Bump the python-requirements group across 1 directory with 4 updates

Bumps the python-requirements group with 4 updates in the /requirements directory: [mypy](https://github.com/python/mypy), [pallets-sphinx-themes](https://github.com/pallets/pallets-sphinx-themes), [pyright](https://github.com/RobertCraigie/pyright-python) and [build](https://github.com/pypa/build).


Updates `mypy` from 1.11.2 to 1.13.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v1.11.2...v1.13.0)

Updates `pallets-sphinx-themes` from 2.1.3 to 2.3.0
- [Release notes](https://github.com/pallets/pallets-sphinx-themes/releases)
- [Changelog](https://github.com/pallets/pallets-sphinx-themes/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/pallets-sphinx-themes/compare/2.1.3...2.3.0)

Updates `pyright` from 1.1.382.post1 to 1.1.389
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](https://github.com/RobertCraigie/pyright-python/compare/v1.1.382.post1...v1.1.389)

Updates `build` from 1.2.2 to 1.2.2.post1
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/build/compare/1.2.2...1.2.2.post1)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: pallets-sphinx-themes
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: pyright
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: build
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/publish.yaml

@@ -6,6 +6,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    outputs:
+      hash: ${{ steps.hash.outputs.hash }}
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
@@ -17,11 +19,27 @@ jobs:
       # Use the commit date instead of the current date during the build.
       - run: echo "SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV
       - run: python -m build
+      # Generate hashes used for provenance.
+      - name: generate hash
+        id: hash
+        run: cd dist && echo "hash=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
       - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           path: ./dist
-  create-release:
+  provenance:
     needs: [build]
+    permissions:
+      actions: read
+      id-token: write
+      contents: write
+    # Can't pin with hash due to how this workflow works.
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
+    with:
+      base64-subjects: ${{ needs.build.outputs.hash }}
+  create-release:
+    # Upload the sdist, wheels, and provenance to a GitHub release. They remain
+    # available as build artifacts for a while as well.
+    needs: [provenance]
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -30,11 +48,12 @@ jobs:
       - name: create release
         run: >
           gh release create --draft --repo ${{ github.repository }}
-          ${{ github.ref_name }} artifact/*
+          ${{ github.ref_name }}
+          *.intoto.jsonl/* artifact/*
         env:
           GH_TOKEN: ${{ github.token }}
   publish-pypi:
-    needs: [build]
+    needs: [provenance]
     # Wait for approval before attempting to upload to PyPI. This allows reviewing the
     # files in the draft release.
     environment:

requirements/build.txt

@@ -4,7 +4,7 @@
 #
 #    pip-compile build.in
 #
-build==1.2.2
+build==1.2.2.post1
     # via -r build.in
 importlib-metadata==7.1.0
     # via build

requirements/dev.txt

@@ -108,7 +108,7 @@ markupsafe==2.1.5
     #   -r typing.txt
     #   jinja2
     #   werkzeug
-mypy==1.11.2
+mypy==1.13.0
     # via -r typing.txt
 mypy-extensions==1.0.0
     # via
@@ -129,7 +129,7 @@ packaging==24.0
     #   pytest
     #   sphinx
     #   tox
-pallets-sphinx-themes==2.1.3
+pallets-sphinx-themes==2.3.0
     # via -r docs.txt
 platformdirs==4.2.1
     # via
@@ -150,7 +150,7 @@ pygments==2.18.0
     #   sphinx
 pyproject-api==1.6.1
     # via tox
-pyright==1.1.382.post1
+pyright==1.1.389
     # via -r typing.txt
 pytest==8.3.3
     # via
@@ -174,7 +174,12 @@ sphinx==7.1.2
     # via
     #   -r docs.txt
     #   pallets-sphinx-themes
+    #   sphinx-notfound-page
     #   sphinxcontrib-log-cabinet
+sphinx-notfound-page==1.0.4
+    # via
+    #   -r docs.txt
+    #   pallets-sphinx-themes
 sphinxcontrib-applehelp==1.0.4
     # via
     #   -r docs.txt

requirements/docs.txt

@@ -28,7 +28,7 @@ packaging==24.0
     # via
     #   pallets-sphinx-themes
     #   sphinx
-pallets-sphinx-themes==2.1.3
+pallets-sphinx-themes==2.3.0
     # via -r docs.in
 pygments==2.18.0
     # via sphinx
@@ -42,7 +42,10 @@ sphinx==7.1.2
     # via
     #   -r docs.in
     #   pallets-sphinx-themes
+    #   sphinx-notfound-page
     #   sphinxcontrib-log-cabinet
+sphinx-notfound-page==1.0.4
+    # via pallets-sphinx-themes
 sphinxcontrib-applehelp==1.0.4
     # via sphinx
 sphinxcontrib-devhelp==1.0.2

requirements/typing.txt

@@ -28,7 +28,7 @@ markupsafe==2.1.5
     # via
     #   jinja2
     #   werkzeug
-mypy==1.11.2
+mypy==1.13.0
     # via -r typing.in
 mypy-extensions==1.0.0
     # via mypy
@@ -38,7 +38,7 @@ packaging==24.0
     # via pytest
 pluggy==1.5.0
     # via pytest
-pyright==1.1.382.post1
+pyright==1.1.389
     # via -r typing.in
 pytest==8.3.3
     # via -r typing.in

src/flask_debugtoolbar/panels/profiler.py

@@ -36,8 +36,6 @@ class ProfilerDebugPanel(DebugPanel):
     ) -> None:
         super().__init__(jinja_env, context=context)
 
-        self.dump_filename = None
-
         if current_app.config.get("DEBUG_TB_PROFILER_ENABLED"):
             self.is_active = True
             self.dump_filename = current_app.config.get(