[dependabot]

Bumps semver from 3.1.0 to 3.1.1.

Release notes

Sourced from semver's releases.

3.1.1

What's Changed

• Reject invalid token arguments in Version.bump_prerelease and Version.bump_build by @​Str0k in python-semver/python-semver#483
• Fix #484: Increment old-style prerelease with dot by @​tomschr in python-semver/python-semver#485
• Drop build metadata when bumping an old-style prerelease by @​youdie006 in python-semver/python-semver#486
• Compare long numeric prerelease identifiers without integer conversion by @​SAY-5 in python-semver/python-semver#488
• fix: validate and match prerelease token prefixes by @​MbappeWU in python-semver/python-semver#489
• Bump urllib3 from 2.7.0 to 2.8.0 by @​dependabot[bot] in python-semver/python-semver#491
• Bump virtualenv from 21.5.1 to 21.7.13 by @​dependabot[bot] in python-semver/python-semver#492
• Annotate supported bytes inputs to Version.is_valid by @​xiehuanyi in python-semver/python-semver#495
• Preserve version order when switching prerelease tokens by @​Apeksha9389 in python-semver/python-semver#498
• Preserve version order when legacy prerelease counters roll over by @​pabszero in python-semver/python-semver#500
• Bump virtualenv from 21.7.13 to 21.14.13 by @​dependabot[bot] in python-semver/python-semver#503
• Bump certifi from 2026.6.17 to 2026.10.19 by @​dependabot[bot] in python-semver/python-semver#504
• Preserve constructor TypeError in Version.replace by @​Zhuyuyangyy in python-semver/python-semver#501
• test: cover six behaviours found untested by mutation testing by @​coresystemdev23 in python-semver/python-semver#502
• Use the integer index protocol for Version subscripts by @​shrohan2003 in python-semver/python-semver#508
• Bump version 3.1.0 -> 3.1.1 by @​tomschr in python-semver/python-semver#509

New Contributors

• @​youdie006 made their first contribution in python-semver/python-semver#486
• @​SAY-5 made their first contribution in python-semver/python-semver#488
• @​MbappeWU made their first contribution in python-semver/python-semver#489
• @​xiehuanyi made their first contribution in python-semver/python-semver#495
• @​Apeksha9389 made their first contribution in python-semver/python-semver#498
• @​pabszero made their first contribution in python-semver/python-semver#500
• @​Zhuyuyangyy made their first contribution in python-semver/python-semver#501
• @​coresystemdev23 made their first contribution in python-semver/python-semver#502
• @​shrohan2003 made their first contribution in python-semver/python-semver#508

Full Changelog: python-semver/python-semver@3.1.0...3.1.1 Documentation: https://python-semver.readthedocs.io/en/3.1.1/ Discussion: python-semver/python-semver#510

Changelog

Sourced from semver's changelog.

Version 3.1.1

:Released: 2026-11-09 :Maintainer: Tom Schraitle

Bug Fixes

• :pr:483: Fix :meth:~semver.Version.bump_prerelease and :meth:~semver.Version.bump_build to raise a :class:ValueError when the token argument is not a valid dot-separated SemVer identifier (for example build+meta or rc.). Previously such tokens were concatenated unchecked, producing version strings that :meth:~semver.Version.parse itself would reject.

• :pr:486: Fix :meth:~semver.Version.next_version to drop the build metadata when incrementing an old-style prerelease without a dot separator (for example rc3). Previously 1.2.3-rc3+build.5 became 1.2.3-rc4+build.5 while 1.2.3-rc.3+build.5 became 1.2.3-rc.4.

• :pr:489: Version.next_version now validates used prerelease tokens and matches token families literally. Invalid tokens raise ValueError. Dotted prefixes advance correctly while existing qualifier chains and legacy counters are preserved.

• :pr:495: The type annotation of Version.is_valid() now includes its existing support for UTF-8 encoded byte strings.

• :pr:501: Version.replace() now preserves the original constructor TypeError when an existing version component receives an invalid value, rather than reporting zero unexpected keyword arguments.

• :pr:508: Version subscripts now accept objects implementing __index__ and raise TypeError for invalid key types.

• :gh:484: Fix :meth:~semver.Version.next_version to correctly increment old-style prerelease versions without a dot separator (for example rc3). Previously, calling next_version("prerelease") on such versions would reset the prerelease number to 1 instead of incrementing it.

• :gh:487: Comparing versions with long numeric prerelease identifiers no longer raises ValueError because of Python's integer string conversion limit.

• :gh:497: Version.next_version("prerelease", prerelease_token=...) now advances the patch version when switching tokens would otherwise produce a lower version. For example, switching from 1.2.3-rc.1 to alpha returns 1.2.4-alpha.1. Forward token changes retain the current patch version.

• :gh:499: Version.next_version("prerelease") now advances the patch version when incrementing an old-style prerelease counter would produce an older version. For example, 1.2.3-rc9 becomes 1.2.4-rc10. The legacy token and incremented counter are preserved; increments that already move forward keep the current patch version.

Trivial Changes

• :pr:502: Add tests for six behaviours that mutation testing showed were not covered: :func:match() at the boundary version, build metadata in :func:is_compatible(), numeric-only prereleases in :func:bump_prerelease(), the :command:pysemver return code for an invalid version, and the :func:deprecated() messages.

... (truncated)

Commits

• b6e83e3 Bump version 3.1.0 -> 3.1.1 (#509)
• 9f6894d Fix Version subscripts to honor index (#508)
• f3c7138 test: cover six behaviours found untested by mutation testing (#502)
• 0bd62d4 Preserve constructor TypeError in Version.replace (#501)
• 15a42d0 Bump certifi from 2026.6.17 to 2026.10.19 (#504)
• 868a6b3 Bump virtualenv from 21.7.13 to 21.14.13 (#503)
• 9ef4131 Preserve version order when legacy prerelease counters roll over (#500)
• bcd151f Preserve version order when switching prerelease tokens (#498)
• 94debf9 Annotate supported bytes inputs to Version.is_valid (#495)
• 84561d5 Bump virtualenv from 21.5.1 to 21.7.13 (#492)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)