Merge branch 'main' into rstuf-bootstrap

Author: ewdurbin

Makefile

@@ -95,7 +95,7 @@ translations: .state/docker-build-base
 	docker compose run --rm base bin/translations
 
 requirements/%.txt: requirements/%.in
-	docker compose run --rm base bin/pip-compile --allow-unsafe --generate-hashes --output-file=$@ $<
+	docker compose run --rm base bin/pip-compile --generate-hashes --output-file=$@ $<
 
 initdb: .state/docker-build-base
 	docker compose run --rm web psql -h db -d postgres -U postgres -c "SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname ='warehouse';"

bin/deps

@@ -12,13 +12,13 @@ set -x
 
 export TMPDIR=$(mktemp -d)
 mkdir -p $TMPDIR/docs
-pip-compile --upgrade --allow-unsafe -o $TMPDIR/deploy.txt requirements/deploy.in > /dev/null
-pip-compile --upgrade --allow-unsafe -o $TMPDIR/main.txt requirements/main.in > /dev/null
-pip-compile --upgrade --allow-unsafe -o $TMPDIR/lint.txt requirements/lint.in > /dev/null
-pip-compile --upgrade --allow-unsafe -o $TMPDIR/tests.txt requirements/tests.in > /dev/null
-pip-compile --upgrade --allow-unsafe -o $TMPDIR/docs-dev.txt requirements/docs-dev.in > /dev/null
-pip-compile --upgrade --allow-unsafe -o $TMPDIR/docs-user.txt requirements/docs-user.in > /dev/null
-pip-compile --upgrade --allow-unsafe -o $TMPDIR/docs-blog.txt requirements/docs-blog.in > /dev/null
+pip-compile --upgrade -o $TMPDIR/deploy.txt requirements/deploy.in > /dev/null
+pip-compile --upgrade -o $TMPDIR/main.txt requirements/main.in > /dev/null
+pip-compile --upgrade -o $TMPDIR/lint.txt requirements/lint.in > /dev/null
+pip-compile --upgrade -o $TMPDIR/tests.txt requirements/tests.in > /dev/null
+pip-compile --upgrade -o $TMPDIR/docs-dev.txt requirements/docs-dev.in > /dev/null
+pip-compile --upgrade -o $TMPDIR/docs-user.txt requirements/docs-user.in > /dev/null
+pip-compile --upgrade -o $TMPDIR/docs-blog.txt requirements/docs-blog.in > /dev/null
 python bin/depchecker.py $TMPDIR/deploy.txt requirements/deploy.txt
 python bin/depchecker.py $TMPDIR/main.txt requirements/main.txt
 python bin/depchecker.py $TMPDIR/lint.txt requirements/lint.txt

docs/blog/assets/2024-03-06-report-project-as-malware-button.png

@@ -0,0 +1,71 @@
+---
+title: Malware Reporting Evolved
+description: PyPI now has a new, improved way to report malware.
+authors:
+  - miketheman
+date: 2024-03-06
+tags:
+  - security
+  - integrations
+---
+
+We are lucky to have an engaged community of security researchers
+that help us keep the Python Package Index (PyPI) safe.
+
+These folks have been instrumental in helping us identify and remove 
+malicious projects from the Index,
+and we are grateful for their continued support.
+
+Historically, we have asked reporters to email us
+to report malware per the [PyPI Security Policy](https://pypi.org/security/).
+
+PyPI now has an improved way to report malware, **via PyPI itself**. 
+
+<!-- more -->
+
+### via Web
+
+We have added a new "Report project as malware" button to the project page,
+at the bottom of the sidebar:
+
+![Report project as malware button](../assets/2024-03-06-report-project-as-malware-button.png)
+
+This button will only be visible to logged-in users,
+as we use that information to help us track the reports
+and prevent abuse of the system.
+
+When you click the button, you will be asked to provide a reason for the report,
+including an [Inspector](https://inspector.pypi.io/) link to the specific file
+and/or lines of code that show evidence of the issue.
+
+### via API
+
+We've been hard at work developing this capability for PyPI.
+It's some of the first user-facing API functionality that we've built
+that isn't expressly in service of uploading releases to PyPI.
+
+As such, we have a **preview beta API** to report malware,
+and have been working with some community members to test it out.
+
+If you're interested in participating, please let us know by completing
+[this Google Form](https://forms.gle/67dcguKijSsfJfxR7).
+Once complete, we'll onboard folks to a private GitHub repository
+with further details within a few days.
+
+Our hope is that by developing the API-centric capabilities,
+we can further reduce the time it takes to remove malware from PyPI,
+thus reducing the potential impact on the community at large.
+
+It is still in early phases, so your input can help shape this feature.
+
+## Either way
+
+Once submitted, reports will be reviewed by the PyPI administrators,
+and after a decision is made, the reporter may be notified of the outcome
+via email associated with the reporting user.
+
+This usually happens within a couple of business days.
+For more complex cases, we may have some questions,
+please look out for any email responses from `[email protected]`.
+
+Thanks again for being part of the community that helps keep PyPI safe for everyone.

docs/blog/posts/2024-03-06-malware-reporting-evolved.md

@@ -100,3 +100,8 @@ filterwarnings = [
     'ignore::warehouse.utils.exceptions.InsecureOIDCPublisherWarning',
     'ignore::warehouse.packaging.services.InsecureStorageWarning',
 ]
+
+[tool.pip-tools.compile]
+# TODO: This can be removed once it becomes the default.
+# See: https://github.com/jazzband/pip-tools/issues/989
+allow-unsafe = true

pyproject.toml

@@ -1,2 +1,2 @@
 gunicorn==21.2.0
-ddtrace==2.6.5
+ddtrace==2.7.0

requirements/deploy.in

@@ -22,67 +22,67 @@ ddsketch==2.0.4 \
     --hash=sha256:3227a270fd686a29d3a7128f9352ccf852314410380fc11384356f1ae2a75938 \
     --hash=sha256:32f7314077fec8747d4faebaec2c854b5ffc399c5f552f73fa94024f48d74d64
     # via ddtrace
-ddtrace==2.6.5 \
-    --hash=sha256:02351e7eb23bf4ca962ad704d976ce52a33286a01bdb8e514a334c541bec4e1c \
-    --hash=sha256:04b0849a7017401ac05b1706e6ba52a04b142e454ed28d57f55620ec511077a8 \
-    --hash=sha256:078d6760e41b12647215ce547ac632687e20c16f4472eae7eb43644a4cca9e68 \
-    --hash=sha256:098db83b90725a612889d9228dc4047ed82ba2078c9bd2e026c334f7ef6d8d82 \
-    --hash=sha256:0995e5d6ef3082adc2f8657f07518127eee84074ff7101582c5f2a3e6813ca49 \
-    --hash=sha256:0d846c0209fd6354098e841857b7f96d38ec87ba4933460abce0a0222d678920 \
-    --hash=sha256:0eafd0be4b50f4208f948451468e64973136a282fd08e1567d65ba77e7927ab7 \
-    --hash=sha256:0ebda479f5ee2ad139e2af23e7c1295fbbf0612a618ffed1fa0feee22a3c265c \
-    --hash=sha256:0f52f9d3a8ebdb21c7ac9b48cca9f13ecb55db3c58a459279804f8b7990cc432 \
-    --hash=sha256:0fe5fd5479bd0126551e3370d7b13484490a6874069e518ab4b5be1e8e9c8ecb \
-    --hash=sha256:1a22f0cd53c1d467feb1a174a1ab9d5d02c0fecca4a2f11834683eb70f3cad80 \
-    --hash=sha256:1d581c4c9e2beba054bdaec04f2cd267713af309244bb8227c5e277e019dd429 \
-    --hash=sha256:1ddec7e5f1f0a2066574affd9198f6c348bc559752a5bf063792aa9c2b5fced8 \
-    --hash=sha256:1e9dde12dc9f9864eda2936b73580d61d089559c8908d967aad0ac5a3e5d3f6d \
-    --hash=sha256:32129805c54348d4285e8e8618f8bf31e38bdad8b261ba6cfa9d63886c8b0819 \
-    --hash=sha256:32f283b9168fafe82a0d95dac516991951992e08c8aa67e67ebca20c5348555c \
-    --hash=sha256:33d0676debceeac53459f54ad79ae0a2efcfe7f2d512624ad7241a453368fc21 \
-    --hash=sha256:341331b0698d149e98a0b7dd557af878c5a4b16f531cecec7f7a09f88abed87c \
-    --hash=sha256:34cc4f978494ffb7304613b9ae8f0e1d847376ea6ddc6b5db98a5af717cddd64 \
-    --hash=sha256:3975099aa4ade5728b90d79b15bfe2aec84ea134f1ce746ac66fd05d38a232b6 \
-    --hash=sha256:40882fc48888f9322ccfc9e6162e8a3e4b2eb898f240ca3cd1826ca68508db8b \
-    --hash=sha256:4276b9ba782268473741f7b6f9a53407b4f3922c41f5e96bfe60d001d0a17ba9 \
-    --hash=sha256:4817772cd7f7b06f180241815587ba6236ac3afafdd1930038d773adf2be3d48 \
-    --hash=sha256:4dd0a1d2bbee33e1f7128290ba01ecf659a8c40007d89824f35a9fdebdde6f76 \
-    --hash=sha256:5679167188adfb769414b91ddf810319bbe2fa2f64db7dc0b02d67775b74c802 \
-    --hash=sha256:585b8c5ce46a1abfdeb4b07a15ef5d8a929bd7719bfdaa6e7f7cdda0daec61e2 \
-    --hash=sha256:5b17c78ba62a2ed0fe095f96aeb5952baf36a5a449ec667a00aa84943e9a51c9 \
-    --hash=sha256:5bb9ba523affeea2ecdc9420bdd6b3393b4e15728eb6b5bc18619fc6ebe80db7 \
-    --hash=sha256:5d732dbcc9f95f6133aff77d9a185a6d624ed3650764cb305244ad08da7a58f7 \
-    --hash=sha256:5d90aef6c9429633b17bd9b16f7a3712657119b8caf870486df82a5adafd7a78 \
-    --hash=sha256:6212e5fe2b8d16ee8d63b5992276cd48b3d8904364598d67735072a02c9c9d61 \
-    --hash=sha256:6509de90ca1dc472e2a70dbe699c12659086e21bc733237a3e503f5b1948ab7a \
-    --hash=sha256:65d6ab3565a8fbff1bc8ebff717d0ac88a69055404597c294ac515610af93bab \
-    --hash=sha256:67083e775f8d77404184217735fcc8181104130c657e8c12ae1fe04749164ccc \
-    --hash=sha256:672c42f99e7098cad3e46df80649d8b510e9baef62bb094b90dad22d8e0bde7d \
-    --hash=sha256:678094a0626c4b1fc3cad2c9e938158f39faabcb094867bb0603b9a4c5d360d0 \
-    --hash=sha256:69a8f71818ef017fe049119ac57e890294cadaead8402508399f94a9962731a0 \
-    --hash=sha256:71485ff240b0ba110662ec8628c1c320266e44945568c72b9cded4365406a028 \
-    --hash=sha256:765386e0f13603e4747a7530b6f96dc0b524dcae80d22b2599bbe32db0f0db7b \
-    --hash=sha256:7f2cbbad82df0d6bc9390fc1fd4f8f589f1e1c37a96059493c99189855ed0882 \
-    --hash=sha256:82037fcd43c23a3616c723041fae15b4ac1cd90489d92a05d265f83d11d6a478 \
-    --hash=sha256:8d6974459ab84b310ada4325b4178e435ae1476397f33999baf10d9a45d6d2b0 \
-    --hash=sha256:944d85bada913503cf85972ab818bccf19d974ff8a31f34a84232e5bf256254f \
-    --hash=sha256:a04e6b8931300bc258fcfaa21a99707d5c307518162fe84538e1ee7ed9c970df \
-    --hash=sha256:a086420b0d0d2a5fb4358dc2d03b85b6c022949cad89043f0a96c82996280594 \
-    --hash=sha256:a1c345752a9758d50f5daa43d700284f5a47d3e73faf69abdfadd20ef65511e0 \
-    --hash=sha256:aed320f14742188ce8e7697aee9445a6034ececb5fbdc468e8d5bf92a2ed5125 \
-    --hash=sha256:af060a53d7e8ee53a0755355d16d4e45b09db44cf3494716b6097b71a615be95 \
-    --hash=sha256:b691a5d8cdc3af7c38d6cf4a34be781d7868854e6a5efd84ea856f3ba81e9aef \
-    --hash=sha256:bee1ca5e3f61743b8197435dd1d1427887ad676084d67b3b1bb1a2055dd682d2 \
-    --hash=sha256:c4978637d6018e1fbd3abe2176d459d783052a5a8f946fccdd62e80ebbaf7d7a \
-    --hash=sha256:ca386c616073542f5fe5333864184e5714cb7685f83cfd659ce9bb241e634361 \
-    --hash=sha256:cb28b497bd6aceae95e7142f13d8571be960c2e884a63780d2c84fcc7688edeb \
-    --hash=sha256:dacd18d2ffbbfb2d63bd0dc840f40f5dbdeb6dfed9ace61a719dc42b3edf26c2 \
-    --hash=sha256:dbfdfc55d28b3fec547634bdfacce200934bc73a75d73ff2101c7c0b4cd51233 \
-    --hash=sha256:e4459e582951235e4053db725cf11643dfa117d5f22932b34c0f76a5d6d22f3f \
-    --hash=sha256:e7374f3888be2be3ee1b90935da0a192e001c43accb7b35d7858fc4bd7345d6a \
-    --hash=sha256:ea8c9b99a979b392df41183b3879f9981440cafe47b926f73866892fc4bb8af1 \
-    --hash=sha256:ee385ec24d1a8c5cd3b832b754ff88837dcce1a9ed6b0119da789bd00eaf7483 \
-    --hash=sha256:f3b82ddfe13c5ccc1ef3ec6e379d686f04bf387b8bd6ab6d674b6188698fd37e
+ddtrace==2.7.0 \
+    --hash=sha256:00f6946520c91b8d5436a7b0bf2919542ab31493435558beeb6c17fddb089cb4 \
+    --hash=sha256:089593e3d00180388709523384d3a4da528bb6b040f5ab43e03479d91ee95cd6 \
+    --hash=sha256:0b852adc63c500c80b8ff36702c00a8ca76b910a75b052bd1281105a41655288 \
+    --hash=sha256:0e04538a9428d7d4cb0937e88095e883f390167fef168118ce41b96afa2d6986 \
+    --hash=sha256:11aa0e7573ef221b26059ca36a367d34cfd2b4a6bb38215a4c7e158367fc279d \
+    --hash=sha256:15702a0c4345a7610a548a22889d452b271c49100896204ab5ab0d95ae01ea52 \
+    --hash=sha256:195d7989dd2cbfd63f14a27f6872fe784deb428694082895ec63463f475c2c64 \
+    --hash=sha256:23bd2ffa56efccc5349d04cc290447223538ab002b094e7f66d2c6ebcd2e4237 \
+    --hash=sha256:25c4ff71805aa4b48bda7ed56d3b63f76e9c2207a3b3f871fc309233185d7ec3 \
+    --hash=sha256:264dafd983598de4d05893b37ffcfa35e943f2c896a5b04b76533a811a5e66d6 \
+    --hash=sha256:27d0d08eabf84f508b8b3a68fea587d6525cee7c8b602a1609007e2417d1fa5a \
+    --hash=sha256:28cd2b4e4eb890232382d8cde1734d2ebea949817b762fec541fcf41f36ec311 \
+    --hash=sha256:2ee00771f4deea3c354cbd73e781450ac0db34ed1c38a68f0aa0a5cbbc501e81 \
+    --hash=sha256:2ee477ee452801746e2614f27030c2b471cdd73129d66c754ac5e7b2a1bfbe58 \
+    --hash=sha256:39669deca72eb2a07e55dd1e8d78e59b2b050a028d5f0879d60745d0d80a7c0b \
+    --hash=sha256:3ef9cd5cf948805678fd7741a966be635fde5ac601a7a4d15a03f8ea41251bea \
+    --hash=sha256:4ef1a6dd2c86aaea539fc2607c24751eafb0a5120c80fb051a31e81c58c04cba \
+    --hash=sha256:4f2da60724d362c7b4f8cb15623fc8d160d18a116532abbeddbcbf69e4bf00ea \
+    --hash=sha256:4fe5392100712056d9852070612c5ae937f86fba6c99ee1493abfd8009141652 \
+    --hash=sha256:52778b06ccd5f595e746547660f0e3f4ce0e0dbcbd2857cf42ec56868cbbc647 \
+    --hash=sha256:552b4933f1b1807fedc674b9505c2f2113899f0a92c47a9b811f652c87c4c294 \
+    --hash=sha256:56efaf8620803c9e11692be72e6eed358065230d2a2e9188ad1d127f1ae9fe6a \
+    --hash=sha256:5c61d70d9408df7ec6742d7b57bb80c7168aa38b6aebe9074d360b99be2b9f1f \
+    --hash=sha256:60edceb914802fbf8c762eee96aa12eb35848fbc13eb237c69de34be1094db80 \
+    --hash=sha256:61be4adc2607e121fc3f576fbe6ebcee06cd618862bdbe49e699b5980d474400 \
+    --hash=sha256:67e9a5b73c693e69455f598ab2c62d484952f38cf9cb714efd2c6463bf845908 \
+    --hash=sha256:6970c21c82db282a99958ea8ac86defda3d69acc4a1db6eb6061208e6fea5e77 \
+    --hash=sha256:6bd9f7fd4bd8848a2a8c618682ddeaeaaf6ea8b584eb83e74a3900d6afc6d36e \
+    --hash=sha256:6e18db8ea6a174902eedbcc0952ed57492f7fa5660d9c979bd50af0966bd8a71 \
+    --hash=sha256:7c8589a46ce4170dff7d00dbcfd553413353cb40e985079fd2a8bb0da66c82f1 \
+    --hash=sha256:7d11da8ae2b26ad31fa6c0c0394d3d461fea302023cf28c5c026982ece832cfa \
+    --hash=sha256:80d70b4c9e0a6a6831150ac73dadb76b0b46f15f770f89274e9b1bb371beb848 \
+    --hash=sha256:8661558dc12092890459336431b34427e29c63fbf83af06731b651209821359c \
+    --hash=sha256:876a0161344e45a21f1bf7ce7c9413477adee6d425e027ee60f421146ab00942 \
+    --hash=sha256:89d6f6a73005de56deb0ec4d0c83a32fd3cc698eabc3477a9b99608717b9868e \
+    --hash=sha256:8a2c175404361f49f674bae47229a8a7659a948249aa752888adc427fa65ec03 \
+    --hash=sha256:913a8eeb25af5721997c411214cce8502bca5cd6525d79c50b0cb90e1fbb21cf \
+    --hash=sha256:948539aa83c49218609be87517ef87961c0a67f9bf7c21fe2c3309d2df62fb67 \
+    --hash=sha256:94ad305f16b0c377e723e3ee65599304f2bbb8a40894c2b9ce3a7fb2db8c61a2 \
+    --hash=sha256:950f57688b248d7be68e9614eee362dcda6f3d8e41ddf07ba475c0765e267a62 \
+    --hash=sha256:98de3812ef588bad53797e777aa99902252f77e21ae382d6e317258d14785e26 \
+    --hash=sha256:98f2185ad640c7ad0a373ecfb20e15bb1348bb2f93faed1f20ee77acadbb73f6 \
+    --hash=sha256:993493378144dd90af2b5bada3bf4128a94aeb02e8b618fa30e86881e821fd94 \
+    --hash=sha256:9a78b5c7c948809146c8cec17e5e54b0c688e60c7ff92e4fdb32ce6f42b169b8 \
+    --hash=sha256:9b0f7c93786028a1afc2f7a6aa59d58c549d9ef5e1cbc90116b8d77417aa1526 \
+    --hash=sha256:9da6df8b0d33ef6692ab5cec8c9db507f11168986aed3f0a34254a8b7edeb73f \
+    --hash=sha256:ab073544aad96d5275ac18b962a71554c55ca8c04b110f5fe68646f103e81349 \
+    --hash=sha256:ac59ec4ceb40287abdcec097d5f6c5ab1a7be65793cdff99c14b38c214be76b4 \
+    --hash=sha256:bd196a8884247bca392af7a4e1202c698cc489ede48535f3149b12b802eb5842 \
+    --hash=sha256:bd1efe43cc3a97a1f2f634c500f69f7c4c73c9bdde5148a70dabd04bc81f05d6 \
+    --hash=sha256:bdd6522429c5bf51e6db26824cffa27d7e45a97fc14c2c1390ca303307c6996c \
+    --hash=sha256:cf78c3499911a18b7056aba5700e595c1bec4e18b98b21767c61dbacd084ce86 \
+    --hash=sha256:cfa96b9ec4e2a6e8a6edbfa3dc210cff8fe70807d53ab36ec770f7adb5c522ca \
+    --hash=sha256:d6b213a0e129ed4ef93845d1d6af7bb79e7e6319d20f1c0b87099e23d7d38512 \
+    --hash=sha256:db01ac0cfb2eafd2d4ea24c879c5d0b1b7598ba45e8da06d454e70fbd2688c20 \
+    --hash=sha256:def38d16345cf236afc80bc0da0ad17e083ea921ac94ca37562bc996d53569df \
+    --hash=sha256:ebb200c292c9126d8f74c77ae8f37d395c20ad7fd70bc7082e488a5bffaf4083 \
+    --hash=sha256:ec6c102bd44f76ca06195c7e3c028165fc579fddb28b27951c1efff42b5e3452 \
+    --hash=sha256:ef2a2d068e99f0e3f0a604553c7861d5c36bba7ae92ec5af4a74547fc2be1a9b \
+    --hash=sha256:f9533332fe12f331333cc652dacf107329a9af0f328539d4cbea578b4a999331
     # via -r requirements/deploy.in
 deprecated==1.2.14 \
     --hash=sha256:6fac8b097794a90302bdbb17b9b815e732d3c4720583ff1b198499d78470466c \
@@ -129,6 +129,10 @@ six==1.16.0 \
     # via
     #   ddsketch
     #   ddtrace
+sqlparse==0.4.4 \
+    --hash=sha256:5430a4fe2ac7d0f93e66f1efc6e1338a41884b7ddf2a350cedd20ccc4d9d28f3 \
+    --hash=sha256:d446183e84b8349fa3061f0fe7f06ca94ba65b426946ffebe6e3e8295332420c
+    # via ddtrace
 typing-extensions==4.10.0 \
     --hash=sha256:69b1a937c3a517342112fb4c6df7e72fc39a38e7891a5730ed4985b5214b5475 \
     --hash=sha256:b0abd7c89e8fb96f98db18d86106ff1d90ab692004eb746cf6eda2682f91b3cb

requirements/deploy.txt

@@ -286,9 +286,9 @@ mkdocs==1.5.3 \
     #   -r requirements/docs-blog.in
     #   mkdocs-material
     #   mkdocs-rss-plugin
-mkdocs-material==9.5.11 \
-    --hash=sha256:788ee0f3e036dca2dc20298d65e480297d348a44c9d7b2ee05c5262983e66072 \
-    --hash=sha256:7af7f8af0dea16175558f3fb9245d26c83a17199baa5f157755e63d7437bf971
+mkdocs-material==9.5.12 \
+    --hash=sha256:5f69cef6a8aaa4050b812f72b1094fda3d079b9a51cf27a247244c03ec455e97 \
+    --hash=sha256:d6f0c269f015e48c76291cdc79efb70f7b33bbbf42d649cfe475522ebee61b1f
     # via -r requirements/docs-blog.in
 mkdocs-material-extensions==1.3.1 \
     --hash=sha256:10c9511cea88f568257f960358a467d12b970e1f7b2c0e5fb2bb48cab1928443 \
@@ -393,9 +393,9 @@ pygments==2.17.2 \
     --hash=sha256:b27c2826c47d0f3219f29554824c30c5e8945175d888647acd804ddd04af846c \
     --hash=sha256:da46cec9fd2de5be3a8a784f434e4c4ab670b4ff54d605c4c2717e9d49c4c367
     # via mkdocs-material
-pymdown-extensions==10.7 \
-    --hash=sha256:6ca215bc57bc12bf32b414887a68b810637d039124ed9b2e5bd3325cbb2c050c \
-    --hash=sha256:c0d64d5cf62566f59e6b2b690a4095c931107c250a8c8e1351c1de5f6b036deb
+pymdown-extensions==10.7.1 \
+    --hash=sha256:c70e146bdd83c744ffc766b4671999796aba18842b268510a329f7f64700d584 \
+    --hash=sha256:f5cc7000d7ff0d1ce9395d216017fa4df3dde800afb1fb72d1c7d3fd35e710f4
     # via mkdocs-material
 python-dateutil==2.9.0.post0 \
     --hash=sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3 \

requirements/docs-blog.txt

@@ -213,9 +213,9 @@ mkdocs-macros-plugin==1.0.5 \
     --hash=sha256:f60e26f711f5a830ddf1e7980865bf5c0f1180db56109803cdd280073c1a050a \
     --hash=sha256:fe348d75f01c911f362b6d998c57b3d85b505876dde69db924f2c512c395c328
     # via -r requirements/docs-user.in
-mkdocs-material==9.5.11 \
-    --hash=sha256:788ee0f3e036dca2dc20298d65e480297d348a44c9d7b2ee05c5262983e66072 \
-    --hash=sha256:7af7f8af0dea16175558f3fb9245d26c83a17199baa5f157755e63d7437bf971
+mkdocs-material==9.5.12 \
+    --hash=sha256:5f69cef6a8aaa4050b812f72b1094fda3d079b9a51cf27a247244c03ec455e97 \
+    --hash=sha256:d6f0c269f015e48c76291cdc79efb70f7b33bbbf42d649cfe475522ebee61b1f
     # via -r requirements/docs-user.in
 mkdocs-material-extensions==1.3.1 \
     --hash=sha256:10c9511cea88f568257f960358a467d12b970e1f7b2c0e5fb2bb48cab1928443 \
@@ -240,9 +240,9 @@ pygments==2.17.2 \
     --hash=sha256:b27c2826c47d0f3219f29554824c30c5e8945175d888647acd804ddd04af846c \
     --hash=sha256:da46cec9fd2de5be3a8a784f434e4c4ab670b4ff54d605c4c2717e9d49c4c367
     # via mkdocs-material
-pymdown-extensions==10.7 \
-    --hash=sha256:6ca215bc57bc12bf32b414887a68b810637d039124ed9b2e5bd3325cbb2c050c \
-    --hash=sha256:c0d64d5cf62566f59e6b2b690a4095c931107c250a8c8e1351c1de5f6b036deb
+pymdown-extensions==10.7.1 \
+    --hash=sha256:c70e146bdd83c744ffc766b4671999796aba18842b268510a329f7f64700d584 \
+    --hash=sha256:f5cc7000d7ff0d1ce9395d216017fa4df3dde800afb1fb72d1c7d3fd35e710f4
     # via mkdocs-material
 python-dateutil==2.9.0.post0 \
     --hash=sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3 \

requirements/docs-user.txt

@@ -394,9 +394,9 @@ types-s3transfer==0.10.0 \
     --hash=sha256:35e4998c25df7f8985ad69dedc8e4860e8af3b43b7615e940d53c00d413bdc69 \
     --hash=sha256:44fcdf0097b924a9aab1ee4baa1179081a9559ca62a88c807e2b256893ce688f
     # via boto3-stubs
-types-setuptools==69.1.0.20240301 \
-    --hash=sha256:2033afa8efe3f566ec18997c4b614664b2ed9653160d941745389ad61a50d1f6 \
-    --hash=sha256:f99cf5a7f5c281c55f16ba860da68cb2cd8f3b3a472f78ec8e744240fc3aa09e
+types-setuptools==69.1.0.20240302 \
+    --hash=sha256:99c1053920a6fa542b734c9ad61849c3993062f80963a4034771626528e192a0 \
+    --hash=sha256:ed5462cf8470831d1bdbf300e1eeea876040643bfc40b785109a5857fa7d3c3f
     # via
     #   -r requirements/lint.in
     #   types-babel