Skip to content

build(deps): bump python-slugify from 8.0.4 to 9.0.0 - #14595

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-slugify-9.0.0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-slugify-9.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps python-slugify from 8.0.4 to 9.0.0.

Release notes

Sourced from python-slugify's releases.

9.0.0

Highlights

  • Preserve legacy slug output by default while adding explicit algorithm="modern" opt-in behavior.
  • Add explicit transliteration backend and replacement-stage controls, with matching CLI options.
  • Add opt-in AnyASCII support while preserving existing dependency and backend-selection behavior.
  • Fix CLI regex-pattern forwarding and modern-mode handling for entities, iterables, separators, and delimiters.
  • Add Python 3.14 support, packaging modernization, expanded compatibility checks, and migration guidance.

See the changelog and migration guide for details.

PyPI: https://pypi.org/project/python-slugify/9.0.0/

🚀 Created with Dojo ⛩️

Changelog

Sourced from python-slugify's changelog.

9.0.0 — unreleased

  • Add keyword-only algorithm='legacy' (permanent default) and explicit algorithm='modern' opt-in, plus CLI --algorithm. Preserve historical default entity ordering, numeric handling, iterator consumption, separator truncation, and public smart_truncate behavior.

  • Preserve legacy auto backend selection and two-pass replacement defaults; add explicit backend and replacement_stage keyword-only options and matching CLI flags.

  • Add opt-in AnyASCII extra without removing or changing the base text-unidecode dependency.

  • Forward CLI --regex-pattern (Jacobo de Vera, #176; report by @​peter-bloomfield, #175).

  • Modern mode only: decode entities before transliteration; handle invalid numeric references per match, including surrogate references (#178, #181, #187).

  • Modern mode only: materialize replacement rules and stopword iterables consistently; preserve bytes/bytearray UTF-8 input with clear rejection of unsupported types (#183, #190).

  • Modern mode only: budget internal tokens using emitted separator widths, support empty separators, and preserve literal word characters that match delimiters. Public smart_truncate remains unchanged (#47, #185, #186).

  • Add regression coverage for whitespace, ordinals, backend-specific output, replacement stages, CLI execution, and installed artifacts.

  • Move package metadata to pyproject.toml, retain the typed marker and source tests, and remove the unsafe publish/upload/tag shortcut.

  • Document output changes, backend license distinctions, compatibility limits, and migration precautions in docs/release-9/migration.md.

  • Support Python 3.14.

  • Drop support for Python 3.9 and lower.

  • Use tox for local test runs and in CI.

  • Test the project against both unidecode and text_unidecode.

  • Fix type annotation issues identified by mypy.

  • Run CI against pull requests.

  • Fix package build warnings.

Commits
  • f635127 Prepare 9.0.0 with legacy-default and opt-in modern algorithms (#191)
  • 7b6d5d9 Merge pull request #165 from kurtmckee/fix-readme-badge
  • 4faa5f9 Fix the README badge to refer to the main.yml workflow results
  • 8b0ac21 Merge pull request #159 from kurtmckee/fix-build-process
  • 733c5bb Summarize the build warnings fixes in the CHANGELOG
  • 406c65b Resolve deprecation warnings thrown when installing in editable mode
  • 85b9be8 Resolve deprecated License trove classifier usage
  • d2b0694 Remove the unknown tests_require option
  • 13843e1 Remove deprecated codecs.open() usage
  • c54cc57 Merge pull request #160 from kurtmckee/test-everything
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [python-slugify](https://github.com/un33k/python-slugify) from 8.0.4 to 9.0.0.
- [Release notes](https://github.com/un33k/python-slugify/releases)
- [Changelog](https://github.com/un33k/python-slugify/blob/master/CHANGELOG.md)
- [Commits](un33k/python-slugify@v8.0.4...v9.0.0)

---
updated-dependencies:
- dependency-name: python-slugify
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file major A high priority issue which might affect a lot of people or large parts of the codebase labels Sep 14, 2026
@cla-bot cla-bot Bot added the cla-signed CLA Bot: community license agreement signed label Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed CLA Bot: community license agreement signed dependencies Pull requests that update a dependency file major A high priority issue which might affect a lot of people or large parts of the codebase

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants