Skip to content

Bump the mkdocs group across 1 directory with 4 updates - #1275

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/mkdocs-e51bbc033b
Open

Bump the mkdocs group across 1 directory with 4 updates#1275
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/mkdocs-e51bbc033b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the mkdocs group with 4 updates in the / directory: mkdocs-material, mkdocstrings, mkdocstrings-python and mkdocs-table-reader-plugin.

Updates mkdocs-material from 9.7.7 to 9.8.0

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.8.0

[!WARNING]

Material for MkDocs reaches end of life on May 5, 2027. Critical fixes and security updates continue until that date.

We're continuing our work with Zensical, a maintained successor built by the team behind Material for MkDocs. It carries forward what we've learned from building documentation tools with this community, with Markdown authoring, a familiar design, and full control over your content. Zensical is Open Source and MIT-licensed.

You can evaluate Zensical alongside MkDocs using your existing mkdocs.yml. Check plugin compatibility and compare your pages, navigation, search, and customizations before switching. The classic theme variant preserves the appearance of Material for MkDocs. See the migration guide for the steps and current compatibility details.

Upcoming changes on November 5

This is primarily a security release. It raises dependency minimums to address known vulnerabilities. We recommend upgrading to this release and updating your dependency lockfiles.

Python 3.11 or newer is now required. Python 3.8–3.10 are no longer supported.

  • Updated Node build-time dependencies to fix vulnerabilities
  • Updated Python dependency minimums and required Python 3.11
  • Removed RSS from recommended dependencies
  • Updated project status and maintenance links
  • Updated CLI notice with end-of-life and migration guidance
  • Removed redirects from recommended dependencies

Previous dependency ranges allowed versions with known vulnerabilities. The new minimums cover core Python dependencies and the optional git and imaging extras, including GitPython 3.2.1 or newer for the git extra.

Recent releases of mkdocs-rss-plugin and mkdocs-redirects depend on ProperDocs, a separate static site generator that Material for MkDocs does not require. Removing these plugins from the recommended extra keeps its dependency footprint smaller and leaves the choice of additional tools to each project. If your project uses RSS feeds or redirects, declare the relevant plugin explicitly in your own dependencies.

The CLI notice now gives the May 5, 2027 end-of-life date and links to the Zensical migration guide. It also clarifies that third-party ProperDocs migration notices do not represent a recommendation from the Material for MkDocs team. Package metadata now marks the project as inactive and includes maintenance and migration links.

Selected Python security advisories addressed by the new minimums:

Dependency Affected versions New minimum Advisory
Jinja2 <=3.1.5 3.1.6 CVE-2025-27516
Markdown <3.8.1 3.8.1 CVE-2025-69534
Pygments <2.20.0 2.20.0 CVE-2026-4539
PyMdown Extensions <=11.0.0 11.0.1 CVE-2026-67422
Requests <2.33.0 2.33.0 CVE-2026-25645
Pillow <13.0.0 13.0.0 CVE-2026-96636
CairoSVG <=2.9.0 2.9.1 CVE-2026-107378
GitPython <=3.2.0 3.2.1 CVE-2026-114145

Pillow and CairoSVG apply to the imaging extra; GitPython applies to the git extra.

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.8.0 (2026-10-24)

This is primarily a security release. It raises dependency minimums to address known vulnerabilities. We recommend upgrading to this release and updating your dependency lockfiles.

Python 3.11 or newer is now required. Python 3.8–3.10 are no longer supported.

  • Updated Node build-time dependencies to fix vulnerabilities
  • Updated Python dependency minimums and required Python 3.11
  • Removed RSS from recommended dependencies
  • Updated project status and maintenance links
  • Updated CLI notice with end-of-life and migration guidance
  • Removed redirects from recommended dependencies

Previous dependency ranges allowed versions with known vulnerabilities. The new minimums cover core Python dependencies and the optional git and imaging extras, including GitPython 3.2.1 or newer for the git extra.

Recent releases of mkdocs-rss-plugin and mkdocs-redirects depend on ProperDocs, a separate static site generator that Material for MkDocs does not require. Removing these plugins from the recommended extra keeps its dependency footprint smaller and leaves the choice of additional tools to each project. If your project uses RSS feeds or redirects, declare the relevant plugin explicitly in your own dependencies.

The CLI notice now gives the May 5, 2027 end-of-life date and links to the Zensical migration guide: https://zensical.org/docs/compatibility/mkdocs/migration/

It also clarifies that third-party ProperDocs migration notices do not represent a recommendation from the Material for MkDocs team. Package metadata now marks the project as inactive and includes maintenance and migration links.

