Bump the minor-patches group in /edfi-repo-auditor with 3 updates

[dependabot]

Bumps the minor-patches group in /edfi-repo-auditor with 3 updates: requests, pandas and coverage.

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

Commits

• b25c87d v2.32.5
• 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
• b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
• 46e939b Update publish workflow to use artifact-id instead of name
• 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
• 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
• 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
• fec96cd Update Makefile rules (#6996)
• d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
• 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
• Additional commits viewable in compare view

Updates pandas from 2.3.1 to 2.3.2

Release notes

Sourced from pandas's releases.

Pandas 2.3.2

We are pleased to announce the release of pandas 2.3.2. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.2 supports Python 3.9 and higher.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• 4665c10 RLS: 2.3.2
• 633c68b DOC: fix syntax in whatsnew file
• 456ad47 Backport PR #62152 on branch 2.3.x (DOC: prepare 2.3.2 whatsnew notes for rel...
• 6cae644 [backport 2.3.x] DOC: move and reword whatsnew note for replace fix (GH-57865...
• a91c50a Backport PR #62147 on branch 2.3.x (DOC: correct and rewrite string migration...
• f7a2cfd [backport 2.3.x] BUG/DEPR: logical operation with bool and string (#61995) (#...
• 7981a43 Backport PR #62124 on branch 2.3.x (CI/BLD: don't use strict xfail for '%m.%Y...
• fafbcbd [backport 2.3.x] BUG(CoW): also raise for chained assignment for .at / .iat (...
• 3ac64a7 [backport 2.3.x] BUG: Fix Series.str.contains with compiled regex on Arrow st...
• 1f2dc4f [backport 2.3.x] BUG: fix Series.str.fullmatch() and Series.str.match() with ...
• Additional commits viewable in compare view

Updates coverage from 7.10.2 to 7.10.6

Changelog

Sourced from coverage's changelog.

Version 7.10.6 — 2025-08-29

• Fix: source directories were not properly communicated to subprocesses that ran in different directories, as reported in issue 1499_. This is now fixed.

• Performance: Alex Gaynor continues fine-tuning <pull 2038_>_ the speed of combination, especially with many contexts.

.. _issue 1499: nedbat/coveragepy#1499 .. _pull 2038: nedbat/coveragepy#2038

.. _changes_7-10-5:

Version 7.10.5 — 2025-08-23

• Big speed improvements for coverage combine: it's now about twice as fast! Huge thanks to Alex Gaynor for pull requests 2032 <pull 2032_>, 2033 <pull 2033_>, and 2034 <pull 2034_>_.

.. _pull 2032: nedbat/coveragepy#2032 .. _pull 2033: nedbat/coveragepy#2033 .. _pull 2034: nedbat/coveragepy#2034

.. _changes_7-10-4:

Version 7.10.4 — 2025-08-16

• Added patch = fork for times when the built-in forking support is insufficient.

• Fix: patch = execv also inherits the entire coverage configuration now.

.. _changes_7-10-3:

Version 7.10.3 — 2025-08-10

• Fixes for patch = subprocess:

  • If subprocesses spawned yet more subprocesses simultaneously, some coverage could be missed. This is now fixed, closing issue 2024_.

  • If subprocesses were created in other directories, their data files were

... (truncated)

Commits

• 88c55ff docs: sample HTML for 7.10.6
• 01d8995 docs: prep for 7.10.6
• 9b0c24f docs: thanks Alex #2038
• 66d6910 fix: make source paths absolute where they exist. #1499
• bb3382f build: no need for the combine/html times now
• 9ea349a lab: warn_executed.py
• 808c9b4 build: changing metacov.ini should trigger metacov
• 384f5f2 build: oops, some 'if's are really line pragmas
• a7224af perf: pre-compute the mapping between other_db.context and main.context (#2038)
• 5c00c5b chore: bump the action-dependencies group with 3 updates (#2039)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions