[dependabot]

Bumps the python-dependencies group with 3 updates: types-pyyaml, mkdocs-material and pymdown-extensions.

Updates types-pyyaml from 6.0.12.20261103 to 6.0.12.20261111

Commits

• See full diff in compare view

Updates mkdocs-material from 9.8.0 to 9.8.1

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.8.1

[!WARNING]

Material for MkDocs reaches end of life on May 5, 2027. Critical fixes and security updates continue until that date.

We're continuing our work with Zensical, a maintained successor built by the team behind Material for MkDocs. It carries forward what we've learned from building documentation tools with this community, with Markdown authoring, a familiar design, and full control over your content. Zensical is Open Source and MIT-licensed.

You can evaluate Zensical alongside MkDocs using your existing mkdocs.yml. Check plugin compatibility and compare your pages, navigation, search, and customizations before switching. The classic theme variant preserves the appearance of Material for MkDocs. See the migration guide for the steps and current compatibility details.

Upcoming changes on November 5

• Updated Docker base image to Alpine 3.24
• Updated Docker image dependencies to fix vulnerabilities
• Updated Node build-time dependencies to fix vulnerabilities

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.8.1 (2026-11-07)

• Updated Docker base image to Alpine 3.24
• Updated Docker image dependencies to fix vulnerabilities
• Updated Node build-time dependencies to fix vulnerabilities

mkdocs-material-9.8.0 (2026-10-24)

This is primarily a security release. It raises dependency minimums to address known vulnerabilities. We recommend upgrading to this release and updating your dependency lockfiles.

Python 3.11 or newer is now required. Python 3.8–3.10 are no longer supported.

• Updated Node build-time dependencies to fix vulnerabilities
• Updated Python dependency minimums and required Python 3.11
• Removed RSS from recommended dependencies
• Updated project status and maintenance links
• Updated CLI notice with end-of-life and migration guidance
• Removed redirects from recommended dependencies

Previous dependency ranges allowed versions with known vulnerabilities. The new minimums cover core Python dependencies and the optional git and imaging extras, including GitPython 3.2.1 or newer for the git extra.

Recent releases of mkdocs-rss-plugin and mkdocs-redirects depend on ProperDocs, a separate static site generator that Material for MkDocs does not require. Removing these plugins from the recommended extra keeps its dependency footprint smaller and leaves the choice of additional tools to each project. If your project uses RSS feeds or redirects, declare the relevant plugin explicitly in your own dependencies.

The CLI notice now gives the May 5, 2027 end-of-life date and links to the Zensical migration guide: https://zensical.org/docs/compatibility/mkdocs/migration/

It also clarifies that third-party ProperDocs migration notices do not represent a recommendation from the Material for MkDocs team. Package metadata now marks the project as inactive and includes maintenance and migration links.

Selected Python security advisories addressed by the new minimums:

Jinja2: affected <=3.1.5; new minimum 3.1.6 (CVE-2025-27516) GHSA-cpwx-vrp4-4pq7

Markdown: affected <3.8.1; new minimum 3.8.1 (CVE-2025-69534) GHSA-5wmx-573v-2qwq

Pygments: affected <2.20.0; new minimum 2.20.0 (CVE-2026-4539) GHSA-5239-wwwm-4pmq

... (truncated)

Commits

• 16c95ad Prepare 9.8.1 release
• b3fe832 Fixed documentation workflow
• 004d29e Updated dependencies to fix vulnerabilities
• 7590e14 Documentation
• 0f044db Updated documentation build to use public Material
• dc38d1e Documentation
• ebbfb46 Updated Docker base image to Alpine 3.24
• 624aff1 Updated build and documentation workflows
• See full diff in compare view

Updates pymdown-extensions from 12.3 to 13.1

Release notes

Sourced from pymdown-extensions's releases.

13.1

• NEW: Snippets: Respect the Retry-After header when a URL responds with a 429. The server's requested delay is used instead of our backoff, and the snippet fails right away if it is longer than the longest we would wait ourselves (backoff_factor times max_retries).
• NEW: Snippets: Split snippet processing into steps that an extension can override (parse_snippet_target, select_snippet_lines, and process_snippet_lines) to add notation or change included content, and add get_syntax_mask to find which lines are snippet notation so they can be left alone. (#3040)
• FIX: Fix an issue where only our test environment required Python Markdown 3.10.3. Installs must require this.
• FIX: Snippets: Fix quadratic time complexity when parsing very long runs of ; or - in content, and very long snippet paths with line ranges.
• FIX: Quotes, Details (legacy), Tabbed (legacy), FancyLists, Blocks, and Snippets: Gracefully stop short of the recursion limit when content is nested too deeply, instead of raising a RecursionError. This includes content nested inside of a document structure that is already deep, such as a quote or tab inside of many nested lists. Content past the limit is no longer specially processed (Snippets skips includes past the limit, as it does for cyclic includes).

13.0

• BREAK: Arithmatex: Generic mode is now the default mode as the old MathJax script approach has not been supported in MathJax for a long time now. We still provide script approach and have updated configuration to get it properly working in recent MathJax versions.
• BREAK: Arithmatex: Non-generic mode now escapes content in script to prevent closing </script> from causing unintended behavior. Guidance on configuration for non-generic mode has been updated in the documentation.
• NEW: Require at least Python Markdown 3.10.3 for performance improvements.
• NEW: Drop Python 3.10 and require Python >= 3.11.5 as possessive quantifiers are broken on lower versions.
• NEW: MagicLink: Bare http://, https://, and www. links now follow GFM's extended autolink rules for what is considered the end of a link (trailing punctuation, entities, unbalanced ) and ]) and what a link can follow. Links no longer start after arbitrary punctuation (quotes are still allowed), and http://host style links with a short host are allowed.
• FIX: Critic: Fix quadratic (and cubic for substitutions) time complexity when parsing a large number of unclosed CriticMarkup openers by replacing the regular expression with a linear time scanner.
• FIX: PathConverter, B64: Handle elements with unquoted attributes.
• FIX: Arithmatex: Fix generic mode output when tex_inline_wrap or tex_block_wrap contain braces.
• FIX: InlineHilite: Fix regression related to unmatched opening and closing.
• FIX: FancyLists: Keep i and I in alphabetical lists after a blank line.
• FIX: BracketSpan: Fix unwanted colon attributes with {: ...} syntax.
• FIX: Snippets: Fix escaped section markers starting or ending a section before its start.
• FIX: StripHTML: Fix crash when strip_comments is disabled.
• FIX: Quotes: Fix callouts in indented blockquotes.
• FIX: Details, Admonitions, SaneHeaders: Improve performance of header patterns.
• FIX: Blocks.HTML: Improve performance of HTML patterns.
• FIX: MagicLink: Fix URLs with balanced parentheses or brackets losing their closing character.
• FIX: MagicLink: Improve performance of link and email patterns by removing excessive backtracking.
• FIX: ProgressBar: Fix crash on malformed 100 percent values like [=100,0%].
• FIX: BracketSpan: Fix text being dropped or misplaced when an unpaired [ precedes a span that is returned from the cache, e.g. [[]{#a}[b[]{#c}.
• FIX: BetterEm, Tilde, Caret, Mark: Apply the CommonMark "rule of 3" so an ambiguous closing delimiter can skip an incompatible opener and pair with an earlier one, e.g. __[A](https://github.com/facelessuser/pymdown-extensions/blob/HEAD/u){target="_blank"}__: x.
• FIX: BetterEm, Tilde, Caret, Mark: Better handling of Python Markdown placeholders when when evaluating

... (truncated)

Commits

• 9f07df0 Snippets: split parse_snippets into overridable steps (#3040)
• d6c5840 Fix spelling
• 7a88c19 Better recursion protection
• d327fd5 Snippets performance improvements
• f554351 Fix various scenarios where recursion errors could happen
• a02b252 Reorder changelog
• 04ce496 Update example
• 8db006c Remove test markdown
• 87e1fa8 Arithmatex default to generic and escape not generic content
• 9243923 Rework Critic to be more performant
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (65628d9) to head (e0df250).

Additional details and impacted files

@@            Coverage Diff            @@
##               dev      #302   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            2         2           
  Lines          422       422           
=========================================
  Hits           422       422           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.