Selected Python security advisories addressed by the new minimums:

Jinja2: affected <=3.1.5; new minimum 3.1.6 (CVE-2025-27516) GHSA-cpwx-vrp4-4pq7

Markdown: affected <3.8.1; new minimum 3.8.1 (CVE-2025-69534) GHSA-5wmx-573v-2qwq

Pygments: affected <2.20.0; new minimum 2.20.0 (CVE-2026-4539) GHSA-5239-wwwm-4pmq

PyMdown Extensions: affected <=11.0.0; new minimum 11.0.1 (CVE-2026-67422) GHSA-gm37-52c6-37mw

Requests: affected <2.33.0; new minimum 2.33.0 (CVE-2026-25645) GHSA-gc5v-m9x4-r6x2

... (truncated)

Commits
  • 0f72ad6 Merge pull request #8615 from squidfunk/fix/security
  • 85a048d Documentation
  • 10c572e Prepare 9.8.0 release
  • dd8a7ef Cleaned up unused assets
  • 8771cef Updated README
  • 7c9a1cc Updated changelog
  • 3ce9310 Removed redirects from recommended dependencies
  • 0b77e8f Updated CLI notice with end-of-life and migration guidance
  • 66e4f9c Updated project status and maintenance links
  • 1ed13d2 Removed RSS from recommended dependencies
  • Additional commits viewable in compare view

Updates mkdocstrings from 1.0.6 to 1.0.8

Release notes

Sourced from mkdocstrings's releases.

1.0.8

1.0.8 - 2026-10-19

Compare with 1.0.7

Bug Fixes

1.0.7

1.0.7 - 2026-10-10

Compare with 1.0.6

Build

  • Drop support for Python 3.10 (2c2cbb1 by Timothée Mazzucotelli).

Bug Fixes

Changelog

Sourced from mkdocstrings's changelog.

1.0.8 - 2026-10-19

Compare with 1.0.7

Bug Fixes

1.0.7 - 2026-10-10

Compare with 1.0.6

Build

  • Drop support for Python 3.10 (2c2cbb1 by Timothée Mazzucotelli).

Bug Fixes

Commits
  • df77e42 chore: Prepare release 1.0.8
  • cbc4590 chore: Stop testing on Python 3.10
  • f402d2c fix: Prefix code anchor/span IDs to avoid collisions
  • e9538c4 docs: Link the VBA handler to its published documentation
  • 79eefbc chore: Prepare release 1.0.7
  • 2c2cbb1 build: Drop support for Python 3.10
  • 7275d14 chore: Lint
  • ff510f2 fix: Support pymdownx 12.2
  • 8b635eb chore: Template upgrade
  • e0cf0ed chore: Template upgrade
  • Additional commits viewable in compare view

Updates mkdocstrings-python from 2.0.8 to 2.0.10

Release notes

Sourced from mkdocstrings-python's releases.

2.0.10

2.0.10 - 2026-10-19

Compare with 2.0.9

Build

  • Drop support for Python 3.10 (aad7fc6 by Timothée Mazzucotelli).

Bug Fixes

  • Prefix code anchor/span IDs in signatures to avoid collisions (35cde4c by Timothée Mazzucotelli). Issue-200

2.0.9

2.0.9 - 2026-09-22

Compare with 2.0.8

Bug Fixes

  • Improve inventory object types (incorrectly called roles in mkdocstrings) (d754326 by Timothée Mazzucotelli). Issue-339, PR-340
  • Expand relative cross-references against the object the docstring was written on (a9a4ca3 by Dev M). Issue-341, PR-342

Performance Improvements

  • Small performance improvement when getting aliases and formatting/highlighting signatures (2263163 by Timothée Mazzucotelli).
Changelog

Sourced from mkdocstrings-python's changelog.

2.0.10 - 2026-10-19

Compare with 2.0.9

Build

  • Drop support for Python 3.10 (aad7fc6 by Timothée Mazzucotelli).

Bug Fixes

  • Prefix code anchor/span IDs in signatures to avoid collisions (35cde4c by Timothée Mazzucotelli). Issue-200

2.0.9 - 2026-09-22

Compare with 2.0.8

Bug Fixes

  • Improve inventory object types (incorrectly called roles in mkdocstrings) (d754326 by Timothée Mazzucotelli). Issue-339, PR-340
  • Expand relative cross-references against the object the docstring was written on (a9a4ca3 by Dev M). Issue-341, PR-342

Performance Improvements

  • Small performance improvement when getting aliases and formatting/highlighting signatures (2263163 by Timothée Mazzucotelli).
Commits
  • f561c84 chore: Prepare release 2.0.10
  • aad7fc6 build: Drop support for Python 3.10
  • 35cde4c fix: Prefix code anchor/span IDs in signatures to avoid collisions
  • c888dc2 chore: Prepare release 2.0.9
  • 2263163 perf: Small performance improvement when getting aliases and formatting/highl...
  • d754326 fix: Improve inventory object types (incorrectly called roles in mkdocstrings)
  • a9a4ca3 fix: Expand relative cross-references against the object the docstring was wr...
  • See full diff in compare view

Updates mkdocs-table-reader-plugin from 4.0.1 to 4.0.2

Release notes

Sourced from mkdocs-table-reader-plugin's releases.

table-reader v4.0.2

Bug fix release. See CHANGELOG.md.

Bug fixes

  • Row labels and the index name are now escaped when you use index=True. A pipe in a label added an extra cell, and a newline split the row, which broke the table. A MultiIndex is left as is. See #94, which includes benchmarks: the default index=False is unaffected, and index=True is at most about 7% slower. Thanks @​bensynapse for reporting in timvink/mkdocs-table-reader-plugin#93

Project maintenance

  • Python 3.15 is supported and tested in CI (#95).

Full Changelog: timvink/mkdocs-table-reader-plugin@v4.0.1...v4.0.2

Changelog

Sourced from mkdocs-table-reader-plugin's changelog.

4.0.2

Bug fixes:

  • Row labels and the index name are now escaped when you use index=True. A pipe in a label added an extra cell, and a newline split the row, which broke the table. A MultiIndex is left as is. See #94, which includes benchmarks: the default index=False is unaffected, and index=True is at most about 7% slower.

Project maintenance:

  • Python 3.15 is supported and tested in CI (#95).
Commits
  • 15bf181 Release 4.0.2
  • cb26419 Merge pull request #95 from timvink/python-3.15
  • 13fa217 Merge pull request #94 from timvink/escape-index-labels
  • ba7ff59 Skip pyreadstat on Windows with Python 3.15
  • b66b95a Add Python 3.15 support
  • dfdff78 Only escape the row index when it is rendered
  • f338ffa Escape row index labels in Markdown tables
  • 42e270e Don't fail CI on Codecov upload errors
  • e7b0846 Upgrade vulnerable dependencies in lockfile
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the mkdocs group across 1 directory with 4 updates
7918de1 
Bumps the mkdocs group with 4 updates in the / directory: [mkdocs-material](https://github.com/squidfunk/mkdocs-material), [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings), [mkdocstrings-python](https://github.com/mkdocstrings/python) and [mkdocs-table-reader-plugin](https://github.com/timvink/mkdocs-table-reader-plugin).


Updates `mkdocs-material` from 9.7.7 to 9.8.0
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.7.7...9.8.0)

Updates `mkdocstrings` from 1.0.6 to 1.0.8
- [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases)
- [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/mkdocstrings@1.0.6...1.0.8)

Updates `mkdocstrings-python` from 2.0.8 to 2.0.10
- [Release notes](https://github.com/mkdocstrings/python/releases)
- [Changelog](https://github.com/mkdocstrings/python/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/python@2.0.8...2.0.10)

Updates `mkdocs-table-reader-plugin` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/timvink/mkdocs-table-reader-plugin/releases)
- [Changelog](https://github.com/timvink/mkdocs-table-reader-plugin/blob/master/CHANGELOG.md)
- [Commits](timvink/mkdocs-table-reader-plugin@v4.0.1...v4.0.2)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-version: 9.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mkdocs
- dependency-name: mkdocstrings
  dependency-version: 1.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mkdocs
- dependency-name: mkdocstrings-python
  dependency-version: 2.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mkdocs
- dependency-name: mkdocs-table-reader-plugin
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mkdocs
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 2, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ahouseholder ahouseholder Awaiting requested review from ahouseholder ahouseholder is a code owner
@sei-vsarvepalli sei-vsarvepalli Awaiting requested review from sei-vsarvepalli sei-vsarvepalli is a code owner
@cgyarbrough cgyarbrough Awaiting requested review from cgyarbrough cgyarbrough is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants