[dependabot]

Bumps platformdirs from 4.13.5 to 4.13.6.

Release notes

Sourced from platformdirs's releases.

4.13.6

Packaging

• Releases now run on the shared tox-dev/github-workflows pipeline, with a locked release toolchain and generated GitHub Release notes (#650) by @​gaborbernat.

🐍 PyPI release

📜 Full Changelog

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

.. _release-4-14-0:

---

4.14.0 (2026-10-28)

---

.. _release-4-14-0-added:

Added

• Accept a keyword-only ensure_exists in the module-level media directory functions, such as :func:~platformdirs.user_documents_path, to create a directory set through XDG_*_DIR or user-dirs.dirs (:pr:656) by :user:darrenhuai and :user:gaborbernat.

.. _release-4-14-0-fixed:

Fixed

• Return the media and fonts directories under root's home for root with use_site_for_root, ignoring the invoking user's XDG_*_DIR, user-dirs.dirs and XDG_DATA_HOME, and create no inherited media directory under ensure_exists (:pr:661) by :user:gaborbernat.
• Raise ValueError from site_data_dir and site_config_dir under multipath=True when appname or version contains os.pathsep, rather than returning a string that splits into a directory outside the site base (:pr:662) by :user:gaborbernat.
• Parse an unquoted user-dirs.dirs value with a long run of blanks in linear time, rather than in time quadratic in the run's length on every Unix media directory lookup (:pr:663) by :user:gaborbernat.
• Treat a relative HOME as unset on Unix, macOS and iOS, taking the home from the password database or raising RuntimeError, rather than resolving user directories against the working directory (:pr:664) by :user:gaborbernat.
• Refuse a symlink as XDG_RUNTIME_DIR in :func:~platformdirs.user_runtime_dir when the value ends with / or /., which made the check follow the link (:pr:665) by :user:gaborbernat.
• Redirect user_*_dir calls with use_site_for_root=True when the effective uid is 0, so a setuid-root process gets the site directories, and name and check the runtime directory by the effective uid (:pr:666) by :user:gaborbernat.
• Apply the XDG_RUNTIME_DIR check of the Unix :func:~platformdirs.user_runtime_dir to the macOS one, so it no longer uses a directory that is a symlink, owned by another user or not mode 0700 (:pr:667) by :user:gaborbernat.
• Reject an XDG_RUNTIME_DIR below a parent that another user can replace, such as their own entry in /tmp, instead of creating the runtime directory through it (:pr:668) by :user:gaborbernat.
• Stop accepting a Unix runtime directory that another user creates between the owner check and its use:

... (truncated)

Commits

• bfa19da release 4.13.6
• b5df219 📦 build(release): note the shared release pipeline (#650)
• 8d8cc48 👷 ci(release): move releases to shared workflows (#637)
• 6fe448c [pre-commit.ci] pre-commit autoupdate (#633)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.11%. Comparing base (2616429) to head (73563f3).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #14216   +/-   ##
=======================================
  Coverage   99.11%   99.11%           
=======================================
  Files         135      135           
  Lines       53338    53338           
  Branches     2717     2717           
=======================================
  Hits        52865    52865           
  Misses        359      359           
  Partials      114      114           

Flag	Coverage Δ
Autobahn	21.69% <ø> (ø)
CI-GHA	99.04% <ø> (ø)
OS-Linux	98.68% <ø> (ø)
OS-Windows	97.48% <ø> (ø)
OS-macOS	98.34% <ø> (-0.01%)	⬇️
Py-3.11	98.30% <ø> (+<0.01%)	⬆️
Py-3.12	98.38% <ø> (ø)
Py-3.13	98.36% <ø> (-0.02%)	⬇️
Py-3.14	98.39% <ø> (+<0.01%)	⬆️
Py-3.15	98.39% <ø> (+<0.01%)	⬆️
Py-3.15t	98.24% <ø> (-0.01%)	⬇️
Py-pypy-3.12	96.94% <ø> (-0.01%)	⬇️
VM-macos-latest	98.34% <ø> (-0.01%)	⬇️
VM-ubuntu-latest	98.68% <ø> (ø)
VM-windows-latest	97.48% <ø> (ø)
cython-coverage	83.80% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

[codspeed]

Merging this PR will degrade performance by 17.57%

3 warnings

⚠️ 50 benchmarks are dominated by system calls

System calls cannot be simulated consistently and are left out of the measure. The reported value understates the real cost. Switch to the Walltime instrument to measure them.

Learn more about system calls

See affected benchmarks

⚠️ 1 benchmark with a significant change ran on different hardware

Its base and head results were measured on machines with a different CPU, core count or memory, so the change might not come from the code. Run base and head on the same runner type.

Learn more about Macro Runners

See affected benchmarks

⚠️ 1 benchmark with a significant change ran in a different software environment

Its base and head results were measured with a different OS or toolchain, such as compiler, runtime or library versions, so the change might come from this difference rather than from the code. Open the benchmark to see what changed.

See affected benchmarks

❌ 1 regressed benchmark
✅ 101 untouched benchmarks
⏩ 83 skipped benchmarks¹

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
❌	test_client_send_large_websocket_compressed_messages[isal.isal_zlib]	61.7 ms	74.8 ms	-17.57%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing dependabot/pip/platformdirs-4.13.6 (73563f3) with master (2616429)}

Footnotes

1. 83 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[dependabot]

Superseded by #14251.