Bump the python-deps group across 1 directory with 2 updates

[dependabot]

Updates the requirements on mkdocs-material and mkdocs-git-revision-date-localized-plugin to permit the latest version.
Updates mkdocs-material to 9.7.7

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.7

[!WARNING]

Material for MkDocs is approaching end of life

Material for MkDocs is scheduled to reach end of life on November 5, 2026. Until then, maintenance is limited to critical bug fixes and security updates. After this date, the project will remain available on PyPI and GitHub, but no further maintenance is planned except in exceptional circumstances.

For users looking for a long-term, actively developed successor, we're building Zensical – a next-generation static site generator designed for technical documentation. If you're planning a new documentation project or evaluating your long-term options, we invite you to take a look.

Organizations requiring support beyond this date are welcome to get in touch to discuss available options.

Read the full announcement on our blog

Changes

• Fixed a DOM-based XSS vulnerability in search suggestions

Thanks to @​p- for responsibly reporting this issue.

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.7 (2026-07-17)

• Fixed DOM-based XSS vulnerability in search suggestions

mkdocs-material-9.7.6 (2026-03-19)

• Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

• Limited version range of mkdocs to <2
• Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

• Hardened social cards plugin by switching to sandboxed environment
• Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

• Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

• Opened up version ranges of optional dependencies for forward-compatibility
• Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

• Updated requests to 2.30+ to mitigate CVE in urllib
• Fixed privacy plugin not picking up protocol-relative URLs
• Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved

... (truncated)

Commits

• b3e6dd8 Prepare 9.7.7 release
• 52fb6be Merge commit from fork
• 901e633 Added SECURITY.md with EOL notice
• 5b36f2a Bump js-yaml from 4.1.1 to 4.2.0 (#8598)
• 2d11e7b Bump form-data from 3.0.4 to 3.0.5 (#8597)
• ae05a53 Bump esbuild from 0.27.2 to 0.28.1 (#8596)
• 434af93 Bump shell-quote from 1.7.3 to 1.8.4 (#8593)
• 4447cda Documentation (#8590)
• 8f8d551 Updated copyright year (#8588)
• 08d8514 Bump fast-uri from 3.0.3 to 3.1.2 (#8587)
• Additional commits viewable in compare view

Updates mkdocs-git-revision-date-localized-plugin to 1.6.0

Release notes

Sourced from mkdocs-git-revision-date-localized-plugin's releases.

v1.6.0

Highlights

Faster builds

Every page asked git which tag pointed at its commit, and asked again for the site-wide revision commit — the same answer, recomputed for each page. Those lookups are now cached.

The bigger your site, the more you save: on a 1000 page site this removes roughly 18 seconds of build time.

custom_format keeps your own words

If your format had any text around the date directives, that text came out scrambled:

custom_format: "Updated on %d %B %Y"

before:   Up23AMt723 on 23 January 2022
now:      Updated on 23 January 2022

Any format that was made up purely of % directives (including the %d. %B %Y default) was unaffected and still renders exactly as before. Unrecognised directives such as %Q are now left alone instead of being quietly reinterpreted as a different date field.

Creation date commit hash and tag now work

page.meta.git_creation_date_localized_hash and page.meta.git_creation_date_localized_tag were documented but always came back empty. If you use them in a theme override to link back to the commit or release that introduced a page, they now contain what you expect.

Shallow clone warnings reach more setups

The warning that tells you your dates will be wrong because CI only fetched part of the history was silently skipped whenever your .git was not in the directory you ran mkdocs from — a repository inside docs/, or a temporary checkout made by plugins such as monorepo. It now fires there too.

Clearer messages when something goes wrong

• A bad type: now produces a proper MkDocs config error listing the valid values, instead of a bare AssertionError.
• If reading git history in parallel fails, the error explains what enable_parallel_processing: false actually does, rather than suggesting a fallback it never attempted.
• Plugin messages now go through MkDocs' own logger, so they are formatted and coloured like every other message in your build output.

Type hints are now visible

The package ships py.typed, so mypy, pyright and ty can see the plugin's annotations.

Upgrading

mkdocs build --strict is now stricter. Warnings from this plugin previously bypassed MkDocs' warning counter, so --strict ignored them. They now count.

In practice this means a build that combines --strict with a shallow clone will start failing where it used to pass — most commonly GitHub Actions, which checks out with fetch-depth: 1 by default. The dates in that build really are wrong, so the right fix is to fetch the full history:

- uses: actions/checkout@v6
</tr></table> 

... (truncated)

Commits

• 8db2449 Bump version to 1.6.0
• 1f6eb6d Merge pull request #226 from timvink/refactor/page-rendering-and-packaging
• 604005a Merge pull request #224 from timvink/fix/date-formatting-and-git-detection
• 6e9e4e4 Cache tag lookups, split up on_page_markdown, tidy packaging
• bf270f7 Fix custom_format literals, creation commit hash and shallow clone detection
• 97ecbac Bump mkdocs-material from 9.7.6 to 9.7.7 (#223)
• a2313a3 Bump version to 1.5.4
• b1be777 Bump pymdown-extensions from 11.0 to 11.0.1 (#221)
• fd6e3b0 Bump gitpython from 3.1.57 to 3.1.58 (#220)
• 0c308d5 Bump gitpython from 3.1.54 to 3.1.57 (#219)
• Additional commits viewable in compare view

[demigodmode]

@dependabot rebase