[dependabot]

Bumps the docs group with 3 updates in the /docs directory: mkdocs-material, mkdocstrings and mkdocstrings-python.

Updates mkdocs-material from 9.7.7 to 9.8.0

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.8.0

[!WARNING]

Material for MkDocs reaches end of life on May 5, 2027. Critical fixes and security updates continue until that date.

We're continuing our work with Zensical, a maintained successor built by the team behind Material for MkDocs. It carries forward what we've learned from building documentation tools with this community, with Markdown authoring, a familiar design, and full control over your content. Zensical is Open Source and MIT-licensed.

You can evaluate Zensical alongside MkDocs using your existing mkdocs.yml. Check plugin compatibility and compare your pages, navigation, search, and customizations before switching. The classic theme variant preserves the appearance of Material for MkDocs. See the migration guide for the steps and current compatibility details.

Upcoming changes on November 5

This is primarily a security release. It raises dependency minimums to address known vulnerabilities. We recommend upgrading to this release and updating your dependency lockfiles.

Python 3.11 or newer is now required. Python 3.8–3.10 are no longer supported.

• Updated Node build-time dependencies to fix vulnerabilities
• Updated Python dependency minimums and required Python 3.11
• Removed RSS from recommended dependencies
• Updated project status and maintenance links
• Updated CLI notice with end-of-life and migration guidance
• Removed redirects from recommended dependencies

Previous dependency ranges allowed versions with known vulnerabilities. The new minimums cover core Python dependencies and the optional git and imaging extras, including GitPython 3.2.1 or newer for the git extra.

Recent releases of mkdocs-rss-plugin and mkdocs-redirects depend on ProperDocs, a separate static site generator that Material for MkDocs does not require. Removing these plugins from the recommended extra keeps its dependency footprint smaller and leaves the choice of additional tools to each project. If your project uses RSS feeds or redirects, declare the relevant plugin explicitly in your own dependencies.

The CLI notice now gives the May 5, 2027 end-of-life date and links to the Zensical migration guide. It also clarifies that third-party ProperDocs migration notices do not represent a recommendation from the Material for MkDocs team. Package metadata now marks the project as inactive and includes maintenance and migration links.

Selected Python security advisories addressed by the new minimums:

Dependency	Affected versions	New minimum	Advisory
Jinja2	<=3.1.5	3.1.6	CVE-2025-27516
Markdown	<3.8.1	3.8.1	CVE-2025-69534
Pygments	<2.20.0	2.20.0	CVE-2026-4539
PyMdown Extensions	<=11.0.0	11.0.1	CVE-2026-67422
Requests	<2.33.0	2.33.0	CVE-2026-25645
Pillow	<13.0.0	13.0.0	CVE-2026-96636
CairoSVG	<=2.9.0	2.9.1	CVE-2026-107378
GitPython	<=3.2.0	3.2.1	CVE-2026-114145

Pillow and CairoSVG apply to the imaging extra; GitPython applies to the git extra.

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.8.0 (2026-10-24)

This is primarily a security release. It raises dependency minimums to address known vulnerabilities. We recommend upgrading to this release and updating your dependency lockfiles.

Python 3.11 or newer is now required. Python 3.8–3.10 are no longer supported.

• Updated Node build-time dependencies to fix vulnerabilities
• Updated Python dependency minimums and required Python 3.11
• Removed RSS from recommended dependencies
• Updated project status and maintenance links
• Updated CLI notice with end-of-life and migration guidance
• Removed redirects from recommended dependencies

Previous dependency ranges allowed versions with known vulnerabilities. The new minimums cover core Python dependencies and the optional git and imaging extras, including GitPython 3.2.1 or newer for the git extra.

Recent releases of mkdocs-rss-plugin and mkdocs-redirects depend on ProperDocs, a separate static site generator that Material for MkDocs does not require. Removing these plugins from the recommended extra keeps its dependency footprint smaller and leaves the choice of additional tools to each project. If your project uses RSS feeds or redirects, declare the relevant plugin explicitly in your own dependencies.

The CLI notice now gives the May 5, 2027 end-of-life date and links to the Zensical migration guide: https://zensical.org/docs/compatibility/mkdocs/migration/

It also clarifies that third-party ProperDocs migration notices do not represent a recommendation from the Material for MkDocs team. Package metadata now marks the project as inactive and includes maintenance and migration links.

Selected Python security advisories addressed by the new minimums:

Jinja2: affected <=3.1.5; new minimum 3.1.6 (CVE-2025-27516) GHSA-cpwx-vrp4-4pq7

Markdown: affected <3.8.1; new minimum 3.8.1 (CVE-2025-69534) GHSA-5wmx-573v-2qwq

Pygments: affected <2.20.0; new minimum 2.20.0 (CVE-2026-4539) GHSA-5239-wwwm-4pmq

PyMdown Extensions: affected <=11.0.0; new minimum 11.0.1 (CVE-2026-67422) GHSA-gm37-52c6-37mw

Requests: affected <2.33.0; new minimum 2.33.0 (CVE-2026-25645) GHSA-gc5v-m9x4-r6x2

... (truncated)

Commits

• 0f72ad6 Merge pull request #8615 from squidfunk/fix/security
• 85a048d Documentation
• 10c572e Prepare 9.8.0 release
• dd8a7ef Cleaned up unused assets
• 8771cef Updated README
• 7c9a1cc Updated changelog
• 3ce9310 Removed redirects from recommended dependencies
• 0b77e8f Updated CLI notice with end-of-life and migration guidance
• 66e4f9c Updated project status and maintenance links
• 1ed13d2 Removed RSS from recommended dependencies
• Additional commits viewable in compare view

Updates mkdocstrings from 1.0.7 to 1.0.8

Release notes

Sourced from mkdocstrings's releases.

1.0.8

1.0.8 - 2026-10-19

Compare with 1.0.7

Bug Fixes

• Prefix code anchor/span IDs to avoid collisions (f402d2c by Timothée Mazzucotelli). Issue-mkdocstrings-python-200

Changelog

Sourced from mkdocstrings's changelog.

1.0.8 - 2026-10-19

Compare with 1.0.7

Bug Fixes

• Prefix code anchor/span IDs to avoid collisions (f402d2c by Timothée Mazzucotelli). Issue-mkdocstrings-python-200

Commits

• df77e42 chore: Prepare release 1.0.8
• cbc4590 chore: Stop testing on Python 3.10
• f402d2c fix: Prefix code anchor/span IDs to avoid collisions
• e9538c4 docs: Link the VBA handler to its published documentation
• See full diff in compare view

Updates mkdocstrings-python from 2.0.9 to 2.0.10

Release notes

Sourced from mkdocstrings-python's releases.

2.0.10

2.0.10 - 2026-10-19

Compare with 2.0.9

Build

• Drop support for Python 3.10 (aad7fc6 by Timothée Mazzucotelli).

Bug Fixes

• Prefix code anchor/span IDs in signatures to avoid collisions (35cde4c by Timothée Mazzucotelli). Issue-200

Changelog

Sourced from mkdocstrings-python's changelog.

2.0.10 - 2026-10-19

Compare with 2.0.9

Build

• Drop support for Python 3.10 (aad7fc6 by Timothée Mazzucotelli).

Bug Fixes

• Prefix code anchor/span IDs in signatures to avoid collisions (35cde4c by Timothée Mazzucotelli). Issue-200

Commits

• f561c84 chore: Prepare release 2.0.10
• aad7fc6 build: Drop support for Python 3.10
• 35cde4c fix: Prefix code anchor/span IDs in signatures to avoid collisions
• See full diff in compare view