From f6679a3961e85650f4dbe3e3c6957ea750a9d16a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 22 Sep 2026 10:48:00 +0000
Subject: [PATCH] Bump multidict from 6.8.0 to 6.9.0 (#13782)

Bumps [multidict](https://github.com/aio-libs/multidict) from 6.8.0 to
6.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/multidict/releases">multidict's
releases</a>.</em></p>
<blockquote>
<h2>6.9.0</h2>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Protected <code>repr()</code> of <code>MultiDict</code>,
<code>MultiDictProxy</code>, and their views
in the C extension with a critical section, avoiding data races on the
free-threaded build of CPython -- by :user:<code>asvetlov</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/multidict/issues/1431">#1431</a>.</p>
</li>
<li>
<p>Guarded <code>repr()</code> of <code>MultiDictProxy</code> in the C
extension and of
<code>KeysView</code> in both the C extension and the pure-Python
implementation against infinite recursion on self-referential
containers, matching the existing guard on <code>MultiDict</code>,
<code>ItemsView</code>, and <code>ValuesView</code> -- by
:user:<code>asvetlov</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/multidict/issues/1431">#1431</a>.</p>
</li>
<li>
<p>Protected <code>MultiDict.update()</code>, <code>.extend()</code>,
<code>.merge()</code>, <code>.clear()</code>,
<code>.copy()</code>, and the
<code>MultiDict</code>/<code>CIMultiDict</code> constructors in the C
extension with a critical section, using the two-object form when a
second multidict, multidict proxy, or plain <code>dict</code> instance
is
involved, avoiding data races and a segmentation fault on the
free-threaded build of CPython. <code>.clear()</code> now also publishes
the
empty table before releasing any entry's references, so a concurrent
caller can never observe a partially-cleared multidict even if releasing
a value runs arbitrary Python code that suspends the held critical
section -- by :user:<code>asvetlov</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/multidict/issues/1433">#1433</a>.</p>
</li>
<li>
<p>Protected <code>MultiDict.add()</code>,
<code>__setitem__</code>/<code>__delitem__</code>,
<code>get()</code>/<code>getone()</code>/<code>__getitem__</code>,
<code>__contains__</code>, <code>getall()</code>,
<code>setdefault()</code>,
<code>pop()</code>/<code>popone()</code>/<code>popall()</code>/<code>popitem()</code>,
<code>__eq__</code>, iteration, and the
<code>&amp;</code>/<code>|</code>/<code>-</code>/<code>^</code>/<code>in</code>/
<code>isdisjoint()</code> operations on <code>.keys()</code> and
<code>.items()</code> views in the
C extension with a critical section, avoiding data races and
use-after-free crashes on the free-threaded build of CPython
-- by :user:<code>asvetlov</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/multidict/issues/1438">#1438</a>.</p>
</li>
<li>
<p>Fixed a data race on the free-threaded build where
<code>MultiDictObject.used</code>
was written non-atomically while <code>len()</code> read it with a
relaxed atomic
load -- by :user:<code>asvetlov</code>.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/multidict/blob/master/CHANGES.rst">multidict's
changelog</a>.</em></p>
<blockquote>
<h1>6.9.0</h1>
<p><em>(2026-09-18)</em></p>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Protected <code>repr()</code> of <code>MultiDict</code>,
<code>MultiDictProxy</code>, and their views
in the C extension with a critical section, avoiding data races on the
free-threaded build of CPython -- by :user:<code>asvetlov</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1431</code>.</p>
</li>
<li>
<p>Guarded <code>repr()</code> of <code>MultiDictProxy</code> in the C
extension and of
<code>KeysView</code> in both the C extension and the pure-Python
implementation against infinite recursion on self-referential
containers, matching the existing guard on <code>MultiDict</code>,
<code>ItemsView</code>, and <code>ValuesView</code> -- by
:user:<code>asvetlov</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1431</code>.</p>
</li>
<li>
<p>Protected <code>MultiDict.update()</code>, <code>.extend()</code>,
<code>.merge()</code>, <code>.clear()</code>,
<code>.copy()</code>, and the
<code>MultiDict</code>/<code>CIMultiDict</code> constructors in the C
extension with a critical section, using the two-object form when a
second multidict, multidict proxy, or plain <code>dict</code> instance
is
involved, avoiding data races and a segmentation fault on the
free-threaded build of CPython. <code>.clear()</code> now also publishes
the
empty table before releasing any entry's references, so a concurrent
caller can never observe a partially-cleared multidict even if releasing
a value runs arbitrary Python code that suspends the held critical
section -- by :user:<code>asvetlov</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1433</code>.</p>
</li>
<li>
<p>Protected <code>MultiDict.add()</code>,
<code>__setitem__</code>/<code>__delitem__</code>,
<code>get()</code>/<code>getone()</code>/<code>__getitem__</code>,
<code>__contains__</code>, <code>getall()</code>,
<code>setdefault()</code>,
<code>pop()</code>/<code>popone()</code>/<code>popall()</code>/<code>popitem()</code>,
<code>__eq__</code>, iteration, and the
<code>&amp;</code>/<code>|</code>/<code>-</code>/<code>^</code>/<code>in</code>/
<code>isdisjoint()</code> operations on <code>.keys()</code> and
<code>.items()</code> views in the
C extension with a critical section, avoiding data races and
use-after-free crashes on the free-threaded build of CPython
-- by :user:<code>asvetlov</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1438</code>.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aio-libs/multidict/commit/087fbed9c99cbbca05b297a698f970f14410f1e4"><code>087fbed</code></a>
Update CHANGE for the release fix PR (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1476">#1476</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/c715fac0089a8e88b99ad3ef5d9a0dcfb54607c9"><code>c715fac</code></a>
Stop installing hypothesis where its tests never run (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1475">#1475</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/e1ddc397129408b218d65358456160fdcd1879fc"><code>e1ddc39</code></a>
Release 6.9.0 (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1474">#1474</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/a9aa23991c9f59e9fa5f7a577a48830ed918aba4"><code>a9aa239</code></a>
Speed up adding many values for the same key (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1466">#1466</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/684b0859d2bc97f4a44ae3b6a34a3176fea3c9d5"><code>684b085</code></a>
Disable pytest output capturing in the ASan/TSan CI jobs (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1472">#1472</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/255ad036e401f6316b422b3c688aea4f931e529b"><code>255ad03</code></a>
Add bencmarks for <strong>setitem</strong> (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1471">#1471</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/72eadccbf9a26ffb2672548fd60ab024c66ec80f"><code>72eadcc</code></a>
Skip abstractmethods from coverage leaks report (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1470">#1470</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/445f9f9a492a09eebaa40997080ba09d6ea82263"><code>445f9f9</code></a>
Drop dead code (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1469">#1469</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/f4218f859a3287651b505717ce05552df2902e94"><code>f4218f8</code></a>
Build(deps): Bump actions/upload-artifact from 4 to 7 (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1468">#1468</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/838ebf7ba71a79c33407136c4a2be8bf25c17d42"><code>838ebf7</code></a>
Bump to 6.9.0.dev0 (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1467">#1467</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aio-libs/multidict/compare/v6.8.0...v6.9.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=multidict&package-manager=pip&previous-version=6.8.0&new-version=6.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 requirements/base-ft.txt          | 2 +-
 requirements/base.txt             | 2 +-
 requirements/constraints.txt      | 2 +-
 requirements/cython.txt           | 2 +-
 requirements/dev.txt              | 2 +-
 requirements/lint.txt             | 2 +-
 requirements/multidict.txt        | 2 +-
 requirements/runtime-deps.txt     | 2 +-
 requirements/test-common-base.txt | 2 +-
 requirements/test-common.txt      | 2 +-
 requirements/test-ft.txt          | 2 +-
 requirements/test-mobile.txt      | 2 +-
 requirements/test.txt             | 2 +-
 13 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/requirements/base-ft.txt b/requirements/base-ft.txt
index f0a78e30435..276c5e5f940 100644
--- a/requirements/base-ft.txt
+++ b/requirements/base-ft.txt
@@ -30,7 +30,7 @@ gunicorn==26.2.0
     # via -r requirements/base-ft.in
 idna==3.20
     # via yarl
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   -r requirements/runtime-deps.in
     #   yarl
diff --git a/requirements/base.txt b/requirements/base.txt
index dda25e2b3fd..a939804c3ae 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -30,7 +30,7 @@ gunicorn==26.2.0
     # via -r requirements/base.in
 idna==3.20
     # via yarl
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   -r requirements/runtime-deps.in
     #   yarl
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index b67bdde9f3d..cdf6b219ea3 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -138,7 +138,7 @@ mdit-py-plugins==0.6.1
     # via myst-parser
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   -r requirements/multidict.in
     #   -r requirements/runtime-deps.in
diff --git a/requirements/cython.txt b/requirements/cython.txt
index ae38b7d3bd6..feccea82a59 100644
--- a/requirements/cython.txt
+++ b/requirements/cython.txt
@@ -6,7 +6,7 @@
 #
 cython==3.3.0
     # via -r requirements/cython.in
-multidict==6.8.0
+multidict==6.9.0
     # via -r requirements/multidict.in
 typing-extensions==4.16.0
     # via multidict
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 79920b77887..9b7f8d1de65 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -136,7 +136,7 @@ mdit-py-plugins==0.6.1
     # via myst-parser
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   -r requirements/runtime-deps.in
     #   aiohttp
diff --git a/requirements/lint.txt b/requirements/lint.txt
index 38b6241f5fa..053e7f03400 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -72,7 +72,7 @@ markdown-it-py==4.2.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   aiohttp
     #   yarl
diff --git a/requirements/multidict.txt b/requirements/multidict.txt
index 221f049abf2..56dd76f5f3e 100644
--- a/requirements/multidict.txt
+++ b/requirements/multidict.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile --allow-unsafe --output-file=requirements/multidict.txt --resolver=backtracking --strip-extras requirements/multidict.in
 #
-multidict==6.8.0
+multidict==6.9.0
     # via -r requirements/multidict.in
 typing-extensions==4.16.0
     # via multidict
diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt
index 4b5cad0acd0..719c81111f8 100644
--- a/requirements/runtime-deps.txt
+++ b/requirements/runtime-deps.txt
@@ -28,7 +28,7 @@ frozenlist==1.8.0
     #   aiosignal
 idna==3.20
     # via yarl
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   -r requirements/runtime-deps.in
     #   yarl
diff --git a/requirements/test-common-base.txt b/requirements/test-common-base.txt
index f6154ce5cba..f0c3fc8704f 100644
--- a/requirements/test-common-base.txt
+++ b/requirements/test-common-base.txt
@@ -28,7 +28,7 @@ idna==3.20
     # via yarl
 iniconfig==2.3.0
     # via pytest
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   aiohttp
     #   yarl
diff --git a/requirements/test-common.txt b/requirements/test-common.txt
index bf97f5858e0..a6744eb7da1 100644
--- a/requirements/test-common.txt
+++ b/requirements/test-common.txt
@@ -54,7 +54,7 @@ markdown-it-py==4.2.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   aiohttp
     #   yarl
diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt
index 43cb1256be2..3a975ba9efb 100644
--- a/requirements/test-ft.txt
+++ b/requirements/test-ft.txt
@@ -75,7 +75,7 @@ markdown-it-py==4.2.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   -r requirements/runtime-deps.in
     #   aiohttp
diff --git a/requirements/test-mobile.txt b/requirements/test-mobile.txt
index 94198dd2bd6..5ae9b21b677 100644
--- a/requirements/test-mobile.txt
+++ b/requirements/test-mobile.txt
@@ -55,7 +55,7 @@ idna==3.20
     # via yarl
 iniconfig==2.3.0
     # via pytest
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   -r requirements/runtime-deps.in
     #   aiohttp
diff --git a/requirements/test.txt b/requirements/test.txt
index 6e374735161..6bdc017f7f9 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -75,7 +75,7 @@ markdown-it-py==4.2.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.8.0
+multidict==6.9.0
     # via
     #   -r requirements/runtime-deps.in
     #   aiohttp