build(deps): update bugfixes (hotfix/2.7)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
jinja2 (changelog)	==3.1.5 -> ==3.1.6
pydantic (changelog)	==1.10.21 -> ==1.10.24
pyyaml (source)	==6.0.2 -> ==6.0.3
requests (source, changelog)	==2.32.3 -> ==2.32.5
types-pyyaml (changelog)	==6.0.12.20241230 -> ==6.0.12.20250915

---

Release Notes

pallets/jinja (jinja2)

v3.1.6

Compare Source

Released 2025-03-05

• The |attr filter does not bypass the environment's attribute lookup,
  allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7

pydantic/pydantic (pydantic)

v1.10.24

Compare Source

GitHub release

What's Changed

This is the final 2.12 release. It features the work of 20 external contributors and provides useful new features, along with initial Python 3.14 support.
Several minor changes (considered non-breaking changes according to our versioning policy)
are also included in this release. Make sure to look into them before upgrading.

Note that Pydantic V1 is not compatible with Python 3.14 and greater.

Changes (see the alpha and beta releases for additional changes since 2.11):

Packaging

• Update V1 copy to v1.10.24 by @​Viicos in #​12338

New Features

• Add extra parameter to the validate functions by @​anvilpete in #​12233
• Add exclude_computed_fields serialization option by @​Viicos in #​12334
• Add preverse_empty_path URL options by @​Viicos in #​12336
• Add union_format parameter to JSON Schema generation by @​Viicos in #​12147
• Add __qualname__ parameter for create_model by @​Atry in #​12001

Fixes

• Do not try to infer name from lambda definitions in pipelines API by @​Viicos in #​12289
• Use proper namespace for functions in TypeAdapter by @​Viicos in #​12324
• Use Any for context type annotation in TypeAdapter by @​inducer in #​12279
• Expose FieldInfo in pydantic.fields.__all__ by @​Viicos in #​12339
• Respect validation_alias in @validate_call by @​Viicos in #​12340
• Use Any as context annotation in plugin API by @​Viicos in #​12341
• Use proper stacklevel in warnings when possible by @​Viicos in #​12342

New Contributors

• @​anvilpete made their first contribution in #​12233
• @​JonathanWindell made their first contribution in #​12327
• @​inducer made their first contribution in #​12279
• @​Atry made their first contribution in #​12001

v1.10.23

Compare Source

• Fix mypy plugin for mypy 1.18 by @​cdce8p in #​12207

v1.10.22

Compare Source

• Fix compatibility with typing-extensions by @​Viicos in #​11764

yaml/pyyaml (pyyaml)

v6.0.3

Compare Source

What's Changed

• Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

psf/requests (requests)

v2.32.5

Compare Source

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created
  a new class of issues in Requests that have had negative impact across a number
  of use cases. The Requests team has decided to revert this feature as long term
  maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

v2.32.4

Compare Source

Security

• CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted
  environment will retrieve credentials for the wrong hostname/machine from a
  netrc file.

Improvements

• Numerous documentation improvements

Deprecations

• Added support for pypy 3.11 for Linux and macOS.
• Dropped support for pypy 3.9 following its end of support.

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.