From 895b3e82ff746ffa6c6e219b9006239af9a21a99 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 20 Aug 2026 18:53:36 +0000
Subject: [PATCH] chore(deps): bump the python-minor-and-patch group across 1
 directory with 6 updates

Bumps the python-minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.54` | `3.1.59` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.10.2` | `3.10.3` |
| [bleach](https://github.com/mozilla/bleach) | `6.3.0` | `6.4.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [stix2-validator](https://github.com/oasis-open/cti-stix-validator) | `3.2.0` | `3.3.1` |
| [typer](https://github.com/fastapi/typer) | `0.27.0` | `0.27.1` |



Updates `gitpython` from 3.1.54 to 3.1.59
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.54...3.1.59)

Updates `markdown` from 3.10.2 to 3.10.3
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](https://github.com/Python-Markdown/markdown/compare/3.10.2...3.10.3)

Updates `bleach` from 6.3.0 to 6.4.0
- [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES)
- [Commits](https://github.com/mozilla/bleach/compare/v6.3.0...v6.4.0)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.2...v1.2.3)

Updates `stix2-validator` from 3.2.0 to 3.3.1
- [Release notes](https://github.com/oasis-open/cti-stix-validator/releases)
- [Changelog](https://github.com/oasis-open/cti-stix-validator/blob/master/CHANGELOG)
- [Commits](https://github.com/oasis-open/cti-stix-validator/compare/v3.2.0...v3.3.1)

Updates `typer` from 0.27.0 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](https://github.com/fastapi/typer/compare/0.27.0...0.27.1)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-version: 3.1.59
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: markdown
  dependency-version: 3.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: bleach
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: stix2-validator
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: typer
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 773a84c0813..2a3e3c315bd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,20 +1,20 @@
-GitPython==3.1.54
-Markdown==3.10.2
-bleach==6.3.0
+GitPython==3.1.59
+Markdown==3.10.3
+bleach==6.4.0
 colorama==0.4.6
 future==1.0.0
 loguru==0.7.3
 mitreattack-python==6.2.0
 pelican==4.12.0
 pelican-sitemap==1.2.2
-python-dotenv==1.2.2
+python-dotenv==1.2.3
 requests==2.34.2
 stix2==3.0.2
 
 # stix2-validator should not use 3.3.1 because that release is broken upstream
 # https://github.com/mitre-attack/attack-website/issues/628
-stix2-validator==3.2.0
-typer==0.27.0
+stix2-validator==3.3.1
+typer==0.27.1
 
 # dev dependencies
 ruff>=0.15.22