Update dependency cryptography to v48.0.1 [SECURITY] (#5274)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/CONTRIBUTING.rst

@@ -37,7 +37,7 @@ Setting things up
 
    .. code-block:: bash
 
-      $ pre-commit install
+      $ prek install -f
 
 Finding something to do
 =======================
@@ -87,7 +87,7 @@ Here's how to make a one-off code change.
 
      - Documenting types of global variables and complex types of class members can be done using the Sphinx docstring convention.
 
-   -  In addition, PTB uses some formatting/styling and linting tools in the pre-commit setup. Some of those tools also have command line tools that can help to run these tools outside of the pre-commit step. If you'd like to leverage that, please have a look at the `pre-commit config file`_ for an overview of which tools (and which versions of them) are used. For example, we use `Black`_ for code formatting. Plugins for Black exist for some `popular editors`_. You can use those instead of manually formatting everything.
+   -  In addition, PTB uses some formatting/styling and linting tools in the pre-commit setup. Some of those tools also have command line tools that can help to run these tools outside of the pre-commit step. If you'd like to leverage that, please have a look at the `pre-commit config file`_ for an overview of which tools (and which versions of them) are used. For example, we use `Ruff`_ for linting and formatting.
 
    - Please ensure that the code you write is well-tested and that all automated tests still pass. We
      have dedicated an `testing page`_ to help you with that.
@@ -100,7 +100,7 @@ Here's how to make a one-off code change.
 
      .. code-block:: bash
 
-        $ pre-commit run -a
+        $ prek run -a
 
    - To actually make the commit (this will trigger tests style & type checks automatically):
 
@@ -288,8 +288,7 @@ to add new required arguments. It's also more explicit and easier to read.
 .. _`MyPy`: https://mypy.readthedocs.io/en/stable/index.html
 .. _`here`: https://mypy.readthedocs.io/en/stable/cheat_sheet_py3.html
 .. _`pre-commit config file`: https://github.com/python-telegram-bot/python-telegram-bot/blob/master/.pre-commit-config.yaml
-.. _`Black`: https://black.readthedocs.io/en/stable/index.html
-.. _`popular editors`: https://black.readthedocs.io/en/stable/integrations/editors.html
+.. _`Ruff`: https://docs.astral.sh/ruff/
 .. _`RTD`: https://docs.python-telegram-bot.org/
 .. _`RTD build`: https://docs.python-telegram-bot.org/en/doc-fixes
 .. _`CSI`: https://standards.mousepawmedia.com/en/stable/csi.html

.github/copilot-instructions.md

@@ -0,0 +1,40 @@
+This is a python project which is a wrapper for the Telegram Bot API. Please read the contributing
+guidelines mentioned in .github/CONTRIBUTING.rst to know how to contribute to this project. The 
+README.rst file lists the features and usage of the project.
+
+### Development Environment:
+
+Your development environment is set up using `uv`, a tool for managing Python environments and dependencies.
+Your environment has all extra dependencies and groups installed, on Python 3.13. Please continue using `uv` for managing your development environment,
+and for any scripts or tools you need to run.
+
+Some example commands on `uv`:
+- `uv sync --all-extras --all-groups --locked` to install all dependencies and groups required by the project.
+- `uv run -p 3.14 --all-groups --all-extras --locked tests/` to run tests on a specific Python version. Please use the `-p` flag often.
+- `uv pip install <package>` to install a package in the current environment.
+
+If uv is somehow not available, you can install it using `pip install uv`.
+
+### Repository Structure:
+
+The repository follows a standard structure for Python projects. Here are some key directories and files:
+
+- `src/`: This directory contains the main source code for the project.
+- `tests/`: This directory contains test cases for the project.
+- `pyproject.toml`: This file contains the project metadata and dependencies.
+- `.github/`: This directory contains GitHub-specific files, including workflows and issue templates.
+
+
+### Things to keep in mind while coding:
+
+- Ensure that your code is properly and fully typed. All your code should be compatible from
+  Python 3.9 to 3.14. Don't use the `typing_extensions` module.
+- Read the stability guide mentioned at docs/source/stability_policy.rst to understand if your changes
+  are breaking or incompatible.
+- Try to make sure your code is asyncio-friendly and thread-safe.
+- Run `uv run prek` to run pre-commit hooks before committing your changes, but after `git add`ing them.
+- Make sure you always test your changes. Either update or write new tests in the `tests/` directory.
+
+### Pull Requests:
+
+When you create a pull request, please also add the appropriate labels to it.

.github/dependabot.yml

@@ -1,20 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: "pip"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "friday"
-    labels:
-      - "⚙️ dependencies"
-      - "🔗 python"
-
-  # Updates the dependencies of the GitHub Actions workflows
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "monthly"
-      day: "friday"
-    labels:
-      - "⚙️ dependencies"
-      - "🔗 github-actions"

.github/labeler.yml

@@ -1,9 +0,0 @@
-# Config file for workflows/labelling.yml
-
-version: 1
-
-labels:
-- label: "⚙️ dependencies"
-  authors: ["dependabot[bot]", "pre-commit-ci[bot]"]
-- label: "🛠 code-quality"
-  authors: ["pre-commit-ci[bot]"]

.github/renovate.json5

@@ -0,0 +1,91 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [ // See what config:best-practices does: https://docs.renovatebot.com/presets-config/#configbest-practices
+    "config:best-practices",
+    // Opt-in to updating the pre-commit-config.yaml file too:
+    ":enablePreCommit",
+    ":prConcurrentLimitNone"  // No limits on the number of open PRs.
+  ],
+
+  // Add pull request labels:
+  "labels": ["⚙️ ci-cd"],
+
+  // Bump even patch versions:
+  "bumpVersion": "patch",
+
+  // Let Renovate decide how to update. See docs: https://docs.renovatebot.com/configuration-options/#rangestrategy
+  "rangeStrategy": "auto",
+
+  // Update the lock files:
+  "lockFileMaintenance": {
+    "enabled": true,
+    "schedule": ["* 0-3 1 * *"],  // https://docs.renovatebot.com/presets-schedule/#schedulemonthly
+    "automerge": true
+  },
+
+  // Enable automerge globally:
+  "automerge": true,
+
+  // Only upgrade packages if 7 days have passed:
+  "minimumReleaseAge": "7 days",
+
+  // Group package updates together:
+  "packageRules": [
+    // Linting dependencies in pyproject.toml in sync with the pre-commit-config hooks:
+    // Unfortunately it seems we need to do this for every dependency group (https://github.com/python-telegram-bot/python-telegram-bot/pull/4887#discussion_r2272025832):
+    {
+      "description": "Group Ruff updates together",
+      "matchPackageNames": ["ruff", "astral-sh/ruff-pre-commit"],
+      "groupName": "Ruff"
+    },
+    {
+      "description": "Group mypy updates together",
+      "matchPackageNames": ["mypy", "pre-commit/mirrors-mypy"],
+      "groupName": "Mypy"
+    },
+    {
+      "description": "Group pylint updates together",
+      "matchPackageNames": ["pylint", "PyCQA/pylint"],
+      "groupName": "Pylint"
+    },
+    {
+      "description": "Group chango updates together",
+      "matchPackageNames": ["chango", "Bibo-Joshi/chango"],
+      "groupName": "Chango"
+    },
+
+    // Don't automerge major updates for project dependencies:
+    {
+      "matchUpdateTypes": ["major"],
+      "matchDepTypes": ["project.dependencies", "project.optional-dependencies"],
+      "automerge": false
+    },
+
+    // Apply the "dependencies" label to all updates of optional/required dependencies:
+    {
+      "matchDepTypes": ["project.optional-dependencies", "project.dependencies"],
+      "labels": ["⚙️ dependencies"]
+    },
+
+    // Workflow and dev-dependencies update once a month
+    // https://docs.renovatebot.com/presets-schedule/#schedulemonthly
+    {
+      "matchFileNames": [".github/workflows/**"],
+      "schedule": ["* 0-3 1 * *"]
+    },
+    {
+      "matchDepTypes": ["dependency-groups"],
+      "schedule": ["* 0-3 1 * *"]
+    }
+  ],
+
+  // Increase the number of PR's Renovate can create in a hour. Default is 2.
+  "prHourlyLimit": 5,
+
+  // Temporarily disabled:
+  "ignoreDeps": ["pytest-asyncio"],
+
+  // schedule to allow PR's from Renovate:
+  "schedule": ["* * * * 0"]  // Every Sunday
+
+}

.github/workflows/chango.yml

@@ -20,7 +20,7 @@ jobs:
       IS_RELEASE_PR: ${{ steps.check_title.outputs.IS_RELEASE_PR }}
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # needed for commit and push step at the end
           persist-credentials: true
@@ -36,8 +36,11 @@ jobs:
           fi
 
       # Create the new fragment
-      - uses: Bibo-Joshi/chango@9d6bd9d7612eca5fab2c5161687011be59baaf19 # v0.4.0
+      - uses: Bibo-Joshi/chango@bc58df46ef3ba8f15b8d744929998b7ae8a222d4 # 0.6.1
         with:
+          # passing this custom token has two purposes
+          # 1. it allows us to fetch info about issue types
+          # 2. it ensures that the push will also re-trigger workflows
           github-token: ${{ secrets.CHANGO_PAT }}
           query-issue-types: true
           commit-and-push: ${{ steps.check_title.outputs.COMMIT_AND_PUSH }}
@@ -45,7 +48,7 @@ jobs:
       # Run `chango release` if applicable - needs some additional setup.
       - name: Set up Python
         if: steps.check_title.outputs.IS_RELEASE_PR == 'true'
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.x"
 
@@ -60,7 +63,7 @@ jobs:
 
       - name: Commit & Push
         if: steps.check_title.outputs.IS_RELEASE_PR == 'true'
-        uses: stefanzweifel/git-auto-commit-action@778341af668090896ca464160c2def5d1d1a3eb0 # v6.0.1
+        uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0
         with:
           commit_message: "Do chango Release"
           repository: ./target-repo

.github/workflows/copilot-setup-steps.yml

@@ -0,0 +1,42 @@
+# This file is for the copilot agent on Github. This helps to set up the development environment
+# See the docs here: https://docs.github.com/en/enterprise-cloud@latest/copilot/how-tos/use-copilot-agents/coding-agent/customize-the-agent-environment#preinstalling-tools-or-dependencies-in-copilots-environment
+name: "Copilot Setup Steps"
+
+# Automatically run the setup steps when they are changed to allow for easy validation, and
+# allow manual testing through the repository's "Actions" tab
+on:
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - .github/workflows/copilot-setup-steps.yml
+
+jobs:
+  # The job MUST be called `copilot-setup-steps` or it will not be picked up by Copilot.
+  copilot-setup-steps:
+    runs-on: ubuntu-latest
+
+    # Set the permissions to the lowest permissions possible needed for your steps.
+    # Copilot will be given its own token for its operations.
+    permissions:
+      # If you want to clone the repository as part of your setup steps, for example to install dependencies, you'll need the `contents: read` permission. If you don't clone the repository in your setup steps, Copilot will do this for you automatically after the steps complete.
+      contents: read
+      pull-requests: write  # So copilot can add labels to the PR
+
+    # You can define any steps you want, and they will run before the agent starts.
+    # If you do not check out your code, Copilot will do this for you.
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        with:
+          # Install a specific version of uv.
+          version: "0.11.16"
+          # Install 3.13:
+          python-version: 3.13
+
+      - name: Install the project
+        run: uv sync --all-extras --all-groups --locked

.github/workflows/dependabot-prs.yml

@@ -1,41 +0,0 @@
-name: Process Dependabot PRs
-
-on:
-  pull_request:
-    types: [opened, reopened]
-
-permissions: {}
-
-jobs:
-  process-dependabot-prs:
-    permissions:
-      pull-requests: read
-      contents: write
-
-    runs-on: ubuntu-latest
-    if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
-    steps:
-
-    - name: Fetch Dependabot metadata
-      id: dependabot-metadata
-      uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b # v2.4.0
-
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      with:
-        ref: ${{ github.event.pull_request.head.ref }}
-        persist-credentials: false
-
-    - name: Update Version Number in Other Files
-      uses: jacobtomlinson/gha-find-replace@f1069b438f125e5395d84d1c6fd3b559a7880cb5 # v3
-      with:
-        find: ${{ steps.dependabot-metadata.outputs.previous-version }}
-        replace: ${{ steps.dependabot-metadata.outputs.new-version }}
-        regex: false
-        exclude: CHANGES.rst
-
-    - name: Commit & Push Changes to PR
-      uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9.1.4
-      with:
-        message: 'Update version number in other files'
-        committer_name: GitHub Actions
-        committer_email: 41898282+github-actions[bot]@users.noreply.github.com

.github/workflows/docs-admonitions.yml

@@ -1,6 +1,7 @@
 name: Test Admonitions Generation
 on:
   pull_request:
+    types: [synchronize, reopened, ready_for_review]
     paths:
       - src/telegram/**
       - docs/**
@@ -24,11 +25,11 @@ jobs:
         os: [ubuntu-latest]
       fail-fast: False
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'pip'

.github/workflows/docs-linkcheck.yml

@@ -19,11 +19,11 @@ jobs:
         os: [ubuntu-latest]
       fail-fast: False
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies
@@ -35,7 +35,7 @@ jobs:
       - name: Upload linkcheck output
         # Run also if the previous steps failed
         if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: linkcheck-output
           path: docs/build/html/output.*

.github/workflows/gha_security.yml

@@ -17,17 +17,17 @@ jobs:
       security-events: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@bd01e18f51369d5a26f1651c3cb451d3417e3bba # v6.3.1
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
       - name: Run zizmor
         run: uvx zizmor --persona=pedantic --format sarif . > results.sarif
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         with:
           sarif_file: results.sarif
-          category: zizmor
+          category: zizmor

.github/workflows/labelling.yml

@@ -1,19 +0,0 @@
-name: PR Labeler
-
-on:
-  pull_request:
-    types: [opened]
-
-permissions: {}
-
-jobs:
-  pre-commit-ci:
-    permissions:
-      contents: read # for srvaroa/labeler to read config file
-      pull-requests: write # for srvaroa/labeler to add labels in PR
-    runs-on: ubuntu-latest
-    steps:
-    - uses: srvaroa/labeler@0a20eccb8c94a1ee0bed5f16859aece1c45c3e55 # v1.13.0
-      # Config file at .github/labeler.yml
-      env:
-        GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/prek.yml

@@ -0,0 +1,26 @@
+name: Prek checks
+permissions:
+  contents: read  # Needed to see what files to run pre-commit on
+
+on:
+  pull_request:
+    branches:
+      - '**'  # Matches all branch names, for PRs
+  push:
+    branches:
+      - 'master'  # Run tests on master branch
+
+# Cancel any in-progress runs of this workflow for the same PR or branch when a new commit is pushed.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  prek:
+    name: prek
+    runs-on: ubuntu-slim
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - uses: j178/prek-action@0bb87d7f00b0c99306c8bcb8b8beba1eb581c037 # v1.1.1

.github/workflows/release_pypi.yml

@@ -17,11 +17,11 @@ jobs:
       actions: write
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.x"
       - name: Install pypa/build
@@ -30,7 +30,7 @@ jobs:
       - name: Build a binary wheel and a source tarball
         run: python3 -m build
       - name: Store the distribution packages
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: python-package-distributions
           path: dist/
@@ -55,12 +55,12 @@ jobs:
 
     steps:
       - name: Download all the dists
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: python-package-distributions
           path: dist/
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
 
   compute-signatures:
     name: Compute SHA1 Sums and Sign with Sigstore
@@ -74,7 +74,7 @@ jobs:
 
     steps:
       - name: Download all the dists
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: python-package-distributions
           path: dist/
@@ -86,13 +86,13 @@ jobs:
               sha1sum $file > $file.sha1
           done
       - name: Sign the dists with Sigstore
-        uses: sigstore/gh-action-sigstore-python@f7ad0af51a5648d09a20d00370f0a91c3bdf8f84 # v3.0.1
+        uses: sigstore/gh-action-sigstore-python@a5caf349bc536fbef3668a10ed7f5cd309a4b53d # v3.2.0
         with:
           inputs: >-
             ./dist/*.tar.gz
             ./dist/*.whl
       - name: Store the distribution packages and signatures
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: python-package-distributions-and-signatures
           path: dist/
@@ -110,11 +110,11 @@ jobs:
       actions: read  # for downloading artifacts
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Download all the dists
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: python-package-distributions-and-signatures
           path: dist/
@@ -155,7 +155,7 @@ jobs:
     permissions: {}
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Publish to Telegram Channel

.github/workflows/release_test_pypi.yml

@@ -17,11 +17,11 @@ jobs:
       actions: write
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Set up Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.x"
       - name: Install pypa/build
@@ -30,7 +30,7 @@ jobs:
       - name: Build a binary wheel and a source tarball
         run: python3 -m build
       - name: Store the distribution packages
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: python-package-distributions
           path: dist/
@@ -55,12 +55,12 @@ jobs:
 
     steps:
       - name: Download all the dists
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: python-package-distributions
           path: dist/
       - name: Publish to Test PyPI
-        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
         with:
           repository-url: https://test.pypi.org/legacy/
 
@@ -76,7 +76,7 @@ jobs:
 
     steps:
       - name: Download all the dists
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: python-package-distributions
           path: dist/
@@ -88,13 +88,13 @@ jobs:
               sha1sum $file > $file.sha1
           done
       - name: Sign the dists with Sigstore
-        uses: sigstore/gh-action-sigstore-python@f7ad0af51a5648d09a20d00370f0a91c3bdf8f84 # v3.0.1
+        uses: sigstore/gh-action-sigstore-python@a5caf349bc536fbef3668a10ed7f5cd309a4b53d # v3.2.0
         with:
           inputs: >-
             ./dist/*.tar.gz
             ./dist/*.whl
       - name: Store the distribution packages and signatures
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: python-package-distributions-and-signatures
           path: dist/
@@ -112,11 +112,11 @@ jobs:
       actions: read  # for downloading artifacts
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Download all the dists
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: python-package-distributions-and-signatures
           path: dist/

.github/workflows/stale.yml

@@ -12,13 +12,13 @@ jobs:
       # For adding labels and closing
       issues: write
     steps:
-      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
         with:
           # PRs never get stale
           days-before-stale: 3
           days-before-close: 2
           days-before-pr-stale: -1
           stale-issue-label: '📋 stale'
-          only-labels: 'question'
+          only-issue-types: '❔ question'
           stale-issue-message: ''
           close-issue-message: 'This issue has been automatically closed due to inactivity. Feel free to comment in order to reopen or ask again in our Telegram support group at https://t.me/pythontelegrambotgroup.'

.github/workflows/test_official.yml

@@ -1,6 +1,7 @@
 name: Bot API Tests
 on:
   pull_request:
+    types: [synchronize, reopened, ready_for_review]
     paths:
       - src/telegram/**
       - tests/**
@@ -23,11 +24,11 @@ jobs:
         os: [ubuntu-latest]
       fail-fast: False
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies

.github/workflows/type_completeness.yml

@@ -1,6 +1,7 @@
 name: Check Type Completeness
 on:
   pull_request:
+    types: [synchronize, reopened, ready_for_review]
     paths:
       - src/telegram/**
       - pyproject.toml
@@ -16,7 +17,7 @@ jobs:
     name:   test-type-completeness
     runs-on: ubuntu-latest
     steps:
-      - uses: Bibo-Joshi/pyright-type-completeness@c85a67ff3c66f51dcbb2d06bfcf4fe83a57d69cc # v1.0.1
+      - uses: Bibo-Joshi/pyright-type-completeness@c85a67ff3c66f51dcbb2d06bfcf4fe83a57d69cc # 1.0.1
         with:
           package-name: telegram
           python-version: 3.12

.github/workflows/type_completeness_monthly.yml

@@ -11,14 +11,14 @@ jobs:
     name:   test-type-completeness
     runs-on: ubuntu-latest
     steps:
-      - uses: Bibo-Joshi/pyright-type-completeness@c85a67ff3c66f51dcbb2d06bfcf4fe83a57d69cc # v1.0.1
+      - uses: Bibo-Joshi/pyright-type-completeness@c85a67ff3c66f51dcbb2d06bfcf4fe83a57d69cc # 1.0.1
         id: pyright-type-completeness
         with:
           package-name: telegram
           python-version: 3.12
           pyright-version: ~=1.1.367
       - name: Check Output
-        uses: jannekem/run-python-script-action@bbfca66c612a28f3eeca0ae40e1f810265e2ea68 # v1.7
+        uses: jannekem/run-python-script-action@9d8e2e0878d575fb6073277f38ce3f10ebf4f059 # v1.8
         env:
           TYPE_COMPLETENESS: ${{ steps.pyright-type-completeness.outputs.base-completeness-score }}
         with:

.github/workflows/unit_tests.yml

@@ -1,6 +1,7 @@
 name: Unit Tests
 on:
   pull_request:
+    types: [synchronize, reopened, ready_for_review]
     paths:
       - src/telegram/**
       - tests/**
@@ -9,9 +10,6 @@ on:
   push:
     branches:
       - master
-  schedule:
-    # Run monday and friday morning at 03:07 - odd time to spread load on GitHub Actions
-    - cron: '7 3 * * 1,5'
 
 permissions: {}
 
@@ -21,15 +19,18 @@ jobs:
     runs-on: ${{matrix.os}}
     strategy:
       matrix:
-        python-version: ['3.9', '3.10', '3.11', '3.12', '3.13', '3.14.0-beta.3']
+        python-version: ['3.10', '3.11', '3.12', '3.13', '3.14', '3.15.0-beta.2']
         os: [ubuntu-latest, windows-latest, macos-latest]
+        include:
+          - python-version: '3.14t'
+            os: ubuntu-latest
       fail-fast: False
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'pip'
@@ -86,15 +87,16 @@ jobs:
             .test_report_optionals_junit.xml
 
       - name: Submit coverage
-        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24  # v5.4.3
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f  # v7.0.0
         with:
           env_vars: OS,PYTHON
           name: ${{ matrix.os }}-${{ matrix.python-version }}
           fail_ci_if_error: true
           token: ${{ secrets.CODECOV_TOKEN }}
       - name: Upload test results to Codecov
-        uses: codecov/test-results-action@47f89e9acb64b76debcd5ea40642d25a4adced9f # v1.1.1
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f  # v7.0.0
         if: ${{ !cancelled() }}
         with:
           files: .test_report_no_optionals_junit.xml,.test_report_optionals_junit.xml
           token: ${{ secrets.CODECOV_TOKEN }}
+          report_type: test_results

.gitignore

@@ -97,4 +97,7 @@ pyvenv.cfg
 Scripts/
 
 # environment manager:
-.mise.toml
+.mise.toml
+
+# Support for uv.lock will come in a future PR. See #4796
+uv.lock

.pre-commit-config.yaml

@@ -1,83 +1,55 @@
-# Make sure that the additional_dependencies here match pyproject.toml
-
-ci:
-    autofix_prs: false
-    autoupdate_schedule: quarterly
-    autoupdate_commit_msg: 'Bump `pre-commit` Hooks to Latest Versions'
-
 repos:
 -   repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: 'v0.12.2'
+    rev: 'v0.15.16'
     hooks:
-    -   id: ruff
-        name: ruff
-        additional_dependencies:
-          - httpx~=0.27
-          - tornado~=6.4
-          - APScheduler~=3.10.4
-          - cachetools>=5.3.3,<5.5.0
-          - aiolimiter~=1.1,<1.3
--   repo: https://github.com/psf/black-pre-commit-mirror
-    rev: 25.1.0
-    hooks:
-    -   id: black
-        args:
-        - --diff
-        - --check
--   repo: https://github.com/PyCQA/flake8
-    rev: 7.3.0
-    hooks:
-    -   id: flake8
+    # Run the linter:
+    -   id: ruff-check
+        name: ruff check
+    # Run the formatter:
+    -   id: ruff-format
+        name: ruff format
 -   repo: https://github.com/PyCQA/pylint
-    rev: v3.3.7
+    rev: v4.0.5
     hooks:
     -   id: pylint
         files: ^(?!(tests|docs)).*\.py$
+        language: python
         additional_dependencies:
           - httpx~=0.27
           - tornado~=6.4
-          - APScheduler~=3.10.4
-          - cachetools>=5.3.3,<5.5.0
+          - APScheduler>=3.10.4,<3.12.0
+          - cachetools>=7.0.0,<8.0.0
           - aiolimiter~=1.1,<1.3
           - . # this basically does `pip install -e .`
+        priority: 10
 -   repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v1.16.1
+    rev: v1.20.2
     hooks:
     -   id: mypy
         name: mypy-ptb
         files: ^(?!(tests|examples|docs)).*\.py$
+        language: python
         additional_dependencies:
           - types-pytz
           - types-cryptography
           - types-cachetools
           - httpx~=0.27
           - tornado~=6.4
-          - APScheduler~=3.10.4
-          - cachetools>=5.3.3,<5.5.0
+          - APScheduler>=3.10.4,<3.12.0
+          - cachetools>=7.0.0,<8.0.0
           - aiolimiter~=1.1,<1.3
           - . # this basically does `pip install -e .`
+        priority: 10
     - id: mypy
       name: mypy-examples
       files: ^examples/.*\.py$
+      language: python
       args:
         - --no-strict-optional
         - --follow-imports=silent
       additional_dependencies:
         - tornado~=6.4
-        - APScheduler~=3.10.4
-        - cachetools>=5.3.3,<5.5.0
+        - APScheduler>=3.10.4,<3.12.0
+        - cachetools>=7.0.0,<8.0.0
         - . # this basically does `pip install -e .`
--   repo: https://github.com/asottile/pyupgrade
-    rev: v3.20.0
-    hooks:
-    -   id: pyupgrade
-        args:
-          - --py39-plus
--   repo: https://github.com/pycqa/isort
-    rev: 6.0.1
-    hooks:
-    -   id: isort
-        name: isort
-        args:
-        - --diff
-        - --check
+      priority: 10

.readthedocs.yml

@@ -20,13 +20,13 @@ python:
       path: .
 
 build:
-  os: ubuntu-22.04
+  os: ubuntu-24.04
   tools:
     python: "3"  # latest stable cpython version
   jobs:
     install:
       - pip install -U pip
-      - pip install .[all] --group 'all'  # install all the dependency groups
+      - pip install .[all] --group 'docs' --group 'tests' # install most dependency groups
 
     post_build:
       # Based on https://github.com/readthedocs/readthedocs.org/issues/3242#issuecomment-1410321534

AUTHORS.rst

@@ -5,13 +5,12 @@ Credits
 `Leandro Toledo <https://github.com/leandrotoledo>`_.
 The current development team includes
 
-- `Hinrich Mahler <https://github.com/Bibo-Joshi>`_ (maintainer)
-- `Poolitzer <https://github.com/Poolitzer>`_ (community liaison)
-- `Harshil <https://github.com/harshil21>`_
+- `Poolitzer <https://github.com/Poolitzer>`_ (maintainer)
+- `Harshil <https://github.com/harshil21>`_ (maintainer)
 - `Abdelrahman <https://github.com/aelkheir>`_
 
 Emeritus maintainers include
-`Jannes Höke <https://github.com/jh0ker>`_ (`@jh0ker <https://t.me/jh0ker>`_ on Telegram),
+`Hinrich Mahler <https://github.com/Bibo-Joshi>`_, `Jannes Höke <https://github.com/jh0ker>`_ (`@jh0ker <https://t.me/jh0ker>`_ on Telegram),
 `Noam Meltzer <https://github.com/tsnoam>`_, `Pieter Schutz <https://github.com/eldinnie>`_ and `Jasmin Bom <https://github.com/jsmnbom>`_.
 
 Contributors
@@ -58,6 +57,7 @@ The following wonderful people contributed directly or indirectly to this projec
 - `gamgi <https://github.com/gamgi>`_
 - `Gauthamram Ravichandran <https://github.com/GauthamramRavichandran>`_
 - `Harshil <https://github.com/harshil21>`_
+- `Henok Tesfamikael <https://github.com/hethon>`
 - `Henry Galue <https://github.com/henryg311>`
 - `Hugo Damer <https://github.com/HakimusGIT>`_
 - `ihoru <https://github.com/ihoru>`_
@@ -75,10 +75,12 @@ The following wonderful people contributed directly or indirectly to this projec
 - `jossalgon <https://github.com/jossalgon>`_
 - `JRoot3D <https://github.com/JRoot3D>`_
 - `Juan Cuevas <https://github.com/cuevasrja>`
+- `karin0 <https://github.com/karin0>`_
 - `kenjitagawa <https://github.com/kenjitagawa>`_
 - `kennethcheo <https://github.com/kennethcheo>`_
 - `Kirill Vasin <https://github.com/vasinkd>`_
 - `Kjwon15 <https://github.com/kjwon15>`_
+- `Krishna Chaitanya Balusu <https://github.com/Krishnachaitanyakc>`_
 - `Li-aung Yip <https://github.com/LiaungYip>`_
 - `locobott <https://github.com/locobott>`_
 - `Loo Zheng Yuan <https://github.com/loozhengyuan>`_
@@ -104,6 +106,7 @@ The following wonderful people contributed directly or indirectly to this projec
 - `Oleg Shlyazhko <https://github.com/ollmer>`_
 - `Oleg Sushchenko <https://github.com/feuillemorte>`_
 - `Or Bin <https://github.com/OrBin>`_
+- `OuYoung <https://github.com/ouyooung>`_
 - `overquota <https://github.com/overquota>`_
 - `Pablo Martinez <https://github.com/elpekenin>`_
 - `Paradox <https://github.com/paradox70>`_

README.rst

@@ -11,7 +11,7 @@
    :target: https://pypi.org/project/python-telegram-bot/
    :alt: Supported Python versions
 
-.. image:: https://img.shields.io/badge/Bot%20API-9.1-blue?logo=telegram
+.. image:: https://img.shields.io/badge/Bot%20API-10.0-blue?logo=telegram
    :target: https://core.telegram.org/bots/api-changelog
    :alt: Supported Bot API version
 
@@ -43,10 +43,6 @@
    :target: https://app.codacy.com/gh/python-telegram-bot/python-telegram-bot/dashboard
    :alt: Code quality: Codacy
 
-.. image:: https://results.pre-commit.ci/badge/github/python-telegram-bot/python-telegram-bot/master.svg
-   :target: https://results.pre-commit.ci/latest/github/python-telegram-bot/python-telegram-bot/master
-   :alt: pre-commit.ci status
-
 .. image:: https://img.shields.io/badge/code%20style-black-000000.svg
    :target: https://github.com/psf/black
    :alt: Code Style: Black
@@ -70,7 +66,7 @@ Introduction
 
 This library provides a pure Python, asynchronous interface for the
 `Telegram Bot API <https://core.telegram.org/bots/api>`_.
-It's compatible with Python versions **3.9+**.
+It's compatible with Python versions **3.10+**.
 
 In addition to the pure API implementation, this library features several convenience methods and shortcuts as well as a number of high-level classes to
 make the development of bots easy and straightforward. These classes are contained in the
@@ -81,7 +77,7 @@ After installing_ the library, be sure to check out the section on `working with
 Telegram API support
 ~~~~~~~~~~~~~~~~~~~~
 
-All types and methods of the Telegram Bot API **9.1** are natively supported by this library.
+All types and methods of the Telegram Bot API **10.0** are natively supported by this library.
 In addition, Bot API functionality not yet natively included can still be used as described `in our wiki <https://github.com/python-telegram-bot/python-telegram-bot/wiki/Bot-API-Forward-Compatibility>`_.
 
 Notable Features
@@ -159,7 +155,7 @@ PTB can be installed with optional dependencies:
 * ``pip install "python-telegram-bot[http2]"`` installs `httpx[http2] <https://www.python-httpx.org/#dependencies>`_. Use this, if you want to use HTTP/2.
 * ``pip install "python-telegram-bot[rate-limiter]"`` installs `aiolimiter~=1.1,<1.3 <https://aiolimiter.readthedocs.io/en/stable/>`_. Use this, if you want to use ``telegram.ext.AIORateLimiter``.
 * ``pip install "python-telegram-bot[webhooks]"`` installs the `tornado~=6.4 <https://www.tornadoweb.org/en/stable/>`_ library. Use this, if you want to use ``telegram.ext.Updater.start_webhook``/``telegram.ext.Application.run_webhook``.
-* ``pip install "python-telegram-bot[callback-data]"`` installs the `cachetools>=5.3.3,<6.2.0 <https://cachetools.readthedocs.io/en/latest/>`_ library. Use this, if you want to use `arbitrary callback_data <https://github.com/python-telegram-bot/python-telegram-bot/wiki/Arbitrary-callback_data>`_.
+* ``pip install "python-telegram-bot[callback-data]"`` installs the `cachetools>=5.3.3,<6.3.0 <https://cachetools.readthedocs.io/en/latest/>`_ library. Use this, if you want to use `arbitrary callback_data <https://github.com/python-telegram-bot/python-telegram-bot/wiki/Arbitrary-callback_data>`_.
 * ``pip install "python-telegram-bot[job-queue]"`` installs the `APScheduler>=3.10.4,<3.12.0 <https://apscheduler.readthedocs.io/en/3.x/>`_ library. Use this, if you want to use the ``telegram.ext.JobQueue``.
 
 To install multiple optional dependencies, separate them by commas, e.g. ``pip install "python-telegram-bot[socks,webhooks]"``.
@@ -206,7 +202,7 @@ Concurrency
 ~~~~~~~~~~~
 
 Since v20.0, ``python-telegram-bot`` is built on top of Pythons ``asyncio`` module.
-Because ``asyncio`` is in general single-threaded, ``python-telegram-bot`` does currently not aim to be thread-safe.
+Because ``asyncio`` is in general single-threaded, ``python-telegram-bot`` currently does not aim to be thread-safe.
 Noteworthy parts of ``python-telegram-bots`` API that are likely to cause issues (e.g. race conditions) when used in a multi-threaded setting include:
 
 * ``telegram.ext.Application/Updater.update_queue``
@@ -215,6 +211,12 @@ Noteworthy parts of ``python-telegram-bots`` API that are likely to cause issues
 * ``telegram.ext.BasePersistence``
 * all classes in the ``telegram.ext.filters`` module that allow to add/remove allowed users/chats at runtime
 
+Free threading
+~~~~~~~~~~~~~~
+
+While ``python-telegram-bot`` is tested to work with Python 3.14 free threading, we do not guarantee that
+PTB is thread-safe for all use cases. Please see issue `#4873 <https://github.com/python-telegram-bot/python-telegram-bot/issues/4873>`_ for more information.
+
 Contributing
 ------------
 

changes/22.2_2025-06-29/4802.RMLufX4UazobYg5aZojyoD.toml

@@ -2,7 +2,7 @@ bugfixes = """
 Fixed a bug where calling ``Application.remove/add_handler`` during update handling can cause a ``RuntimeError`` in ``Application.process_update``.
 
 .. hint::
-    Calling ``Application.add/remove_handler`` now has no influence on calls to :meth:`process_update` that are
+    Calling ``Application.add/remove_handler`` now has no influence on calls to ``process_update`` that are
     already in progress. The same holds for ``Application.add/remove_error_handler`` and ``Application.process_error``, respectively.
 
     .. warning::

changes/22.4_2025-09-13/4869.7GK56NC89XswBFUCiWXtqc.toml

@@ -0,0 +1,5 @@
+features = "Extend :meth:`telegram.Message.delete` shortcut to support business message deletion"
+[[pull_requests]]
+uid = "4869"
+author_uid = "jainamoswal"
+closes_threads = ["4867"]

changes/22.4_2025-09-13/4875.29srP6fENz7FrGGoWSkPNa.toml

@@ -0,0 +1,5 @@
+bugfixes = "Adapt logic on getting the event loop in ``Application.run_polling/webhook`` to Python 3.14"
+[[pull_requests]]
+uid = "4875"
+author_uid = "harshil21"
+closes_threads = ["4874"]

changes/22.4_2025-09-13/4878.AbGo6aozTWquUjnzzpSdyX.toml

@@ -0,0 +1,9 @@
+documentation = "Documentation Improvements"
+
+[[pull_requests]]
+uid = "4878"
+author_uid = "Bibo-Joshi"
+
+[[pull_requests]]
+uid = "4872"
+author_uid = "Ca5parAD"

changes/22.4_2025-09-13/4879.kABAi45KpR2H6jqJu6NtDS.toml

@@ -0,0 +1,5 @@
+internal = "Address Failing Unit Test for ``send_paid_media``"
+
+[[pull_requests]]
+uid = "4879"
+author_uid = "Bibo-Joshi"

changes/22.4_2025-09-13/4880.42PW26hGpLypMJMxTeiQZ6.toml

@@ -0,0 +1,6 @@
+internal = "Improve Internal Logic for Network Retries"
+
+[[pull_requests]]
+uid = "4880"
+author_uid = "Bibo-Joshi"
+closes_threads = ["4871"]

changes/22.4_2025-09-13/4881.dJNT656MVxJk9DgcoRePip.toml

@@ -0,0 +1,6 @@
+features = "Add convenience properties for ``firstname``, ``lastname``, and ``username`` to ``SharedUser`` and ``ChatShared``"
+internal = "Introduce utility module ``_utils.usernames`` refactoring convenience properties around Telegram Objects' ``firstname``, ``lastname``, and ``username``"
+pull_requests = [
+  { uid = "4881", author_uid = "aelkheir" },
+  { uid = "4713", author_uid = "david-shiko" },
+]

changes/22.4_2025-09-13/4882.JpgQAHHnCponMKStbC4JsG.toml

@@ -0,0 +1,10 @@
+other = """
+Set the default connection pool size for ``HTTPXRequest`` to 256 to allow more concurrent requests by default. Drop the ``httpx`` parameter ``max_keepalive_connections``. This way, the ``httpx`` default of 20 is used, leading to a smaller number of idle connections in large connection pools.
+
+.. hint::
+   If you manually build the ``HTTPXRequest`` objects, please be aware that these changes also applies to you. Kindly double check your settings. To specify custom limits, you can set them via the parameter ``httpx_kwargs`` of ``HTTPXRequest``. See also  `the httpx documentation <https://www.python-httpx.org/advanced/resource-limits/>`__ for more details on these settings."
+"""
+[[pull_requests]]
+uid = "4882"
+author_uid = "Poolitzer"
+closes_threads = []

changes/22.4_2025-09-13/4884.ADcdCj6GrMaKffYSLzWdsL.toml

@@ -0,0 +1,5 @@
+internal = "Add Copilot Instructions and Setup Steps"
+[[pull_requests]]
+uid = "4884"
+author_uid = "harshil21"
+closes_threads = []

changes/22.4_2025-09-13/4886.XSHPk83uhDQdYzurbb4xx9.toml

@@ -0,0 +1,5 @@
+internal = "Remove ``black``, ``isort``, ``flake8``, and ``pyupgrade`` in favor of ``ruff``"
+[[pull_requests]]
+uid = "4886"
+author_uid = "harshil21"
+closes_threads = []

changes/22.4_2025-09-13/4887.5yypYZV7Sq5PN4ihmf2NUr.toml

@@ -0,0 +1,5 @@
+internal = "Use Renovate to Keep Dependencies Up-To-Date"
+[[pull_requests]]
+uid = "4887"
+author_uid = "renovatebot"
+closes_threads = []

changes/22.4_2025-09-13/4890.oCzELerGo8dqPygShWMV9S.toml

@@ -0,0 +1,5 @@
+internal = "Add and use a ``uv.lock`` lockfile when setting up the development environment using ``uv``."
+[[pull_requests]]
+uid = "4890"
+author_uid = "harshil21"
+closes_threads = ["4796"]

changes/22.4_2025-09-13/4892.iRGvURLUGiMSMEDfdpP5jB.toml

@@ -0,0 +1,5 @@
+internal = "Bump ``pytest`` from 8.4.0 to 8.4.1"
+[[pull_requests]]
+uid = "4892"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4893.Fbkdqj4bmTTH6e54gRPwvc.toml

@@ -0,0 +1,5 @@
+internal = "Bump ``pytest-xdist`` from 3.6.1 to 3.8.0"
+[[pull_requests]]
+uid = "4893"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4894.PLQSCgnKXygrGdkekTbx8q.toml

@@ -0,0 +1,5 @@
+documentation = "Bump ``furo`` from 2024.8.6 to 2025.7.19"
+[[pull_requests]]
+uid = "4894"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4895.UECAN369MCuQaLnTmtYFGr.toml

@@ -0,0 +1,5 @@
+internal = "Bump ``astral-sh/setup-uv`` from 6.3.1 to 6.4.3"
+[[pull_requests]]
+uid = "4895"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4896.R92Xq7W6PDbabuk6aZ5FZt.toml

@@ -0,0 +1,5 @@
+internal = "Bump ``github/codeql-action`` from 3.29.2 to 3.29.5"
+[[pull_requests]]
+uid = "4896"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4906.Fju7LDJgwCz2sxgQy9muBG.toml

@@ -0,0 +1,5 @@
+features = "Add ``filters.FORUM`` to filter messages from forum topic chats"
+[[pull_requests]]
+uid = "4906"
+author_uid = "harshil21"
+closes_threads = []

changes/22.4_2025-09-13/4908.KnwujH2JruNRZSrTTvvc9B.toml

@@ -0,0 +1,5 @@
+bugfixes = "Fix ``ResourceWarning`` when passing ``pathlib.Path`` objects to methods which accept file input"
+[[pull_requests]]
+uid = "4908"
+author_uid = "harshil21"
+closes_threads = ["4907"]

changes/22.4_2025-09-13/4911.kiF45Y4cfPGMq5cuLpa5da.toml

@@ -0,0 +1,14 @@
+features = "Full Support for Bot API 9.2"
+
+pull_requests = [
+    { uid = "4911", author_uid = "aelkheir", closes_threads = ["4910"] },
+    { uid = "4918", author_uid = "Poolitzer" },
+    { uid = "4917", author_uid = "Poolitzer" },
+    { uid = "4914", author_uid = "harshil21"},
+    { uid = "4916", author_uid = "harshil21"},
+    { uid = "4912", author_uid = "aelkheir" },
+    { uid = "4921", author_uid = "aelkheir" },
+    { uid = "4936", author_uid = "Bibo-Joshi" },
+    { uid = "4935", author_uid = "Bibo-Joshi" },
+    { uid = "4931", author_uid = "aelkheir" },
+]

changes/22.4_2025-09-13/4915.D3x6MoyYYDaUcB7jmLUyeY.toml

@@ -0,0 +1,5 @@
+internal = "Don't update ``uv.lock`` in copilot runtime environment"
+[[pull_requests]]
+uid = "4915"
+author_uid = "harshil21"
+closes_threads = []

changes/22.4_2025-09-13/4923.AEztvspxU4Ajz7N3ms56Wq.toml

@@ -0,0 +1,5 @@
+dependencies = "Update cachetools requirement from <6.2.0,>=5.3.3 to >=5.3.3,<6.3.0"
+[[pull_requests]]
+uid = "4923"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4925.FCwe9rrjgv5GmfvuhHXjHg.toml

@@ -0,0 +1,5 @@
+internal = "Bump actions/checkout from 4.2.2 to 5.0.0"
+[[pull_requests]]
+uid = "4925"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4926.GMcTfT2hSAdmdT7wi73mzZ.toml

@@ -0,0 +1,5 @@
+internal = "Bump codecov/codecov-action from 5.4.3 to 5.5.0"
+[[pull_requests]]
+uid = "4926"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4927.mHtL79KfGaRw3LEMdHN6Ry.toml

@@ -0,0 +1,5 @@
+internal = "Bump actions/download-artifact from 4.3.0 to 5.0.0"
+[[pull_requests]]
+uid = "4927"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4928.ej4TvW3TjhqhpUHNyne2r4.toml

@@ -0,0 +1,5 @@
+internal = "Bump astral-sh/setup-uv from 6.4.3 to 6.6.1"
+[[pull_requests]]
+uid = "4928"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4929.P2dSYTjRtQtXPdKyaDHPJA.toml

@@ -0,0 +1,5 @@
+internal = "Bump github/codeql-action from 3.29.7 to 3.30.0"
+[[pull_requests]]
+uid = "4929"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4933.CPGgVg7gvHC3dqmhzAVDVo.toml

@@ -0,0 +1,5 @@
+internal = "Bump pytest from 8.4.1 to 8.4.2"
+[[pull_requests]]
+uid = "4933"
+author_uid = "dependabot"
+closes_threads = []

changes/22.4_2025-09-13/4934.W4nUZkUHd9Hw4mGaLA6Ayf.toml

@@ -0,0 +1,5 @@
+internal = "Use Tagged Release of `pydantic` in Development Dependencies"
+[[pull_requests]]
+uid = "4934"
+author_uid = "harshil21"
+closes_threads = ["4932"]

changes/22.4_2025-09-13/4939.YDNzLiFegKD2difT6yr6P7.toml

@@ -0,0 +1,5 @@
+other = "Bump Version to v22.4"
+[[pull_requests]]
+uid = "4939"
+author_uid = "Bibo-Joshi"
+closes_threads = []

changes/22.5_2025-09-27/4861.HEoGVs2mYXWzqMahi6SEhV.toml

@@ -0,0 +1,10 @@
+features = """
+Add convenience methods for ``BusinessOpeningHours``:
+
+* ``get_opening_hours_for_day``: returns the opening hours applicable for a specific date
+* ``is_open``: indicates whether the business is open at the specified date and time.
+"""
+[[pull_requests]]
+uid = "4861"
+author_uid = "Aweryc"
+closes_threads = ["4194"]

changes/22.5_2025-09-27/4938.U2x6X7ZGikYv5eo9aUSNGc.toml

@@ -0,0 +1,5 @@
+internal = "Lock file maintenance"
+[[pull_requests]]
+uid = "4938"
+author_uid = "renovatebot"
+closes_threads = []

changes/22.5_2025-09-27/4943.DdNTkLjQbNGeG3nEBGHjBo.toml

@@ -0,0 +1,5 @@
+internal = "Update astral-sh/setup-uv digest to b75a909"
+[[pull_requests]]
+uid = "4943"
+author_uid = "renovatebot"
+closes_threads = []

changes/22.5_2025-09-27/4944.mYorcTojrvwihYQ5NPwNcE.toml

@@ -0,0 +1,5 @@
+internal = "Update codecov/codecov-action action to v5.5.1"
+[[pull_requests]]
+uid = "4944"
+author_uid = "renovatebot"
+closes_threads = []

changes/22.5_2025-09-27/4945.LDiTvYjbXuQBp7kLyQMYa5.toml

@@ -0,0 +1,5 @@
+internal = "Update dependency astral-sh/uv to v0.8.17"
+[[pull_requests]]
+uid = "4945"
+author_uid = "renovatebot"
+closes_threads = []

changes/22.5_2025-09-27/4946.KujJLUNcND72Y8aKs3bzSx.toml

@@ -0,0 +1,5 @@
+internal = "Update github/codeql-action action to v3.30.3"
+[[pull_requests]]
+uid = "4946"
+author_uid = "renovatebot"
+closes_threads = []

changes/22.5_2025-09-27/4947.CcLd8YTb8XaANn8gQXruNb.toml

@@ -0,0 +1,5 @@
+internal = "Update Pylint to v3.3.8"
+[[pull_requests]]
+uid = "4947"
+author_uid = "renovatebot"
+closes_threads = []

changes/22.5_2025-09-27/4948.ernZikrNEarFtTZgLN7huS.toml

@@ -0,0 +1,5 @@
+internal = "Update Chango to v0.5.0"
+[[pull_requests]]
+uid = "4948"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4949.YhMnQj57Qpm9HD5zkkhfZC.toml

@@ -0,0 +1,5 @@
+internal = "Update Mypy to v1.18.1"
+[[pull_requests]]
+uid = "4949"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4950.VA9pgTVrLPABkUrxifLZnh.toml

@@ -0,0 +1,5 @@
+internal = "Align pre-commit hook APScheduler to with ``pyproject.toml``"
+[[pull_requests]]
+uid = "4950"
+author_uids = ["renovatebot", "Bibo-Joshi"]
+closes_threads = []

changes/22.5_2025-09-27/4951.7ZExRZuEwEoGXX5FMPWctm.toml

@@ -0,0 +1,5 @@
+internal = "Align pre-commit hook cachetools to with ``pyproject.toml``"
+[[pull_requests]]
+uid = "4951"
+author_uids = ["renovatebot", "Bibo-Joshi"]
+closes_threads = []

changes/22.5_2025-09-27/4952.bVCE8YehtKGcwLYdiXkmQb.toml

@@ -0,0 +1,5 @@
+internal = "Update pypa/gh-action-pypi-publish action to v1.13.0"
+[[pull_requests]]
+uid = "4952"
+author_uid = "renovatebot"
+closes_threads = []

changes/22.5_2025-09-27/4953.8aPTEQhSPSgTrguzvsw4tq.toml

@@ -0,0 +1,5 @@
+internal = "Renovate: No README updates, label behaviour change, automerge lockfiles"
+[[pull_requests]]
+uid = "4953"
+author_uid = "harshil21"
+closes_threads = []

changes/22.5_2025-09-27/4954.XrYn8gzjeQF9LoPQomutuW.toml

@@ -0,0 +1,5 @@
+internal = "Lock file maintenance"
+[[pull_requests]]
+uid = "4954"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4955.2BXmasa9Ms9vqXngSMKSVX.toml

@@ -0,0 +1,5 @@
+internal = "Lock file maintenance"
+[[pull_requests]]
+uid = "4955"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4958.ktVtuEvzAxxFxSwk7KXQ66.toml

@@ -0,0 +1,5 @@
+internal = "Update astral-sh/setup-uv digest to 208b0c0"
+[[pull_requests]]
+uid = "4958"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4959.H2BCKBh9WXaoFKmwiMX4m7.toml

@@ -0,0 +1,5 @@
+internal = "Update dependency astral-sh/uv to v0.8.19"
+[[pull_requests]]
+uid = "4959"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4960.KyngeakT6uHLQXYftm2Cpe.toml

@@ -0,0 +1,5 @@
+internal = "Update Mypy to v1.18.2"
+[[pull_requests]]
+uid = "4960"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4961.nd2KdJpSCyLC3K5xninxZL.toml

@@ -0,0 +1,5 @@
+internal = "Update astral-sh/setup-uv action to v6.7.0"
+[[pull_requests]]
+uid = "4961"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4962.mZAGRv4sXnpirJCkrKniVJ.toml

@@ -0,0 +1,5 @@
+internal = "Update Ruff to v0.13.1"
+[[pull_requests]]
+uid = "4962"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4964.KbKLtQ5MYHdt49gpBxCaja.toml

@@ -0,0 +1,5 @@
+internal = "Update actions/stale action to v10"
+[[pull_requests]]
+uid = "4964"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4965.488hEhfeZfPvfZszvRKdkJ.toml

@@ -0,0 +1,5 @@
+internal = "Properly Pin Dependency to ``astral/setup-uv`` in Copilot Setup Steps"
+[[pull_requests]]
+uid = "4965"
+author_uids = ["Bibo-Joshi"]
+closes_threads = []

changes/22.5_2025-09-27/4967.a9vCqXXpyAfzTb8TD7ouqB.toml

@@ -0,0 +1,5 @@
+internal = "Lock file maintenance"
+[[pull_requests]]
+uid = "4967"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4968.ecxiPBroDpMUkab6uBCUde.toml

@@ -0,0 +1,5 @@
+internal = "Tune Renovate Configuration"
+[[pull_requests]]
+uid = "4968"
+author_uids = ["harshil21"]
+closes_threads = []

changes/22.5_2025-09-27/4972.RX4QftpcFPCv2wXbTAhDAh.toml

@@ -0,0 +1,10 @@
+breaking = """Move param ``ReplyParameters.checklist_task_id`` to last position.
+
+.. hint::
+   This change addresses a breaking change accidentally introduced in version 22.4 where the introduction of the new parameter was not done in a backward compatible way.
+   Existing code using keyword arguments is unaffected. Only code using positional arguments (and based on version 22.4) may need updates.
+"""
+[[pull_requests]]
+uid = "4972"
+author_uids = ["aelkheir"]
+closes_threads = []

changes/22.5_2025-09-27/4973.PtSpAPsm7wh4PWc4p3uajX.toml

@@ -0,0 +1,5 @@
+bugfixes = "Fix Handling of Infinite Bootstrap Retries in ``Application.run_*`` and ``Updater.start_*``"
+[[pull_requests]]
+uid = "4973"
+author_uids = ["Bibo-Joshi"]
+closes_threads = ["4966"]

changes/22.5_2025-09-27/4974.c4UDqA4q7eBr9mYGmJL4CQ.toml

@@ -0,0 +1,4 @@
+documentation = "Documentation Improvemennts"
+[[pull_requests]]
+uid = "4974"
+author_uids = ["Bibo-Joshi"]

changes/22.5_2025-09-27/4975.cxvpDwNRvRzK9aZxRbav6b.toml

@@ -0,0 +1,5 @@
+internal = "Update dependency astral-sh/uv to v0.8.22"
+[[pull_requests]]
+uid = "4975"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4976.GVUSXmvHEopzdff7bVCNF4.toml

@@ -0,0 +1,5 @@
+internal = "Update github/codeql-action action to v3.30.5"
+[[pull_requests]]
+uid = "4976"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4977.YYYUcDY7oSNQ9FXUGZq7sp.toml

@@ -0,0 +1,5 @@
+internal = "Update Ruff to v0.13.2"
+[[pull_requests]]
+uid = "4977"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4978.9hhbtgMWDjm7BUNaNozjoV.toml

@@ -0,0 +1,5 @@
+internal = "Update dependency furo to v2025.9.25"
+[[pull_requests]]
+uid = "4978"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.5_2025-09-27/4979.gRpn8vd66DtorTtkMN4AsU.toml

@@ -0,0 +1,5 @@
+other = "Bump Version to v22.5"
+[[pull_requests]]
+uid = "4979"
+author_uids = ["Bibo-Joshi"]
+closes_threads = []

changes/22.6_2026-01-24/4827.PBXyEEjvXz5sJbiDWkeGFX.toml

@@ -0,0 +1,5 @@
+other = "Remove Support for Python 3.9"
+[[pull_requests]]
+uid = "4827"
+author_uid = "harshil21"
+closes_threads = []

changes/22.6_2026-01-24/4980.86EojeXUgUSi87JKMZojGD.toml

@@ -0,0 +1,5 @@
+internal = "Lock file maintenance"
+[[pull_requests]]
+uid = "4980"
+author_uid = "renovatebot"
+closes_threads = []

changes/22.6_2026-01-24/4984.XKkS99HJWztHscs6N6wpEh.toml

@@ -0,0 +1,5 @@
+internal = "Update github/codeql-action action to v3.30.6"
+[[pull_requests]]
+uid = "4984"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.6_2026-01-24/4985.LrPNHbexoHAmim6zXB9nMp.toml

@@ -0,0 +1,5 @@
+internal = "Update Ruff to v0.13.3"
+[[pull_requests]]
+uid = "4985"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.6_2026-01-24/4986.fwbZif2YKWgeugPof8Fikj.toml

@@ -0,0 +1,5 @@
+internal = "Update actions/stale action to v10.1.0"
+[[pull_requests]]
+uid = "4986"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.6_2026-01-24/4987.PLoqzvYm725uVfKcWhwuCb.toml

@@ -0,0 +1,5 @@
+internal = "Update astral-sh/setup-uv action to v6.8.0"
+[[pull_requests]]
+uid = "4987"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.6_2026-01-24/4988.Lncn8TNDcQF4hLQZJvyzQY.toml

@@ -0,0 +1,5 @@
+documentation = "Documentation Improvements. Among others, fix dead links."
+
+[[pull_requests]]
+uid = "4988"
+author_uids = ["Bibo-Joshi"]

changes/22.6_2026-01-24/4989.TjTuqb5LqcEXDLvArDzcEY.toml

@@ -0,0 +1,5 @@
+internal = "Update dependency astral-sh/uv to v0.8.23"
+[[pull_requests]]
+uid = "4989"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.6_2026-01-24/4990.HxHP2zqbTAcGzjapkgX3E5.toml

@@ -0,0 +1,5 @@
+internal = "Update configuration of actions/stale to use issue types instead of labels"
+
+[[pull_requests]]
+uid = "4990"
+author_uids = ["Bibo-Joshi"]

changes/22.6_2026-01-24/4994.K8XVzJe4kuoHmc2yRsrYTb.toml

@@ -0,0 +1,5 @@
+internal = "Update github/codeql-action action to v3.30.8"
+[[pull_requests]]
+uid = "4994"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.6_2026-01-24/4995.TGRtuG8BUqB6S9JxpPxiNR.toml

@@ -0,0 +1,5 @@
+internal = "Update Pylint to v3.3.9"
+[[pull_requests]]
+uid = "4995"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.6_2026-01-24/4996.bRG2iuMsWDR47wDt556q57.toml

@@ -0,0 +1,5 @@
+internal = "Update dependency astral-sh/uv to v0.9.2"
+[[pull_requests]]
+uid = "4996"
+author_uids = ["renovatebot"]
+closes_threads = []

changes/22.6_2026-01-24/4997.hJRqz3id5FnzSzPeMhY3k6.toml

@@ -0,0 +1,5 @@
+internal = "Update Ruff to v0.14.0"
+[[pull_requests]]
+uid = "4997"
+author_uids = ["renovatebot"]
+closes_threads = []