Bump the runtime-dependencies group across 1 directory with 4 updates

[dependabot]

Updates the requirements on aiohttp, certifi, pillow and pyinstaller to permit the latest version.
Updates aiohttp from 3.13.5 to 3.14.3
Updates certifi from 2026.6.17 to 2026.7.22

Commits

• f4bc676 2026.07.22 (#428)
• 4c91f9c Bump actions/setup-python from 6.3.0 to 7.0.0 (#427)
• 01a66c5 Bump actions/checkout from 7.0.0 to 7.0.1 (#426)
• eb355f4 Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#425)
• 474e6fc Include tests in the source distribution (#424)
• a31ef39 Bump actions/setup-python from 6.2.0 to 6.3.0 (#420)
• 98eb2c7 Bump actions/checkout from 6.0.3 to 7.0.0 (#419)
• See full diff in compare view

Updates pillow from 12.2.0 to 12.3.0

Release notes

Sourced from pillow's releases.

12.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

• Remove non-image ImageCms modes #9697 [@​radarhere]

Documentation

• Add release notes for SBOM and performance improvements #9747 [@​radarhere]
• Add security release notes #9741 [@​radarhere]
• Add release notes for Python 3.15 beta wheels #9696 [@​radarhere]
• ImageFont can also be used with ImageText #9597 [@​radarhere]
• Additional guidelines for security reports #9659 [@​wiredfool]
• Fixed typo #9636 [@​radarhere]
• Added CVEs to 12.2.0 release notes #9591 [@​radarhere]
• Revise development support information in README #9583 [@​aclark4life]
• Add INCIDENT_RESPONSE.md #9555 [@​aclark4life]
• Add STRIDE threat model to security docs #9562 [@​aclark4life]
• Add CVEs to 12.2.0 release notes #9556 [@​radarhere]
• Update README with revised security policy #9553 [@​radarhere]
• Update security policy #9552 [@​aclark4life]
• Update macOS tested Python versions #9534 [@​radarhere]

Dependencies

• Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]
• Update dependency mypy to v2 #9653 [@renovate[bot]]
• Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]
• Update github-actions #9655 [@renovate[bot]]
• Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]
• Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]
• Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]
• Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]
• Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]
• Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]
• Update dependency harfbuzz to v14 #9610 [@renovate[bot]]
• Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]
• Update github-actions #9611 [@renovate[bot]]
• Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]
• Move dependency versions to single JSON and enable Renovate #9559 [@​hugovk]
• Updated raqm to 0.10.5 #9557 [@​radarhere]
• Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

• Remove matrix.os from benchmark #9735 [@​radarhere]
• Remove references to libavif patch #9734 [@​radarhere]
• Add benchmark tests #9654 [@​akx]
• Use reshape() instead of setting NumPy array shape directly #9728 [@​radarhere]

... (truncated)

Commits

• bb1d8e8 12.3.0 version bump
• e63fc48 Add release notes for SBOM and performance improvements (#9747)
• 13b701b Add release notes for #9679
• 5564ca7 List methods
• a0920fd Speed up ImageChops operations (#9738)
• 07e9a6c Speed up Image.filter() (#9736)
• a94578c Speed up Image.getchannel(), Image.merge(), Image.putalpha() and `Image...
• 53e02c4 Speed up Image.fill(), Image.linear_gradient() and `Image.radial_gradient...
• af03747 Speed up Image.resample() (#9739)
• 5c9ca56 Speed up alpha_composite, matrix, negative, quantize (#9740)
• Additional commits viewable in compare view

Updates pyinstaller to 6.21.0

Release notes

Sourced from pyinstaller's releases.

v6.21.0

Please see the v6.21.0 section of the changelog for a list of the changes since v6.20.0.

Changelog

Sourced from pyinstaller's changelog.

6.21.0 (2026-06-13)

Features

* Add support for Python 3.15. (:issue:`9456`)
* Initial support for setting :ref:`alternative splash screen centering modes
  <splash screen centering>` for multi-monitor setups. (:issue:`6271`)
Hooks

* Prevent ``_ios_support`` and ``libobjc.so`` from being collected on non-IOS
  platforms if :mod:`webbrowser` is imported. (:issue:`9436`)
* Update ``scipy`` hook for compatibility with upcoming ``scipy`` v1.18.0.
  (:issue:`9450`)
* Update the ``gi.repository.Adw`` hook to collect translation files
  for ``libadwaita``. (:issue:`9444`)
Documentation

</code></pre>

<ul>

<li>Document known issues with using splash screen in <code>onedir</code> GUI-based

applications. (:issue:<code>9425</code>)</li>

<li>Document the &quot;glowing magenta border&quot; problem in splash screen when

splash screen image contains semi-transparent pixels (for example,

due to feathered edges). (:issue:<code>9425</code>)</li>

</ul>

<h2>6.20.0 (2026-04-22)</h2>

<p>Bugfix</p>

<pre><code>

(Linux) Fix binary dependency analysis in Termux environment; previously,

no binary dependencies would be reported due to mismatched ldd output

pattern. (:issue:9402)
(Linux) Fix compatibility issues with Termux python 3.13, caused by

platform being now reported as &quot;android&quot; instead of &quot;linux&quot; (PEP 738).

(:issue:9398)
(macOS) Fix built-time error when trying to create an .app bundle with

data collected from a directory that contains symlinked elements.

(:issue:9375)
Fix the forkserver spawn mode of multiprocessing under python

3.13.13, 3.14.4, and the upcoming 3.15. (:issue:9423)
Remove warning about non-existing tclX module directory; in some Tcl

&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>

<ul>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/1cda34561015a90b6e1ae31dc89703799adaf13e&quot;&gt;&lt;code&gt;1cda345&lt;/code&gt;&lt;/a> Release v6.21.0. [skip ci]</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/14b6af36cd7284360e7094e66e97ddef76412876&quot;&gt;&lt;code&gt;14b6af3&lt;/code&gt;&lt;/a> tests: use different module in TestModuleGraph::test_find_module</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/6041ae39584fbb0606c1f936e33e656c075859a8&quot;&gt;&lt;code&gt;6041ae3&lt;/code&gt;&lt;/a> tests: modulegraph: skip tests that are incompatible with python 3.15</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/dd3c5601e58fa3b7993486d5bd9f769653f6ee24&quot;&gt;&lt;code&gt;dd3c560&lt;/code&gt;&lt;/a> tests: adjust bytecode sanity-check tests for python 3.15</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/08f4d82600302727dfc210ec38aa9eeebaf7a671&quot;&gt;&lt;code&gt;08f4d82&lt;/code&gt;&lt;/a> modulegraph: adapt _scan_bytecode() for changes in python 3.15</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/13c2e638918528e7b15b7f048aa01d6de9fe9b50&quot;&gt;&lt;code&gt;13c2e63&lt;/code&gt;&lt;/a> modulegraph: improve assert messages in _scan_bytecode()</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/d4fd4f442a214a656e4fc690f86e998d08d46bcb&quot;&gt;&lt;code&gt;d4fd4f4&lt;/code&gt;&lt;/a> depend: bytecode: add support for LOAD_COMMON_CONSTANT</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/5a9f21030ed91f7dc394a24c4e660c742ad6bf07&quot;&gt;&lt;code&gt;5a9f210&lt;/code&gt;&lt;/a> bootstrap: fix issues caused by encodings being frozen in python 3.15</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/8d97d35a2c04162be04a33748318308e09d398a4&quot;&gt;&lt;code&gt;8d97d35&lt;/code&gt;&lt;/a> tests: test_spec_options: explicitly disable argparse colored output</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/10d0772984f885246d002a7963c728c118639225&quot;&gt;&lt;code&gt;10d0772&lt;/code&gt;&lt;/a> tests: use can_import_module('tkinter') with all tkinter/splash tests</li>

<li>Additional commits viewable in <a href="https://github.com/pyinstaller/pyinstaller/compare/v6.0.0...v6.21.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions