From 8fb51bbe20c6f01c7df18630c6ef04b67eb0ddd8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 30 Jun 2025 13:22:21 +0000
Subject: [PATCH] Bump multidict from 6.5.1 to 6.6.2 (#11250)
Bumps [multidict](https://github.com/aio-libs/multidict) from 6.5.1 to
6.6.2.
Release notes
Sourced from multidict's
releases.
6.6.2
Bug fixes
-
Fixed a memory corruption issue in the C implementation of
_md_shrink() that could lead to segmentation faults and
data loss when items were deleted from a
:class:~multidict.MultiDict. The issue was an edge case in
the pointer arithmetic during the compaction phase -- by
:user:bdraco.
Related issues and pull requests on GitHub:
#1221,
#1222.
-
Fixed format string compilation errors in debug builds on 32-bit
platforms by using portable %zd format specifiers for
Py_ssize_t values instead of %ld -- by
:user:bdraco.
Related issues and pull requests on GitHub:
#1225,
#1226.
Packaging updates and notes for downstreams
-
Re-enabled 32-bit Linux wheel builds that were disabled by default in
cibuildwheel 3.0.0 -- by :user:bdraco.
Related issues and pull requests on GitHub:
#1225,
#1227.
6.6.1
Bug fixes
-
If :meth:multidict.MultiDict.extend,
:meth:multidict.MultiDict.merge, or
:meth:multidict.MultiDict.update raises an exception, now
the multidict internal state is correctly restored.
Patch by :user:asvetlov.
Related issues and pull requests on GitHub:
#1215.
Contributor-facing changes
-
Fixed setuptools deprecation warning about the license
specification -- by :user:asvetlov.
Related issues and pull requests on GitHub:
#1216.
-
Fix compiler warnings and convert them to errors -- by
:user:asvetlov.
Related issues and pull requests on GitHub:
#1217.
... (truncated)
Changelog
Sourced from multidict's
changelog.
6.6.2
(2025-06-28)
Bug fixes
-
Fixed a memory corruption issue in the C implementation of
_md_shrink() that could lead to segmentation faults and
data loss when items were deleted from a
:class:~multidict.MultiDict. The issue was an edge case in
the pointer arithmetic during the compaction phase -- by
:user:bdraco.
Related issues and pull requests on GitHub:
:issue:1221, :issue:1222.
-
Fixed format string compilation errors in debug builds on 32-bit
platforms by using portable %zd format specifiers for
Py_ssize_t values instead of %ld -- by
:user:bdraco.
Related issues and pull requests on GitHub:
:issue:1225, :issue:1226.
Packaging updates and notes for downstreams
-
Re-enabled 32-bit Linux wheel builds that were disabled by default in
cibuildwheel 3.0.0 -- by :user:bdraco.
Related issues and pull requests on GitHub:
:issue:1225, :issue:1227.
6.6.1
(2025-06-28)
Bug fixes
-
If :meth:multidict.MultiDict.extend,
:meth:multidict.MultiDict.merge, or
:meth:multidict.MultiDict.update raises an exception, now
the multidict internal state is correctly restored.
Patch by :user:asvetlov.
Related issues and pull requests on GitHub:
:issue:1215.
Contributor-facing changes
... (truncated)
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
requirements/base.txt | 2 +-
requirements/constraints.txt | 2 +-
requirements/cython.txt | 2 +-
requirements/dev.txt | 2 +-
requirements/multidict.txt | 2 +-
requirements/runtime-deps.txt | 2 +-
requirements/test.txt | 2 +-
7 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/requirements/base.txt b/requirements/base.txt
index 3d8446b05a9..b82b11f1030 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -24,7 +24,7 @@ gunicorn==23.0.0
# via -r requirements/base.in
idna==3.6
# via yarl
-multidict==6.5.1
+multidict==6.6.2
# via
# -r requirements/runtime-deps.in
# yarl
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 259e32f7d34..8fa0e20e228 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -113,7 +113,7 @@ markupsafe==3.0.2
# via jinja2
mdurl==0.1.2
# via markdown-it-py
-multidict==6.5.1
+multidict==6.6.2
# via
# -r requirements/multidict.in
# -r requirements/runtime-deps.in
diff --git a/requirements/cython.txt b/requirements/cython.txt
index a47eb4689ca..b74caa3bc61 100644
--- a/requirements/cython.txt
+++ b/requirements/cython.txt
@@ -6,7 +6,7 @@
#
cython==3.1.2
# via -r requirements/cython.in
-multidict==6.5.1
+multidict==6.6.2
# via -r requirements/multidict.in
typing-extensions==4.14.0
# via multidict
diff --git a/requirements/dev.txt b/requirements/dev.txt
index b7a184070bd..02a46d40d6e 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -111,7 +111,7 @@ markupsafe==3.0.2
# via jinja2
mdurl==0.1.2
# via markdown-it-py
-multidict==6.5.1
+multidict==6.6.2
# via
# -r requirements/runtime-deps.in
# yarl
diff --git a/requirements/multidict.txt b/requirements/multidict.txt
index 30d464b352d..5868b9f430f 100644
--- a/requirements/multidict.txt
+++ b/requirements/multidict.txt
@@ -4,7 +4,7 @@
#
# pip-compile --allow-unsafe --output-file=requirements/multidict.txt --resolver=backtracking --strip-extras requirements/multidict.in
#
-multidict==6.5.1
+multidict==6.6.2
# via -r requirements/multidict.in
typing-extensions==4.14.0
# via multidict
diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt
index b0a7923662f..ab1d85a5d34 100644
--- a/requirements/runtime-deps.txt
+++ b/requirements/runtime-deps.txt
@@ -22,7 +22,7 @@ frozenlist==1.7.0
# aiosignal
idna==3.6
# via yarl
-multidict==6.5.1
+multidict==6.6.2
# via
# -r requirements/runtime-deps.in
# yarl
diff --git a/requirements/test.txt b/requirements/test.txt
index b66df938d41..42506c96894 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -57,7 +57,7 @@ markdown-it-py==3.0.0
# via rich
mdurl==0.1.2
# via markdown-it-py
-multidict==6.5.1
+multidict==6.6.2
# via
# -r requirements/runtime-deps.in
# yarl