build(deps): bump yarl from 1.17.1 to 1.23.0

[dependabot]

Bumps yarl from 1.17.1 to 1.23.0.

Release notes

Sourced from yarl's releases.

1.23.0

Features

• Added support for pydantic, the :class:~yarl.URL could be used as a field type in pydantic models seamlessly.

  Related issues and pull requests on GitHub: #1607.

Packaging updates and notes for downstreams

• The CI has been set up to notify Codecov about upload completion -- by :user:webknjaz.

  With this, Codecov no longer needs to guess whether it received all the intended coverage reports or not.

  Related issues and pull requests on GitHub: #1577.

• The in-tree build backend allows the end-users appending CFLAGS and LDFLAGS by setting respective environment variables externally.

  It additionally sets up default compiler flags to perform building with maximum optimization in release mode. This makes the resulting artifacts shipped to PyPI smaller.

  When line tracing is requested, the compiler and linker flags are configured to include as much information as possible for debugging and coverage tracking. The development builds are therefore smaller.

  -- by :user:webknjaz

  Related issues and pull requests on GitHub: #1586.

• The :pep:517 build backend now supports a new config setting for controlling whether to build the project in-tree or in a temporary directory. It only affects wheels and is set up to build in a temporary directory by default. It does not affect editable wheel builds — they will keep being built in-tree regardless.

  -- by :user:webknjaz

... (truncated)

Changelog

Sourced from yarl's changelog.

1.23.0

(2025-12-16)

Features

• Added support for pydantic, the :class:~yarl.URL could be used as a field type in pydantic models seamlessly.

  Related issues and pull requests on GitHub: :issue:1607.

Packaging updates and notes for downstreams

• The CI has been set up to notify Codecov about upload completion -- by :user:webknjaz.

  With this, Codecov no longer needs to guess whether it received all the intended coverage reports or not.

  Related issues and pull requests on GitHub: :issue:1577.

• The in-tree build backend allows the end-users appending CFLAGS and LDFLAGS by setting respective environment variables externally.

  It additionally sets up default compiler flags to perform building with maximum optimization in release mode. This makes the resulting artifacts shipped to PyPI smaller.

  When line tracing is requested, the compiler and linker flags are configured to include as much information as possible for debugging and coverage tracking. The development builds are therefore smaller.

  -- by :user:webknjaz

  Related issues and pull requests on GitHub: :issue:1586.

• The :pep:517 build backend now supports a new config setting for controlling whether to build the project in-tree or in a temporary directory. It only affects wheels and is set up to build in a temporary directory by default. It does

... (truncated)

Commits

• 3d05d4c Fix 1.23.0 release to match CHANGES.rst format (#1636)
• 3f4977a Bump actions/upload-artifact from 6 to 7 (#1634)
• 7829b01 ci: add riscv64 manylinux wheels (#1625)
• e0592a1 Bump pre-commit from 4.5.0 to 4.5.1 (#1618)
• 26ba78c Fix version number (#1616)
• 4811166 Release 1.23.0 (#1615)
• f307123 Add pydantic support (#1607)
• 383b159 Bump actions/upload-artifact from 5 to 6 (#1612)
• 3476600 Bump pytest from 8.4.2 to 9.0.2 (#1606)
• 27cefc5 Bump actions/checkout from 5 to 6 (#1599)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #653.