Bump the python group with 3 updates

[dependabot]

Bumps the python group with 3 updates: icalendar, osmnx and tqdm.

Updates icalendar from 7.2.0 to 7.2.2

Release notes

Sourced from icalendar's releases.

v7.2.2

To view the changes, please see the Changelog. This release can be installed from PyPI.

v7.2.1

To view the changes, please see the Changelog. This release can be installed from PyPI.

Changelog

Sourced from icalendar's changelog.

7.2.2 (2026-07-20)

Documentation

- Fixed duplicate ``vInt.min`` and ``vInt.max`` descriptions in the API reference that caused the Read the Docs build to fail.
7.2.1 (2026-07-20)
Security fixes

• Fixed GHSA-qjcq-q7h7-r74v <https://github.com/collective/icalendar/security/advisories/GHSA-qjcq-q7h7-r74v>_: a crafted REPEAT on a VALARM could exhaust memory or CPU via :attr:Alarm.triggers <icalendar.cal.alarm.Alarm.triggers> and :class:~icalendar.alarms.Alarms. Expansion is now capped at icalendar.config.MAX_ALARM_REPEAT. Its default is 10000. Set to -1 to disable the cap. :class:~icalendar.prop.integer.vInt now also enforces the :rfc:5545 signed 32-bit integer range on parse. @​SashankBhamidi

Commits

• ad87bcf version 7.2.2
• 4e135e1 Quit talking about yourself, vInt
• 9a2acb4 version 7.2.1
• f83ae7e Hush yer mouth, ruff!
• b7c2224 Merge commit from fork
• 535acd5 Apply Steve's doc tweaks to configure.rst
• 6050a57 Add minimal how-to page for icalendar.config
• c9187d3 Apply Steve's grammar suggestions
• 5347f04 Document vInt.min, vInt.max and ValueError in class docstring
• 3fbc807 Move clamping into repeat_property; rename vInt constants to min/max
• Additional commits viewable in compare view

Updates osmnx from 2.0.6 to 2.1.1

Changelog

Sourced from osmnx's changelog.

2.1.1 (2026-07-21)

• fix projection bug when re-projecting an already projected graph (#1373 #1374)
• fix projection bug after consolidating intersections (#1388)
• fix cloverleaf intersection consolidation bug (#1396)
• fix minor bugs (#1395)
• move DNS config after cache check to prevent unnecessary resolving (#1397)

2.1.0 (2026-02-16)

• add Python 3.14 support (#1336)
• drop Python 3.9 and 3.10 support (#1322 #1336)
• add validation functions to verify that a graph or GeoDataFrame satisfies OSMnx expectations (#1317)
• improve type hinting (#1366)

2.0.7 (2025-11-25)

• fix TypeError in _getaddrinfo wrapper when host passed both positionally and as keyword (#1340)
• allow interpolate_points function to run on MultiLineString input (#1341)

Commits

• 2fc39cb Merge pull request #1399 from gboeing/release
• 1f5e08c version bump
• 061c1fa update pre-commit
• 20b155a fix comment
• a59ad0d Merge pull request #1396 from gboeing/consolidate
• 4e03729 code cleanup
• 25ff0ae assign new test to xdist group
• ca4f392 Merge branch 'main' into consolidate
• cb47c0d Update CHANGELOG.md
• 6b5a03e Merge pull request #1398 from gboeing/tests
• Additional commits viewable in compare view

Updates tqdm from 4.68.4 to 4.69.0

Release notes

Sourced from tqdm's releases.

tqdm v4.69.0 stable

• add tqdm.asyncio.gather(..., return_exceptions=False) (#1776, #1671 <- #1286)
• misc minor framework updates
  • bump workflow actions & pre-commit hooks

Commits

• 6ab24dc bump version, workflow actions, pre-commit hooks
• 99615b9 asyncio: add gather(return_exceptions=False) (#1776)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions