SunOS 10.
• 2646_, [SunOS]: add CI test runner for SunOS.

Bug fixes

• 2641_, [SunOS]: cannot compile psutil from sources due to missing C include.
• 2357_, [SunOS]: Process.cmdline()_ does not handle spaces properly. (patch
  by Ben Raz)

Compatibility notes

• 2645_: SunOS 10 is no longer supported.

pylint-dev/pylint (pylint)

v4.0.2

Compare Source

False Positives Fixed

• Fix false positive for invalid-name on a partially uninferable module-level constant.

  Closes #​10652

• Fix a false positive for invalid-name on exclusive module-level assignments
  composed of three or more branches. We won't raise disallowed-name on module-level names that can't be inferred
  until a further refactor to remove this false negative is done.

  Closes #​10664

• Fix false positive for invalid-name for TypedDict instances.

  Closes #​10672

pypa/setuptools-scm (setuptools-scm)

v9.2.2

Compare Source

Fixed

• fix #​1231: don't warn about tool.setuptools.dynamic.version when only using file finder.
  The warning about combining version guessing with setuptools dynamic versions should only
  be issued when setuptools-scm is performing version inference, not when it's only being
  used for its file finder functionality.

tox-dev/tox (tox)

v4.32.0

Compare Source

What's Changed

• docs: Add Python 3.14 and 3.14t to config examples by @​cclauss in #​3626
• Fix broken log message (in that branch it did not match the arguments). by @​ionelmc in #​3634
• Allow braced range syntax in internal sections of tox.ini file by @​marcosboger in #​3631
• fix: ensure log folder is created before writing the execution logs by @​ssbarnea in #​3633
• TST: add weekly compatibility checks for CPython 3.15 by @​neutrinoceros in #​3629

New Contributors

• @​ionelmc made their first contribution in #​3634
• @​marcosboger made their first contribution in #​3631
• @​neutrinoceros made their first contribution in #​3629

Full Changelog: tox-dev/tox@4.31.0...4.32.0

---

Configuration

📅 Schedule: Branch creation - "before 4am on monday" in timezone UTC, Automerge - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone UTC.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.