chore(deps): bump frozenlist from 1.7.0 to 1.8.0

[dependabot]

Bumps frozenlist from 1.7.0 to 1.8.0.

Release notes

Sourced from frozenlist's releases.

1.8.0

Contributor-facing changes

• The :file:reusable-cibuildwheel.yml workflow has been refactored to be more generic and :file:ci-cd.yml now holds all the configuration toggles -- by :user:webknjaz.

  Related issues and pull requests on GitHub: #668.

• When building wheels, the source distribution is now passed directly to the cibuildwheel invocation -- by :user:webknjaz.

  Related issues and pull requests on GitHub: #669.

• Builds and tests have been added to ci-cd.yml for arm64 Windows wheels -- by :user:finnagin.

  Related issues and pull requests on GitHub: #677.

• Started building wheels for CPython 3.14 -- by :user:kumaraditya303.

  Related issues and pull requests on GitHub: #681, #682.

• Removed --config-settings=pure-python=false from :file:requirements/dev.txt. Developers on CPython still get accelerated builds by default. To explicitly build a pure Python wheel, use pip install -e . --config-settings=pure-python=true -- by :user:bdraco.

  Related issues and pull requests on GitHub: #687.

---

Changelog

Sourced from frozenlist's changelog.

v1.8.0

(2025-10-05)

Contributor-facing changes

• The :file:reusable-cibuildwheel.yml workflow has been refactored to be more generic and :file:ci-cd.yml now holds all the configuration toggles -- by :user:webknjaz.

  Related issues and pull requests on GitHub: :issue:668.

• When building wheels, the source distribution is now passed directly to the cibuildwheel invocation -- by :user:webknjaz.

  Related issues and pull requests on GitHub: :issue:669.

• Builds and tests have been added to ci-cd.yml for arm64 Windows wheels -- by :user:finnagin.

  Related issues and pull requests on GitHub: :issue:677.

• Started building wheels for CPython 3.14 -- by :user:kumaraditya303.

  Related issues and pull requests on GitHub: :issue:681, :issue:682.

• Removed --config-settings=pure-python=false from :file:requirements/dev.txt. Developers on CPython still get accelerated builds by default. To explicitly build a pure Python wheel, use pip install -e . --config-settings=pure-python=true -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:687.

---

Commits

• 48324af Release 1.8.0 (#698)
• 7e5eab0 Add windows arm64 support (#678)
• a2c22c2 Build(deps): Bump sphinx from 7.2.6 to 7.4.7 (#691)
• 752b80a Build(deps): Bump types-setuptools from 75.8.0.20250210 to 80.9.0.20250822 (#...
• 6b9d557 Build(deps): Bump cython from 3.1.1 to 3.1.4 (#690)
• 7c4ad20 Build(deps-dev): Bump tox from 4.11.4 to 4.30.3 (#693)
• 65f35d6 Build(deps): Bump pre-commit from 3.5.0 to 4.3.0 (#697)
• 1ad0263 Build(deps): Bump pytest from 7.4.3 to 8.4.2 (#694)
• 884ee49 Build(deps): Bump aiohttp-theme from 0.1.6 to 0.1.7 (#689)
• b2d6180 Fix dependabot updates (#687)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[kishore7snehil]

@claude

[github-actions]

Claude finished @kishore7snehil's task —— View job

---

Review Progress

• Gather PR context and read diff
• Read project architecture documentation
• Perform code quality review
• Perform security review
• Perform performance review
• Provide final assessment

Analysis

This PR updates frozenlist from 1.7.0 to 1.8.0. The package is a transitive dependency of aiohttp (which is used for async HTTP operations in this SDK).

Change Summary:

• Single line change in requirements.txt: frozenlist==1.7.0 → frozenlist==1.8.0
• Release contains only contributor-facing changes (CI/CD improvements, wheel building for CPython 3.14, arm64 Windows support)
• No API changes or functional modifications

Review Findings:

• ✅ Security: No security vulnerabilities reported in release notes
• ✅ Compatibility: Release notes indicate no breaking changes; only build/CI improvements
• ✅ Code Quality: N/A (no code changes)
• ✅ Performance: No performance-related changes mentioned
• ⏳ CI Status: Tests are currently running (Build and Test, CodeQL, Snyk)

Overall Assessment

✅ This dependency update can be merged once CI checks pass. The frozenlist 1.8.0 release contains only build system and CI/CD improvements with no API changes, breaking changes, or security concerns.

---

Job Run: Link
Branch: dependabot/pip/frozenlist-1.8.0