chore(deps-dev): bump the python group with 4 updates

[dependabot]

Bumps the python group with 4 updates: types-psutil, uvicorn[standard], playwright and time-machine.

Updates types-psutil from 7.2.2.20260408 to 7.2.2.20260518

Commits

• See full diff in compare view

Updates uvicorn[standard] from 0.52.0 to 0.52.1

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.52.1

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Changelog

Sourced from uvicorn[standard]'s changelog.

0.52.1 (August 1, 2026)

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Commits

• ee8e45c Version 0.52.1 (#3056)
• b57926d Remove duplicate content headers from WebSocket denial responses on websocket...
• 49de1b9 chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 (#3042)
• 2f3fa3a Complete server-initiated closes in SansIO WebSocket protocols (#3053)
• 8c59d55 chore(deps): bump the github-actions group with 5 updates (#3054)
• e148451 Handle connection loss during WebSocket write backpressure (#3050)
• e16a69b Add missing write flow control to websockets-sansio (#3048)
• ef1dd44 Fold the zttp-only tests back into the HTTP test suite (#3046)
• See full diff in compare view

Updates playwright from 1.61.0 to 1.62.0

Release notes

Sourced from playwright's releases.

v1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format. Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:

page.screenshot(path="homepage.webp", quality=50)

New APIs

• New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scrolling into view.
• New locator.wait_for_function() waits until a function called with the matching element returns a truthy value.
• New apiResponse.timing() returns resource timing information for an API response.

Announcements

• 📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.
• ⚠️ Debian 11 is not supported anymore.

Browser Versions

• Chromium 151.0.7922.34
• Mozilla Firefox 153.0
• WebKit 26.5

This version was also tested against the following stable channels:

• Google Chrome 151
• Microsoft Edge 151

Commits

• 3b7c24c chore: roll Playwright to 1.62.0 (#3161)
• 1db079f build(deps): bump typing-extensions from 4.15.0 to 4.16.0 (#3162)
• 8335307 build(deps): bump greenlet from 3.5.3 to 3.5.4 (#3163)
• 5c71b2b build(deps): bump mypy from 2.1.0 to 2.3.0 (#3150)
• d0c8d03 build(deps-dev): bump setuptools-scm from 9.2.2 to 10.2.1 (#3151)
• ca0319c build(deps): bump build from 1.4.4 to 1.5.0 (#3152)
• 53802fe build(deps): bump requests from 2.33.0 to 2.34.2 (#3153)
• 9bc998f build(deps): bump actions/setup-python from 6 to 7 in the actions group (#3154)
• 9a10128 perf: speed up Python stack capture (#3147)
• c3eff76 fix: show not_ prefix in call log when negative assertions fail (#3033)
• Additional commits viewable in compare view

Updates time-machine from 3.2.0 to 3.3.0

Changelog

Sourced from time-machine's changelog.

3.3.0 (2026-07-31)

• Support Python 3.15.

  PR [#631](https://github.com/adamchainz/time-machine/issues/631) <https://github.com/adamchainz/time-machine/pull/631>__.

• Mock datetime.date.today() directly, for Python 3.15 support.

  Previously time-machine was mocked only indirectly, since CPython implemented it by calling cls.fromtimestamp(time.time()). Python 3.15 added a fast path that reads the system clock directly (CPython Issue [#130980](https://github.com/adamchainz/time-machine/issues/130980) <https://github.com/python/cpython/pull/130980>__), so time travel no longer affected it, which the new mock fixes. Consequently, there are new :ref:escape hatch <escape-hatch> functions: escape_hatch.datetime.date.today() and escape_hatch.datetime.datetime.today().

  Thanks to Miro Hrončok and Karolina Surma for the report in Issue [#610](https://github.com/adamchainz/time-machine/issues/610) <https://github.com/adamchainz/time-machine/issues/610>, Lumír 'Frenzy' Balhar for the fix in PR [#618](https://github.com/adamchainz/time-machine/issues/618) <https://github.com/adamchainz/time-machine/pull/618>, and Maurycy Pawłowski-Wieroński for review

• Support isolated subinterpreters, as created by |concurrent.interpreters|__ on Python 3.14+. Previously, importing time-machine in an isolated subinterpreter failed with an ImportError.

  .. |concurrent.interpreters| replace:: concurrent.interpreters __ https://docs.python.org/3.14/library/concurrent.interpreters.html

  PR [#644](https://github.com/adamchainz/time-machine/issues/644) <https://github.com/adamchainz/time-machine/pull/644>__.

• Move the intermediary functions that patched functions call from Python to C. This change reduces the overhead of calling patched functions like time.time() while time travelling, making them around 10-20% faster.

  PR [#643](https://github.com/adamchainz/time-machine/issues/643) <https://github.com/adamchainz/time-machine/pull/643>__.

• Fix returning datetime subclasses from their now() and utcnow() methods while time travelling. Previously, time-machine would always return a plain datetime.datetime instance, rather than the subclass.

  PR [#643](https://github.com/adamchainz/time-machine/issues/643) <https://github.com/adamchainz/time-machine/pull/643>__.

• Fix hiding of the DeprecationWarning from |datetime.utcnow()|__ on Python 3.12+ while time travelling. Previously, the mocked version of the function did not raise the warning at all, so deprecated calls could pass unnoticed in tests. The warning is attributed to the calling code, like the real function does.

  .. |datetime.utcnow()| replace:: datetime.utcnow() __ https://docs.python.org/3/library/datetime.html#datetime.datetime.utcnow

  The :ref:escape hatch <escape-hatch> function escape_hatch.datetime.datetime.utcnow() also now attributes its warning to the calling code, rather than to a line within time-machine.

  PR [#649](https://github.com/adamchainz/time-machine/issues/649) <https://github.com/adamchainz/time-machine/pull/>. Thanks to Tamir Duberstein for the report in Issue [#445](https://github.com/adamchainz/time-machine/issues/445) <https://github.com/adamchainz/time-machine/issues/445> and Anders Kaseorg for the initial implementation in PR [#486](https://github.com/adamchainz/time-machine/issues/486) <https://github.com/adamchainz/time-machine/pull/486>__.

• Fix the standard |uuid|__ library functions uuid1(), uuid6(), and uuid7() to correctly generate values for the destination when time travels backwards. These functions cache the timestamp of the value they generated most recently, and never generate a value stamped before it. Previously, after time-travelling backwards, these functions would keep generating values stamped for the cached timestamp, rather than the new destination. The caches are now reset whenever time travel starts, stops, or moves backwards.

... (truncated)

Commits

• 206d32e Version 3.3.0
• adfd496 Support isolated subinterpreters (#644)
• 4e1a98d Reorder changelog
• 5ad9391 Raise the DeprecationWarning for utcnow() while time travelling (#649)
• facaaa0 Reset uuid module's cached timestamps when time travelling backwards (#648)
• 811eaec Make Migration CLI rewrite freeze_time from-imports with several names (#647)
• 4eae77b Refactor Migration CLI call rewriting into a shared function (#646)
• c21eab5 Fix Migration CLI rewriting relative freezegun imports (#645)
• 58b9fed Make Migration CLI update freeze_time() decorators on async functions (#640)
• 9d0474b Make Migration CLI update freeze_time() calls that pass tick (#636)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud