bookmarkmgr: bump the all-packages group across 1 directory with 7 updates

[dependabot]

Bumps the all-packages group with 7 updates in the /bookmarkmgr directory:

Package	From	To
aiohttp	3.14.1	3.14.3
cffi	2.0.0	2.1.0
tqdm	4.68.3	4.69.0
yarl	1.24.2	1.24.5
types-tqdm	4.68.0.20260608	4.69.0.20260720
aiohappyeyeballs	2.6.2	2.7.1
types-requests	2.33.0.20260518	2.33.0.20260712

Updates aiohttp from 3.14.1 to 3.14.3
Updates cffi from 2.0.0 to 2.1.0

Release notes

Sourced from cffi's releases.

v2.1.0

• Added support for Python 3.15 and support for C extensions generated by CFFI to target the new abi3t free-threaded ABI.
• Dropped support for Python 3.9.
• Added cffi-gen-src CLI to generate CFFI C extension source for alternate build backend support.
• Fixed crashes inside __delitem__.
• Fixed "string too big" error under MSVC.
• Fixed mingw builds.
• Added support for arm64 iOS wheels.

Commits

• d9f6f70 New release 2.1.0
• 02a7b0e Misc pre-2.1 release/packaging cleanup (#253)
• 1362e5d Move cffi-gen-src release note to 2.1.0 notes
• a797055 Make error message when embedding version test fails more friendly
• f1f40a8 Update changelog
• dc62c93 Delete missed cp39 Windows builds
• a341180 Update version numbers to prepare for v2.1 release
• 9f04d85 Mark test using inet_ntoa as thread-unsafe
• 5f12702 Fix flaky pytest-run-parallel CI crash
• 26b3d3a Merge branch 'main' into integrate-buildtool
• Additional commits viewable in compare view

Updates tqdm from 4.68.3 to 4.69.0

Release notes

Sourced from tqdm's releases.

tqdm v4.69.0 stable

• add tqdm.asyncio.gather(..., return_exceptions=False) (#1776, #1671 <- #1286)
• misc minor framework updates
  • bump workflow actions & pre-commit hooks

tqdm v4.68.4 stable

• trim to ncols even when '{bar}' not in bar_format (#1717, #1767 <- #1658)
• fix tqdm.write when stdout=None (#1768 <- #1654)

Commits

• 6ab24dc bump version, workflow actions, pre-commit hooks
• 99615b9 asyncio: add gather(return_exceptions=False) (#1776)
• 53d096e bump version, merge pull request #1768 from its-Sohan/fix/write-stdout-none
• 74ff992 fix: prevent tqdm.write from crashing when sys.stdout is none
• 3757d0d Merge pull requests #1717 and #1767 (fixes #1658)
• 55156ce fix: apply disp_trim to all format_meter return paths (#1658)
• See full diff in compare view

Updates yarl from 1.24.2 to 1.24.5

Changelog

Sourced from yarl's changelog.

v1.24.5

(2026-07-19)

Contributor-facing changes

• Restricted the exhaustive IDNA default-ignorable sweep test to a native Linux x86_64 runner. It iterates roughly 140,000 code points and its result does not depend on the architecture, so running it under emulated wheel builds only added minutes and intermittently crashed the test workers -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:1806.

---

v1.24.4

(2026-07-19)

Packaging updates and notes for downstreams

• Stopped installing hypothesis in the wheel-build test environment. The property-based quoting tests that need it are skipped there already, and building it from source on architectures without a prebuilt wheel (such as armv7l musllinux, where the build pulls in a Rust toolchain) was failing the wheel jobs -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:1804.

---

v1.24.3

(2026-07-19)

... (truncated)

Commits

• 0b30cb0 Release 1.24.5 (#1807)
• 56150c8 Run the IDNA sweep test only on native Linux x86_64 (#1806)
• 515adca Release 1.24.4 (#1805)
• ab5dec2 Do not install hypothesis in the wheel-build test env (#1804)
• f9d10fb Release 1.24.3 (#1803)
• 058b7cb Test lone surrogate handling in encoded and parsed URL paths (#991)
• a181cee Update hypothesis requirement from >=6.156.4 to >=6.157.0 in /requirements (#...
• 28c1bcc Encode scheme-shaped path colon in relative-path builders (#1802)
• 51e2802 Reject hosts with Unicode default-ignorable code points (#1801)
• 3921a73 Drop lone surrogates that split a percent escape in the Cython quoter (#1752)
• Additional commits viewable in compare view

Updates types-tqdm from 4.68.0.20260608 to 4.69.0.20260720

Commits

• See full diff in compare view

Updates aiohappyeyeballs from 2.6.2 to 2.7.1

Release notes

Sourced from aiohappyeyeballs's releases.

v2.7.1 (2026-07-01)

Performance Improvements

• Use defaultdict to help with performance (#239, e10f335)

Refactoring

• Collapse collect-then-remove pattern in utils helpers (#227, 0dd3fd1)

• Merge identical except blocks in _connect_sock cleanup (#229, b7c186e)

• Simplify _interleave_addrinfos family grouping (#226, fdf6548)

---

Detailed Changes: v2.7.0...v2.7.1

v2.7.0 (2026-05-20)

Features

• Add Python 3.14 support (#224, 10e7d43)

---

Detailed Changes: v2.6.2...v2.7.0

Changelog

Sourced from aiohappyeyeballs's changelog.

v2.7.1 (2026-07-01)

Performance improvements

• Use defaultdict to help with performance (e10f335)

Refactoring

• Simplify _interleave_addrinfos family grouping (fdf6548)
• Collapse collect-then-remove pattern in utils helpers (0dd3fd1)
• Merge identical except blocks in _connect_sock cleanup (b7c186e)

v2.7.0 (2026-05-20)

Features

• Add python 3.14 support (10e7d43)

Commits

• 4dfc926 2.7.1
• e10f335 perf: use defaultdict to help with performance (#239)
• 338277b chore: stop tracking .DS_Store files (#251)
• 1697869 ci: add codspeed benchmark suite for addrinfo reordering hot paths (#250)
• d40a848 chore(deps-dev): bump starlette from 1.0.1 to 1.3.1 (#242)
• 51d4266 chore(deps-dev): bump cryptography from 46.0.7 to 48.0.1 (#243)
• 2df44b3 chore(pre-commit.ci): pre-commit autoupdate (#241)
• 3e3cb61 chore(deps-dev): bump pytest from 9.0.3 to 9.1.1 (#244)
• 922dcd7 chore(deps-ci): bump the github-actions group with 4 updates (#245)
• 70461c5 ci: drop .github/FUNDING.yml to inherit org-wide config (#247)
• Additional commits viewable in compare view

Updates types-requests from 2.33.0.20260518 to 2.33.0.20260712

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions