chore(deps-dev): update python-dotenv requirement from <1.0.0,>=0.19.0 to >=0.19.0,<2.0.0

[dependabot]

Updates the requirements on python-dotenv to permit the latest version.

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

[1.2.2] - 2026-03-01

Added

• Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

• The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
• Improved documentation clarity regarding override behavior and the reference page.
• Updated PyPy support to version 3.11.
• Documentation for FIFO file support.
• Dropped Support for Python 3.9.

Fixed

• Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
• Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

• dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

• In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

• dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

• Move more config to pyproject.toml, removed setup.cfg
• Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

... (truncated)

Commits

• 49515af Bump version: 1.2.2 → 1.2.3
• 8ac846f chore: add release runbook (RELEASING.md) and make release target
• bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
• f7b18d9 fix: round-trip backslashes through set_key (#680)
• 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
• f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
• 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
• 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
• 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
• 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Code Hygiene

The following items are defined but not yet in active use. Routine cleanup — no impact on functionality.

• laiser/llm_methods.py:87 — unused variable 'args' (100% confidence)
• laiser/llm_models/llama_cpp_handler.py:31 — unused variable 'chat_format' (100% confidence)
• laiser/llm_models/llama_cpp_handler.py:72 — unused variable 'exc' (100% confidence)
• laiser/llm_models/llama_cpp_handler.py:72 — unused variable 'exc_type' (100% confidence)
• laiser/llm_models/llama_cpp_handler.py:72 — unused variable 'tb' (100% confidence)
• laiser/llm_models/llm_router.py:70 — unused variable 'args' (100% confidence)
• laiser/llm_models/llm_router.py:85 — unused variable 'args' (100% confidence)
• laiser/services.py:130 — unused variable 'raw_description' (100% confidence)

[github-actions]

Complexity Analysis

Average: C — Moderate (14.678571428571429)

Hotspots tracked below. These are functional, well-exercised components — listed for visibility as the codebase scales.

Grade	Name	Type	Score
F	FAISSIndexManager.initialize_index	Method	51
E	SkillExtractionService.extract_and_align_core	Method	36
E	FAISSIndexManager.search_similar_skills	Method	32
D	ResponseParser._parse_skills_from_response	Method	24
D	FAISSIndexManager	Class	22
C	ResponseParser.parse_knowledge_task_response	Method	20
C	_BaseTaxonomyFAISSIndexManager.search_similar	Method	18
C	ResponseParser	Class	17
C	ResponseParser.parse_ksa_extraction_response	Method	16
C	ResponseParser.parse_skill_extraction_response	Method	15
C	openai_generate	Function	14
C	LLMRouter._initialize_components	Method	14
C	parse_output_vllm	Function	13
C	AlignmentService.align	Method	11
B	SkillExtractionService._deduplicate	Method	10
B	load_model_from_vllm	Function	10
B	_BaseTaxonomyFAISSIndexManager.initialize_index	Method	9
B	anthropic_generate	Function	9
B	ResponseParser.parse_ksa_details_response	Method	8
B	SkillExtractionService	Class	8
B	_BaseTaxonomyFAISSIndexManager	Class	8
B	GeminiAPI.generate_with_config	Method	8
B	SkillExtractorRefactored._expand_allowed_sources	Method	7
B	get_completion_vllm	Function	7
B	AlignmentService	Class	6
B	SkillExtractionService._normalize_mixed_concept_rows	Method	6
B	fetch_model_output	Function	6
B	LlamaCppBackend.__init__	Method	6

[github-actions]

📦 Preview package published!

Install and test this PR:

pip install --index-url https://test.pypi.org/simple/ laiser-preview==0.5.dev20260831125517