From d00a2a8750dd01df265a448fa24403a37521a651 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 28 Oct 2026 23:56:57 +0000
Subject: [PATCH] build(deps): bump the lockfile-minor-patch group in /kiln
 with 3 updates

Bumps the lockfile-minor-patch group in /kiln with 3 updates: [trimesh](https://github.com/mikedh/trimesh), [certifi](https://github.com/certifi/python-certifi) and [sse-starlette](https://github.com/sysid/sse-starlette).


Updates `trimesh` from 5.1.1 to 5.2.0
- [Release notes](https://github.com/mikedh/trimesh/releases)
- [Commits](https://github.com/mikedh/trimesh/compare/5.1.1...5.2.0)

Updates `certifi` from 2026.10.19 to 2026.10.23
- [Commits](https://github.com/certifi/python-certifi/compare/2026.10.19...2026.10.23)

Updates `sse-starlette` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/sysid/sse-starlette/releases)
- [Commits](https://github.com/sysid/sse-starlette/compare/v3.5.0...v3.5.1)

---
updated-dependencies:
- dependency-name: trimesh
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: lockfile-minor-patch
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: lockfile-minor-patch
- dependency-name: sse-starlette
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: lockfile-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 kiln/pyproject.toml        | 2 +-
 kiln/requirements-lock.txt | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/kiln/pyproject.toml b/kiln/pyproject.toml
index 05fc46e9..8df2a729 100644
--- a/kiln/pyproject.toml
+++ b/kiln/pyproject.toml
@@ -72,7 +72,7 @@ dependencies = [
     # error said why, so the missing half was invisible to the person missing
     # it.  4.1 MB on disk, and its one requirement is the numpy above, so the
     # marginal cost of the correct behaviour is small.
-    "trimesh>=4.0",
+    "trimesh>=5.2.0",
     # Pillow paints the software stage (``kiln.stage_paint``), which is what
     # a machine with no usable browser gets — every install that is not this
     # laptop, in practice.  Promoted for the same reason as the two above and
diff --git a/kiln/requirements-lock.txt b/kiln/requirements-lock.txt
index cbde9c22..142cb1bb 100644
--- a/kiln/requirements-lock.txt
+++ b/kiln/requirements-lock.txt
@@ -9,7 +9,7 @@ Pygments==2.21.0
 annotated-types==0.8.0
 anyio==4.15.1
 attrs==26.1.0
-certifi==2026.10.19
+certifi==2026.10.23
 cffi==2.1.1
 charset-normalizer==3.5.2
 click==8.5.0
@@ -55,10 +55,10 @@ requests==2.34.2
 responses==0.26.3
 rich==15.0.0
 rpds-py==0.30.0
-sse-starlette==3.5.0
+sse-starlette==3.5.1
 starlette==1.7.0
 tomli==2.5.0
-trimesh==5.1.1
+trimesh==5.2.0
 truststore==0.10.5
 typing-inspection==0.4.4
 typing_extensions==4.16.0