Bump the pip-deps group with 6 updates

[dependabot]

Bumps the pip-deps group with 6 updates:

Package	From	To
urllib3	2.6.1	2.6.2
opentelemetry-api	1.39.0	1.39.1
opentelemetry-sdk	1.39.0	1.39.1
botocore	1.42.5	1.42.10
boto3	1.42.5	1.42.10
mypy	1.19.0	1.19.1

Updates urllib3 from 2.6.1 to 2.6.2

Release notes

Sourced from urllib3's releases.

2.6.2

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

• Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. (urllib3/urllib3#3734)

Changelog

Sourced from urllib3's changelog.

2.6.2 (2025-12-11)

• Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. ([#3734](https://github.com/urllib3/urllib3/issues/3734) <https://github.com/urllib3/urllib3/issues/3734>__)

Commits

• 83f8643 Release 2.6.2
• 571a9b7 Fix HTTPResponse.read_chunked when leftover data is present in decoder's bu...
• See full diff in compare view

Updates opentelemetry-api from 1.39.0 to 1.39.1

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.39.1/0.60b1 (2025-12-11)

• Silence events API warnings for internal users (#4847)

Commits

• b4c1327 Prepare release 1.39.1/0.60b1 (#4851)
• 2fdd658 Silence events warnings for internal users (#4850)
• See full diff in compare view

Updates opentelemetry-sdk from 1.39.0 to 1.39.1

Changelog

Sourced from opentelemetry-sdk's changelog.

Version 1.39.1/0.60b1 (2025-12-11)

• Silence events API warnings for internal users (#4847)

Commits

• b4c1327 Prepare release 1.39.1/0.60b1 (#4851)
• 2fdd658 Silence events warnings for internal users (#4850)
• See full diff in compare view

Updates botocore from 1.42.5 to 1.42.10

Commits

• ab29acf Merge branch 'release-1.42.10'
• 23156b1 Bumping version to 1.42.10
• 5f3bc86 Update to latest models
• fefef10 Merge branch 'release-1.42.9'
• 1c82b89 Merge branch 'release-1.42.9' into develop
• 2bdbadb Bumping version to 1.42.9
• fd38774 Update endpoints model
• bd5f2d8 Update to latest models
• 517a891 Merge branch 'release-1.42.8'
• 02205a4 Merge branch 'release-1.42.8' into develop
• Additional commits viewable in compare view

Updates boto3 from 1.42.5 to 1.42.10

Commits

• 2b328a1 Merge branch 'release-1.42.10'
• 3e83ce4 Bumping version to 1.42.10
• ecb2be4 Add changelog entries from botocore
• 70183cf Merge branch 'release-1.42.9'
• cc0a3ca Merge branch 'release-1.42.9' into develop
• 02ef27f Bumping version to 1.42.9
• b4821c1 Add changelog entries from botocore
• 8c12c9d Merge branch 'release-1.42.8'
• 39f484c Merge branch 'release-1.42.8' into develop
• 3c5c225 Bumping version to 1.42.8
• Additional commits viewable in compare view

Updates mypy from 1.19.0 to 1.19.1

Changelog

Sourced from mypy's changelog.

Mypy 1.19.1

• Fix noncommutative joins with bounded TypeVars (Shantanu, PR 20345)
• Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, PR 20372)
• Allow types.NoneType in match cases (A5rocks, PR 20383)
• Fix mypyc generator regression with empty tuple (BobTheBuidler, PR 20371)
• Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR 20323)
• Fix crash on star import of redefinition (Ivan Levkivskyi, PR 20333)
• Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, PR 20334)
• Fail with an explicit error on PyPy (Ivan Levkivskyi, PR 20389)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• A5rocks
• BobTheBuidler
• bzoracler
• Chainfire
• Christoph Tyralla
• David Foster
• Frank Dana
• Guo Ci
• iap
• Ivan Levkivskyi
• James Hilton-Balfe
• jhance
• Joren Hammudoglu
• Jukka Lehtosalo
• KarelKenens
• Kevin Kannammalil
• Marc Mueller
• Michael Carlstrom
• Michael J. Sullivan
• Piotr Sawicki
• Randolf Scholz
• Shantanu
• Sigve Sebastian Farstad
• sobolevn
• Stanislav Terliakov
• Stephen Morton
• Theodore Ando
• Thiago J. Barbalho
• wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.18

We’ve just uploaded mypy 1.18.1 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance

... (truncated)

Commits

• 412c19a Bump version to 1.19.1
• 20aea0a Update changelog for 1.19.1 (#20414)
• 2b23b50 Serialize raw errors in cache metas (#20372)
• f60f90f Fail on PyPy in main instead of setup.py (#20389)
• 58d485b Fail with an explicit error on PyPy (#20384)
• a4b31a2 Allow types.NoneType in match cases (#20383)
• 8a6eff4 [mypyc] fix generator regression with empty tuple (#20371)
• 70eceea Fix noncommutative joins with bounded TypeVars (#20345)
• 3890fc4 Fix crash involving Unpack-ed TypeVarTuple (#20323)
• c93d917 Fix crash on star import of redefinition (#20333)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

⚠️ (this preview might not be accurate if the PR is not rebased on current master branch)

MCK 1.6.2 Release Notes