build(deps): bump pyinstaller-hooks-contrib from 2026.7 to 2026.8 in /configs/pip/pyinstaller in the github-actions-all group

[dependabot]

Bumps the github-actions-all group in /configs/pip/pyinstaller with 1 update: pyinstaller-hooks-contrib.

Updates pyinstaller-hooks-contrib from 2026.7 to 2026.8

Release notes

Sourced from pyinstaller-hooks-contrib's releases.

v2026.8

Please see the changelog for more details

Changelog

Sourced from pyinstaller-hooks-contrib's changelog.

2026.8 (2026-09-30)

New hooks

* Add a hook for ``fastmcp``, which requires metadata for ``fastmcp-slim``
  or ``fastmcp`` dist to be collected. (`[#1044](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1044)
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1044>`_)
* Add hook for ``py_ecc`` to collect metadata (required starting with
  ``py-ecc`` v7.0.0). (`[#1043](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1043)
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1043>`_)
* Add hook for ``sentry_sdk.integrations.mcp`` to collect metadata of
  ``mcp`` dist, if available; the version information is required by the
  integration module's initialization code. Fixes run-time error when
  building with both ``sentry_sdk`` and ``mcp`` installed. (`[#1046](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1046)
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1046>`_)
Updated hooks

• Update numcodecs hook for compatibility with numcodecs v0.17.0, which tries to obtain its version from dist metadata. ([#1046](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1046) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1046>_)
• Update hooks for trame and pyvista in order to restore out-of-the-box functionality of pyvista.Plotter. ([#1048](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1048) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1048>_)
• Update the duckdb hook to collect all submodules from the package, as some of them (for example, duckdb.filesystem) are referenced only from binary extensions. Fixes _duckdb.InvalidInputException: Invalid Input Error: This operation could not be completed because required module 'fsspec' is not installed error when trying to load data from a file (e.g., a JSON file). ([#1047](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1047) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1047>_)

Commits

• 95791f0 Release v2026.8
• 60c82e5 hooks: update hooks from trame/pyvista
• 596fdb1 Scheduled weekly dependency update for week 39 (#1048)
• 46db5f1 ci: set PYINSTALLER_ZLIB_COMPRESSION_LEVEL=1
• d54454c hooks: update duckdb hook to collect the package's submodules
• cd8260e hooks: add hook for sentry_sdk.integrations.mcp
• 8158227 hooks: update numcodecs hook for compatibility with numcodecs v0.17.0
• 1c90a77 Scheduled weekly dependency update for week 38 (#1046)
• 1554e1b tests: update sha256 sum for mariadb_repo_setup script
• e892f91 hooks: add hook for fastmcp - fastmcp-slim
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sbp-bvanb]

🤖 pr-reviewer report

Branch: dependabot/pip/configs/pip/pyinstaller/github-actions-all-eeb45105e1 → main | Head: eb64ab5 | Commits: 1 | Files: 1
Verdict: ❌ Changes requested

Dependabot bumps pyinstaller-hooks-contrib from 2026.7 to 2026.8 in configs/pip/pyinstaller/requirements.txt. Both new sha256 hashes match the PyPI wheel and sdist, packaging==26.3 meets the new packaging>=22.0 requirement, and all CI checks pass.

Blocking

• [git] PR title — at about 125 characters, build(deps): bump pyinstaller-hooks-contrib from 2026.7 to 2026.8 in /configs/pip/pyinstaller in the github-actions-all group goes well past the 72-character limit, and a squash merge makes it the commit subject on main. build is also not one of the allowed types (feat|fix|docs|style|refactor|test|chore|ci), but the repo's lint-commit accepts it and existing history uses it. Before merging, rename the PR to something like chore(deps): bump pyinstaller-hooks-contrib to 2026.8.

Checks

• Git: fail (PR title length/type; commit subject build(deps): bump pyinstaller-hooks-contrib is under 72 chars but uses type build)
• Correctness: pass (hashes match PyPI)
• Security: pass (hash-pinned)
• Maintainability: pass
• Over-engineering: pass
• N/A: Terraform, Chef, Docker, Claude plugins

🤖 doc-reviewer report

Branch: dependabot/pip/configs/pip/pyinstaller/github-actions-all-eeb45105e1 → main | Head: eb64ab5 | Docs: 0
Verdict: ❌ Changes requested

The README has no ## Quickstart and holds reference, example and migration content, and there is no docs/ directory. All of this predates this dependency bump.

Blocking

• [quickstart] README.md:10: the getting-started steps are under ## Usage, and there is no ## Quickstart. Rename the section to ## Quickstart and keep only the workflow steps (lines 12-30).
• [lean] README.md:32: the inputs/options table does not belong in the README. Move it to docs/configuration.md and link it.
• [lean] README.md:49: the notes on persist-credentials, .python-version and the project-environment tools do not belong in the README. Move them to docs/configuration.md and link it.
• [lean] README.md:60: the uv workspace example section does not belong in the README. Move it to docs/uv-workspace.md (or docs/configuration.md) and link it.
• [lean] README.md:72: the Migrating to v0.3.0 section does not belong in the README. Move it to docs/migrating.md and link it.

Checks

• README: pass
• Quickstart: fail (no ## Quickstart; the steps are under ## Usage)
• Lean: fail (options table, usage notes, uv workspace example, migration guide)
• docs/ linked: pass (0 pages)
• Links: pass (2 checked)

🤖 dependency-reviewer report

Branch: dependabot/pip/configs/pip/pyinstaller/github-actions-all-eeb45105e1 → main | Head: eb64ab5 | Dependencies: 6
Verdict: ✅ Approved

All 6 pinned packages in configs/pip/pyinstaller/requirements.txt match their latest stable PyPI release, including the bumped pyinstaller-hooks-contrib==2026.8.

Checks

• Up to date: 6
• Outdated: 0

---

Generated by mcvs_review 3.1.0 (pr-reviewer, doc-reviewer, dependency-reviewer) at commit eb64ab5.

[sbp-bvanb]

Feedback from the mcvs_review summary:

• Commit type / PR title (pr-reviewer): not changed. build(deps): is what Dependabot generates and is the convention already on main (e.g. build(deps): bump the github-actions-all group across 1 directory with 2 updates #63), and this repo's lint-commit check accepts it (green). Changing the prefix for all Dependabot PRs would be a .github/dependabot.yml change, which belongs in its own PR, not in a Dependabot bump. The squash-merge title can be shortened when merging.
• README layout (doc-reviewer): not changed here. The findings predate this PR, which only bumps a pinned requirement; they belong in a separate docs PR.