build(deps): bump the simple group across 1 directory with 9 updates

[dependabot]

Bumps the simple group with 9 updates in the /misc/dbt-materialize directory:

Package	From	To
certifi	2026.1.4	2026.2.25
charset-normalizer	3.4.4	3.4.6
dbt-adapters	1.22.6	1.22.9
dbt-common	1.37.2	1.37.3
dbt-core	1.11.6	1.11.7
dbt-protos	1.0.431	1.0.443
deepdiff	8.6.1	8.6.2
importlib-metadata	8.7.1	8.8.0
pydantic-core	2.41.5	2.42.0

Updates certifi from 2026.1.4 to 2026.2.25

Commits

• 8571a4b 2026.02.25 (#395)
• 6f7de00 Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#390)
• a1de59b Bump actions/checkout from 6.0.1 to 6.0.2 (#391)
• 7f5ade5 Bump actions/setup-python from 6.1.0 to 6.2.0 (#392)
• See full diff in compare view

Updates charset-normalizer from 3.4.4 to 3.4.6

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.6

3.4.6 (2026-03-15)

Changed

• Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...) in favor of feed_info(...).
• Raised upper bound for mypy[c] to 1.20, for our optimized version.
• Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.

Fixed

• Edge case where noise difference between two candidates can be almost insignificant. (#672)
• CLI --normalize writing to wrong path when passing multiple files in. (#702)

Misc

• Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#616)

Version 3.4.5

3.4.5 (2026-03-06)

Changed

• Update setuptools constraint to setuptools>=68,<=82.
• Raised upper bound of mypyc for the optional pre-built extension to v1.19.1

Fixed

• Add explicit link to lib math in our optimized build. (#692)
• Logger level not restored correctly for empty byte sequences. (#701)
• TypeError when passing bytearray to from_bytes. (#703)

Misc

• Applied safe micro-optimizations in both our noise detector and language detector.
• Rewrote the query_yes_no function (inside CLI) to avoid using ambiguous licensed code.
• Added cd.py submodule into mypyc optional compilation to reduce further the performance impact.

[!WARNING]
mypyc changed the usual binary output for the optimized wheel. Beware, especially if using PyInstaller or alike. See jawah/charset_normalizer#714

Changelog

Sourced from charset-normalizer's changelog.

3.4.6 (2026-03-15)

Changed

• Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...) in favor of feed_info(...).
• Raised upper bound for mypy[c] to 1.20, for our optimized version.
• Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.

Fixed

• Edge case where noise difference between two candidates can be almost insignificant. (#672)
• CLI --normalize writing to wrong path when passing multiple files in. (#702)

Misc

• Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#616)

3.4.5 (2026-03-06)

Changed

• Update setuptools constraint to setuptools>=68,<=82.
• Raised upper bound of mypyc for the optional pre-built extension to v1.19.1

Fixed

• Add explicit link to lib math in our optimized build. (#692)
• Logger level not restored correctly for empty byte sequences. (#701)
• TypeError when passing bytearray to from_bytes. (#703)

Misc

• Applied safe micro-optimizations in both our noise detector and language detector.
• Rewrote the query_yes_no function (inside CLI) to avoid using ambiguous licensed code.
• Added cd.py submodule into mypyc optional compilation to reduce further the performance impact.

Commits

• 5478b84 Merge pull request #715 from jawah/release-3.4.6
• 5c0a09e ✔️ add confidence for threading usage, mostly due to lru_cach...
• ef826b2 📝 update changelog
• 5564f1a 📝 update docs accordingly
• 0f2cf7d 📝 update changelog
• 54a1894 🐛 fix --normalize writing to wrong path with multiple files
• 2177e28 📝 update changelog
• b2497a5 🐛 edge case where noise difference between two candidates can be almost i...
• 13a5d0b 🔧 upgrade ci requirements
• b9ffbd4 🔧 enable 3.14t nox mypyc session
• Additional commits viewable in compare view

Updates dbt-adapters from 1.22.6 to 1.22.9

Commits

• See full diff in compare view

Updates dbt-common from 1.37.2 to 1.37.3

Changelog

Sourced from dbt-common's changelog.

dbt-common 1.37.3 - March 02, 2026

Security

• Replace os.path.commonprefix() with os.path.commonpath() to preventpath traversal via sibling directories with matching prefixes. (#1)

Commits

• See full diff in compare view

Updates dbt-core from 1.11.6 to 1.11.7

Release notes

Sourced from dbt-core's releases.

dbt-core v1.11.7

dbt-core 1.11.7 - March 04, 2026

Fixes

• Fix dbt retry for microbatch models to use the original invocation time instead of the current time when recomputing batches (#11423)

Dependencies

• Bump minimum version of dbt-common to 1.37.3 (#12575)

Contributors

• @​aahel (#11423)
• @​emmyoop (#12575)

Changelog

Sourced from dbt-core's changelog.

dbt-core 1.11.7 - March 04, 2026

Fixes

• Fix dbt retry for microbatch models to use the original invocation time instead of the current time when recomputing batches (#11423)

Dependencies

• Bump minimum version of dbt-common to 1.37.3 (#12575)

Contributors

• @​aahel (#11423)
• @​emmyoop (#12575)

Commits

• 8096da6 Bumping version to 1.11.7 and generate changelog
• b5625ce [backport] switch build to hatch command (#12573) (#12587)
• 45b62a1 Merge pull request #12579 from dbt-labs/backport-1.11.latest-12569
• 017a718 reorder build checks (#12569)
• e8928a0 fix build check (#12519)
• 79d22ff fix pre-commit installs (#12366)
• 9a1bfd2 tweak hatch setup (#12357)
• 84e4026 bump minimum version of dbt-common (#12576) (#12577)
• 1f2dcd7 fix retry task (#12549) (#12570)
• db67344 update artifact schemas (#12551)
• Additional commits viewable in compare view

Updates dbt-protos from 1.0.431 to 1.0.443

Commits

• 9e25c91 Auto-generated from proto v1.0.443
• 903f427 Auto-generated from proto v1.0.442
• a05b648 Auto-generated from proto v1.0.441
• 145f6f7 Auto-generated from proto v1.0.440
• ff0e55d Auto-generated from proto v1.0.439
• 7147c11 Auto-generated from proto v1.0.438
• adafc0b Auto-generated from proto v1.0.437
• 8c29892 Auto-generated from proto v1.0.436
• 2d47e32 Auto-generated from proto v1.0.435
• 05dcf2f Auto-generated from proto v1.0.434
• Additional commits viewable in compare view

Updates deepdiff from 8.6.1 to 8.6.2

Commits

• See full diff in compare view

Updates importlib-metadata from 8.7.1 to 8.8.0

Changelog

Sourced from importlib-metadata's changelog.

v8.8.0

Features

• Removed Python 3.9 compatibility.

Commits

• a5c2154 Finalize
• e66e226 Drop support for EOL Python 3.9 (#530)
• 6027933 Add news fragment.
• b89388a Import os_helper directly.
• 2dcb761 Add uniform exclusions for test.support.
• d25e561 Removed jaraco.test dependency, no longer needed.
• 7a1444a Import os_helper directly.
• 996a0ce Fix issue with missing type stubs for test.support.
• 16dcf12 Import import_helper directly
• 1f40799 Merge branch 'main' into rm-3.9
• Additional commits viewable in compare view

Updates pydantic-core from 2.41.5 to 2.42.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Thanks for opening this PR! Here are a few tips to help make the review process smooth for everyone.

PR title guidelines

• Use imperative mood: "Fix X" not "Fixed X" or "Fixes X"
• Be specific: "Fix panic in catalog sync when controller restarts" not "Fix bug" or "Update catalog code"
• Prefix with area if helpful: compute: , storage: , adapter: , sql:

Pre-merge checklist

• The PR title is descriptive and will make sense in the git log.
• This PR has adequate test coverage / QA involvement has been duly considered. (trigger-ci for additional test/nightly runs)
• If this PR includes major user-facing behavior changes, I have pinged the relevant PM to schedule a changelog post.
• This PR has an associated up-to-date design doc, is a design doc (template), or is sufficiently small to not require a design.
• If this PR evolves an existing $T ⇔ Proto$T mapping (possibly in a backwards-incompatible way), then it is tagged with a T-proto label.
• If this PR will require changes to cloud orchestration or tests, there is a companion cloud PR to account for those changes that is tagged with the release-blocker label (example).

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.