From a9f248aaaea72e48f095286c3e4f436834eb1d4b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 16 Sep 2025 10:26:49 +0000
Subject: [PATCH] Bump cython from 3.1.3 to 3.1.4 (#11512)

Bumps [cython](https://github.com/cython/cython) from 3.1.3 to 3.1.4.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cython/cython/blob/master/CHANGES.rst">cython's
changelog</a>.</em></p>
<blockquote>
<h1>3.1.4 (2025-09-16)</h1>
<h2>Features added</h2>
<ul>
<li>Declarations for the new <code>PyUnstable_*()</code> refcounting
C-API functions in Py3.14 were added.
(Github issue :issue:<code>6836</code>)</li>
</ul>
<h2>Bugs fixed</h2>
<ul>
<li>
<p>The monitoring code could crash on tracing.
(Github issue :issue:<code>7050</code>)</p>
</li>
<li>
<p>Initialising the monitoring code could fail with a CPython exception.
See <a
href="https://redirect.github.com/nedbat/coveragepy/issues/1790#issuecomment-3257410149">nedbat/coveragepy#1790</a></p>
</li>
<li>
<p>Optimised integer shifting triggered undefined behaviour in C.
(Github issue :issue:<code>7089</code>)</p>
</li>
<li>
<p>Deallocating objects that inherit from external types defined in pxd
files
could run into an infinite loop.
(Github issue :issue:<code>7143</code>)</p>
</li>
<li>
<p>A reference to metaclasses could be leaked on instantiation.
(Github issue :issue:<code>7130</code>)</p>
</li>
<li>
<p>(Unlikely) error handling during empty builtin container tests was
ineffective.
(Github issue :issue:<code>7190</code>)</p>
</li>
<li>
<p>Generated <code>*_api.h</code> files used potentially unknown Cython
configuration macros.
(Github issue :issue:<code>7108</code>)</p>
</li>
<li>
<p><code>cythonize()</code> avoids parallel compiler runs on systems
using <code>spawn()</code> in multiprocessing.
Patch by Marcel Bargull.  (Github issue :issue:<code>3262</code>)</p>
</li>
<li>
<p>The <code>@cython.ufunc</code> decorator was missing in type checker
stubs.
Patch by jayClean.  (Github issue :issue:<code>7109</code>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cython/cython/commit/236e4a3ccd24d4e24c9d7c40a8580d359663832c"><code>236e4a3</code></a>
Build: Update cibuildwheel version to 3.1.4.</li>
<li><a
href="https://github.com/cython/cython/commit/cb2e2a3e0ee746df3296742d4d55d0d79e0bd6f5"><code>cb2e2a3</code></a>
Prepare release of 3.1.4.</li>
<li><a
href="https://github.com/cython/cython/commit/4fdb99040b19270e172aba671d4a9a9ae091b872"><code>4fdb990</code></a>
Update changelog.</li>
<li><a
href="https://github.com/cython/cython/commit/fa78291097175b9fcd32c5012bb6239bdf06e467"><code>fa78291</code></a>
Remove confusing &quot;optionally&quot; from embedded docs (<a
href="https://redirect.github.com/cython/cython/issues/7071">#7071</a>)</li>
<li><a
href="https://github.com/cython/cython/commit/2886cd958ed0b7383ae86d59ddc74bb13e9d3336"><code>2886cd9</code></a>
Fix error handling in empty container test (<a
href="https://redirect.github.com/cython/cython/issues/7096">GH-7096</a>)</li>
<li><a
href="https://github.com/cython/cython/commit/8993322ace48de38650efe82f6a529e72781ab19"><code>8993322</code></a>
Library: Add declarations for new refcounting C-API functions in
Py3.14.</li>
<li><a
href="https://github.com/cython/cython/commit/dc54ef2e7aa529a9a02debb2378865475ca08ad8"><code>dc54ef2</code></a>
Simpify some conditions.</li>
<li><a
href="https://github.com/cython/cython/commit/41f985e8fbcc203f61c9b4720ee605ac582ce18b"><code>41f985e</code></a>
Bump OS X runner version to &quot;macos-latest&quot; (<a
href="https://redirect.github.com/cython/cython/issues/7041">GH-7041</a>)</li>
<li><a
href="https://github.com/cython/cython/commit/dd18f11f9203b68a6acba0b73c5958229c7298dc"><code>dd18f11</code></a>
Disable parallel cythonization for &quot;spawn&quot; start method. (<a
href="https://redirect.github.com/cython/cython/issues/3263">GH-3263</a>)</li>
<li><a
href="https://github.com/cython/cython/commit/be16c519e1548465836f8223ea18fb26b32df919"><code>be16c51</code></a>
Fix a small typo (<a
href="https://redirect.github.com/cython/cython/issues/7125">#7125</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cython/cython/compare/3.1.3...3.1.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cython&package-manager=pip&previous-version=3.1.3&new-version=3.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 requirements/constraints.txt | 2 +-
 requirements/cython.txt      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index f600426424b..083f171a576 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -60,7 +60,7 @@ cryptography==45.0.7
     # via
     #   pyjwt
     #   trustme
-cython==3.1.3
+cython==3.1.4
     # via -r requirements/cython.in
 distlib==0.4.0
     # via virtualenv
diff --git a/requirements/cython.txt b/requirements/cython.txt
index 6cc5519997d..824e216600b 100644
--- a/requirements/cython.txt
+++ b/requirements/cython.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile --allow-unsafe --output-file=requirements/cython.txt --resolver=backtracking --strip-extras requirements/cython.in
 #
-cython==3.1.3
+cython==3.1.4
     # via -r requirements/cython.in
 multidict==6.6.4
     # via -r requirements/multidict.in