[dependabot]

Updates the requirements on tldextract to permit the latest version.

Release notes

Sourced from tldextract's releases.

5.4.0

• Features
  • Add TLDEXTRACT_PUBLIC_SUFFIX_LIST_URLS environment variable to set the default suffix list URLs (#374)
  • Add the clearer TLDEXTRACT_DEFAULT_FETCH_TIMEOUT environment variable, while retaining support for TLDEXTRACT_CACHE_TIMEOUT (#375)
• Bugfixes
  • Fix hostname extraction from already-parsed URLs with credentials, ports, or IPv6 addresses (#379)
  • Preserve private suffix metadata when a longer wildcard suffix does not match (#383)
• Docs
  • Document added and deprecated names (#378)
• Misc.
  • Require CI gate before merging (#380)

New Contributors

• @​oiahoon made their first contribution in john-kurkowski/tldextract#375
• @​jakezwang made their first contribution in john-kurkowski/tldextract#379
• @​ChrisJr404 made their first contribution in john-kurkowski/tldextract#374
• @​jesko2004 made their first contribution in john-kurkowski/tldextract#383

Full Changelog: john-kurkowski/tldextract@5.3.2...5.4.0

Changelog

Sourced from tldextract's changelog.

5.4.0 (2026-10-03)

• Features
  • Add TLDEXTRACT_PUBLIC_SUFFIX_LIST_URLS environment variable to set the default suffix list URLs (#374)
  • Add the clearer TLDEXTRACT_DEFAULT_FETCH_TIMEOUT environment variable, while retaining support for TLDEXTRACT_CACHE_TIMEOUT (#375)
• Bugfixes
  • Fix hostname extraction from already-parsed URLs with credentials, ports, or IPv6 addresses (#379)
  • Preserve private suffix metadata when a longer wildcard suffix does not match (#383)
• Docs
  • Document added and deprecated names (#378)
• Misc.
  • Require CI gate before merging (#380)

5.3.2 (2026-08-08)

• Bugfixes
  • Fix reverse_domain_name stray dots when suffix or domain empty (#368)
• Docs
  • Fix README: extract_urllib is on the instance, not the module (#362)
  • Fix docstring: default cache_dir description (#367)
  • Document hostname representation limits
  • Document implicit PSL wildcard behavior
• Misc
  • Add Markdown doctest coverage (#363)
  • Remove obsolete pytest-gitignore
  • Adopt uv dependency groups for contributors
  • Install only test dependencies in test environments

5.3.1 (2025-12-28)

• Bugfixes
  • Drop support for EOL Python 3.9 (#359)
  • Support Python 3.14 + PyPy 3.11 (#358)
  • Speed up IP address search space with isdecimal() instead of isdigit() (#352)
• Docs
  • Reorganize, dedupe, and shorten README (#349)

5.3.0 (2025-04-21)

• Features
  • Add result field registry_suffix (#344)
    • To complement the existing public suffix field suffix
  • Add result property top_domain_under_public_suffix (#344)
  • Add result property top_domain_under_registry_suffix (#344)
  • Deprecate registered_domain property
    • Use top_domain_under_public_suffix instead, which has the same behavior but a more accurate name
• Bugfixes
  • Fix missing reverse_domain_name property in CLI --json output (a545c67)
• Misc.

... (truncated)

Commits

• 6937495 5.4.0
• d50a17e Bump the python-dependencies group across 1 directory with 10 updates (#381)
• fd9a3ea Bump astral-sh/setup-uv (#376)
• 89b9aeb fix: preserve private suffix metadata after partial trie matches (#383)
• 544e3cc Read default suffix_list_urls from a TLDEXTRACT_PUBLIC_SUFFIX_LIST_URLS env v...
• 9f86422 Extract hostnames from parsed URL authorities (#379)
• e4aca59 Add clear PSL fetch timeout environment variable (#375)
• 46bbf62 Require CI gate (#380)
• bc4e970 Fix docstring trailing whitespace
• 3ee3b8b Merge pull request #378 from jvanasco/feature-docstrings
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)