policyengine 6.2.0__tar.gz → 6.2.1__tar.gz

{policyengine-6.2.0 → policyengine-6.2.1}/.github/workflows/draft-pdf.yml

@@ -10,6 +10,10 @@ on:
       - paper.bib
       - architecture.png
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   paper:
     runs-on: ubuntu-latest

{policyengine-6.2.0 → policyengine-6.2.1}/.github/workflows/pr_code_changes.yaml

@@ -14,6 +14,10 @@ on:
       - src/policyengine/data/bundle/manifest.json
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   check-changelog:
     name: Check changelog fragment
@@ -77,7 +81,7 @@ jobs:
       - name: Smoke-import core modules
         run: python -c "import policyengine; from policyengine.core import Dataset, Policy, Simulation; from policyengine.outputs import aggregate, poverty, inequality; print('import OK')"
   BundleVerification:
-    name: Verify bundle metadata
+    name: Verify release inputs and bundle packages
     # Private manifest credentials are available only to trusted repository PRs.
     if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
@@ -93,8 +97,19 @@ jobs:
         uses: actions/setup-python@v6
         with:
           python-version: '3.13'
-      - name: Check derived bundle metadata
-        run: python scripts/bundle.py check
+      - name: Install package for TRACE verification
+        run: uv pip install -e . h5py --system
+      - name: Check reviewed release inputs
+        env:
+          HUGGING_FACE_TOKEN: ${{ secrets.HUGGING_FACE_TOKEN }}
+        run: |
+          if [[ -z "${HUGGING_FACE_TOKEN:-}" ]]; then
+            echo "::error::Full private release verification requires HUGGING_FACE_TOKEN"
+            exit 1
+          fi
+          python scripts/check_release_credentials.py
+          python scripts/bundle.py check --published-spm --include-tros --strict-tros
+          python scripts/release_lock.py
       - name: Install bundle package scaffold
         run: |
           uv pip install -e ".[models]" --system
@@ -117,17 +132,10 @@ jobs:
           PY
       - name: Check installed package consistency
         run: python -m pip check
-      # Only the reviewed registry lock is a pull-request concern. The
-      # read-only credential, published-measurement and TRACE sidecar gates
-      # are release gates: the release workflow regenerates the sidecars and
-      # publishes the wheels immediately before checking them, so they cannot
-      # be satisfied from a pull request. They run in push.yaml instead.
-      - name: Check the reviewed registry lock
-        run: python scripts/release_lock.py
       - name: Verify bundle packages
         run: policyengine bundle verify --country us --country uk --packages-only --json
   Test:
-    runs-on: macos-latest
+    runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:

{policyengine-6.2.0 → policyengine-6.2.1}/.github/workflows/pr_docs_changes.yaml

@@ -11,6 +11,10 @@ on:
       - .github/**
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   Test:
     runs-on: ubuntu-latest

{policyengine-6.2.0 → policyengine-6.2.1}/.github/workflows/push.yaml

@@ -39,7 +39,7 @@ jobs:
 
   Test:
     if: github.event.head_commit.message != 'Update package version'
-    runs-on: macos-latest
+    runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:

{policyengine-6.2.0 → policyengine-6.2.1}/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [6.2.1] - 2026-09-30
+
+### Changed
+
+- Update the certified PolicyEngine bundle to PolicyEngine Core 3.32.10.
+- Run the full Python test matrices on GitHub-hosted Ubuntu machines and cancel earlier workflow runs when a pull request receives a new commit.
+
+### Fixed
+
+- Correct the US and UK TRACE composition fingerprints after the PolicyEngine Core 3.32.10 bundle update, and run the authenticated TRACE comparison on same-repository pull requests.
+
+
 ## [6.2.0] - 2026-09-29
 
 ### Added

{policyengine-6.2.0/src/policyengine.egg-info → policyengine-6.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: policyengine
-Version: 6.2.0
+Version: 6.2.1
 Summary: A package to conduct policy analysis using PolicyEngine tax-benefit models.
 Author-email: PolicyEngine <hello@policyengine.org>
 License:                     GNU AFFERO GENERAL PUBLIC LICENSE
@@ -685,15 +685,15 @@ Requires-Dist: plotly>=5.0.0; extra == "plotting"
 Provides-Extra: graph
 Requires-Dist: networkx>=3.0; extra == "graph"
 Provides-Extra: models
-Requires-Dist: policyengine-core==3.32.5; extra == "models"
+Requires-Dist: policyengine-core==3.32.10; extra == "models"
 Requires-Dist: policyengine-us==2.2.1; extra == "models"
 Requires-Dist: policyengine-uk==2.102.3; extra == "models"
 Requires-Dist: spm-calculator==1.0.0; extra == "models"
 Provides-Extra: uk
-Requires-Dist: policyengine-core==3.32.5; extra == "uk"
+Requires-Dist: policyengine-core==3.32.10; extra == "uk"
 Requires-Dist: policyengine-uk==2.102.3; extra == "uk"
 Provides-Extra: us
-Requires-Dist: policyengine-core==3.32.5; extra == "us"
+Requires-Dist: policyengine-core==3.32.10; extra == "us"
 Requires-Dist: policyengine-us==2.2.1; extra == "us"
 Requires-Dist: spm-calculator==1.0.0; extra == "us"
 Provides-Extra: dev
@@ -711,7 +711,7 @@ Requires-Dist: towncrier>=24.8.0; extra == "dev"
 Requires-Dist: mypy>=1.11.0; extra == "dev"
 Requires-Dist: pytest-cov>=5.0.0; extra == "dev"
 Requires-Dist: hypothesis>=6.100.0; extra == "dev"
-Requires-Dist: policyengine-core==3.32.5; extra == "dev"
+Requires-Dist: policyengine-core==3.32.10; extra == "dev"
 Requires-Dist: policyengine-us==2.2.1; extra == "dev"
 Requires-Dist: policyengine-uk==2.102.3; extra == "dev"
 Requires-Dist: spm-calculator==1.0.0; extra == "dev"

{policyengine-6.2.0 → policyengine-6.2.1}/docs/households.md

@@ -106,7 +106,7 @@ separate benefit inputs; they do not override SPM measurement composition.
 
 These changes require the coordinated canonical country/calculator bundle, which
 the packaged production manifest now pins and certifies: `policyengine-us`
-2.2.1, `policyengine-core` 3.32.5, `spm-calculator` 1.0.0, and the US data
+2.2.1, `policyengine-core` 3.32.10, `spm-calculator` 1.0.0, and the US data
 release `populace-us-2024-spm-20260915`. Local-wheel development manifest
 fixtures remain explicitly uncertified. The measurement receipt identifies a
 calculation; it does not certify a population dataset or establish publication

{policyengine-6.2.0 → policyengine-6.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "policyengine"
-version = "6.2.0"
+version = "6.2.1"
 description = "A package to conduct policy analysis using PolicyEngine tax-benefit models."
 readme = "README.md"
 authors = [
@@ -40,17 +40,17 @@ graph = [
     "networkx>=3.0",
 ]
 models = [
-    "policyengine-core==3.32.5",
+    "policyengine-core==3.32.10",
     "policyengine-us==2.2.1",
     "policyengine-uk==2.102.3",
     "spm-calculator==1.0.0",
 ]
 uk = [
-    "policyengine-core==3.32.5",
+    "policyengine-core==3.32.10",
     "policyengine-uk==2.102.3",
 ]
 us = [
-    "policyengine-core==3.32.5",
+    "policyengine-core==3.32.10",
     "policyengine-us==2.2.1",
     "spm-calculator==1.0.0",
 ]
@@ -69,7 +69,7 @@ dev = [
     "mypy>=1.11.0",
     "pytest-cov>=5.0.0",
     "hypothesis>=6.100.0",
-    "policyengine-core==3.32.5",
+    "policyengine-core==3.32.10",
     "policyengine-us==2.2.1",
     "policyengine-uk==2.102.3",
     "spm-calculator==1.0.0",

{policyengine-6.2.0 → policyengine-6.2.1}/src/policyengine/data/bundle/manifest.json

@@ -1,10 +1,10 @@
 {
-  "bundle_version": "6.2.0",
+  "bundle_version": "6.2.1",
   "citation": {
     "publisher": "PolicyEngine",
-    "title": "PolicyEngine bundle 6.2.0",
+    "title": "PolicyEngine bundle 6.2.1",
     "type": "software-bundle",
-    "version": "6.2.0"
+    "version": "6.2.1"
   },
   "countries": {
     "uk": {
@@ -17,7 +17,7 @@
   "data_releases": {
     "uk": {
       "build_id": "policyengine-uk-data-1.56.16",
-      "bundle_id": "uk-6.2.0",
+      "bundle_id": "uk-6.2.1",
       "certification": {
         "built_with_model_git_sha": "12a1e028afeef08d8b2d74ee03fd9de3a78b2dd3",
         "built_with_model_version": "2.89.2",
@@ -99,7 +99,7 @@
         "version": "2.102.3",
         "wheel_url": "https://files.pythonhosted.org/packages/37/e6/e8d9069d498f1510a1380f24a78e957902d01f00b10248c146d6710d5b37/policyengine_uk-2.102.3-py3-none-any.whl"
       },
-      "policyengine_version": "6.2.0",
+      "policyengine_version": "6.2.1",
       "region_datasets": {
         "national": {
           "path_template": "enhanced_frs_2024_25.h5"
@@ -112,7 +112,7 @@
     },
     "us": {
       "build_id": "populace-us-2024-spm-20260915",
-      "bundle_id": "us-6.2.0",
+      "bundle_id": "us-6.2.1",
       "certification": {
         "built_with_model_version": "2.2.1",
         "certified_by": "policyengine.py bundle certification",
@@ -210,7 +210,7 @@
         "version": "2.2.1",
         "wheel_url": "https://files.pythonhosted.org/packages/5e/09/86ac3968d2a18e28fce3ba1186fc21728e9f299b96a806d6f204f1e0aaed/policyengine_us-2.2.1-py3-none-any.whl"
       },
-      "policyengine_version": "6.2.0",
+      "policyengine_version": "6.2.1",
       "region_datasets": {
         "national": {
           "path_template": "populace_us_2024.h5"
@@ -290,17 +290,17 @@
   "packages": {
     "policyengine": {
       "import_name": "policyengine",
-      "install_requirement": "policyengine==6.2.0",
+      "install_requirement": "policyengine==6.2.1",
       "name": "policyengine",
       "role": "bundle_carrier",
-      "version": "6.2.0"
+      "version": "6.2.1"
     },
     "policyengine-core": {
       "import_name": "policyengine_core",
-      "install_requirement": "policyengine-core==3.32.5",
+      "install_requirement": "policyengine-core==3.32.10",
       "name": "policyengine-core",
       "role": "runtime_dependency",
-      "version": "3.32.5"
+      "version": "3.32.10"
     },
     "policyengine-uk": {
       "country": "uk",
@@ -329,6 +329,6 @@
       "wheel_url": "https://files.pythonhosted.org/packages/19/a0/c484f69a0ebf88a9b9fd0ac28176f8df66550f46714f1b0c5ec0b360824e/spm_calculator-1.0.0-py3-none-any.whl"
     }
   },
-  "policyengine_version": "6.2.0",
+  "policyengine_version": "6.2.1",
   "schema_version": 2
 }

{policyengine-6.2.0 → policyengine-6.2.1}/src/policyengine/data/bundle/uk.trace.tro.jsonld

@@ -18,18 +18,18 @@
         "schema:url": "https://policyengine.org"
       },
       "schema:dateCreated": "2026-08-18T14:20:32.100961Z",
-      "schema:description": "TRACE TRO for certified runtime bundle uk-6.2.0 covering the bundle manifest, the certified dataset artifact, the country model wheel, and the country data release manifest when it is available.",
+      "schema:description": "TRACE TRO for certified runtime bundle uk-6.2.1 covering the bundle manifest, the certified dataset artifact, the country model wheel, and the country data release manifest when it is available.",
       "schema:name": "policyengine uk certified bundle TRO",
       "trov:createdWith": {
         "@type": "schema:SoftwareApplication",
         "schema:name": "policyengine",
-        "schema:softwareVersion": "6.2.0"
+        "schema:softwareVersion": "6.2.1"
       },
       "trov:hasArrangement": [
         {
           "@id": "arrangement/1",
           "@type": "trov:ArtifactArrangement",
-          "rdfs:comment": "Certified arrangement for bundle uk-6.2.0.",
+          "rdfs:comment": "Certified arrangement for bundle uk-6.2.1.",
           "trov:hasArtifactLocation": [
             {
               "@id": "arrangement/1/location/bundle_manifest",
@@ -75,7 +75,7 @@
             "@type": "trov:ResearchArtifact",
             "schema:name": "policyengine.py bundle manifest for uk",
             "trov:mimeType": "application/json",
-            "trov:sha256": "8a942b26fec7ed828ba533c6c456d95c3292c52a0370e1713a4e2d6cf186ae29"
+            "trov:sha256": "0b80f402511f5cec0cfbe018b7f8b42e83b54a7bdfc5c9c210a2f77bb63bd21b"
           },
           {
             "@id": "composition/1/artifact/data_release_manifest",
@@ -102,7 +102,7 @@
         "trov:hasFingerprint": {
           "@id": "composition/1/fingerprint",
           "@type": "trov:CompositionFingerprint",
-          "trov:sha256": "aa8a6265cb0660dcbe3d1d8560cfea70011927ff2f29e8f91d4dad4efc9b055a"
+          "trov:sha256": "a318203a1ff8cf141dfe8b138902e445ae1ab7bcce6e3d714e87661a4bb6deaa"
         }
       },
       "trov:hasPerformance": {

{policyengine-6.2.0 → policyengine-6.2.1}/src/policyengine/data/bundle/us.trace.tro.jsonld

@@ -17,18 +17,18 @@
         "schema:name": "PolicyEngine",
         "schema:url": "https://policyengine.org"
       },
-      "schema:description": "TRACE TRO for certified runtime bundle us-6.2.0 covering the bundle manifest, the certified dataset artifact, the country model wheel, and the country data release manifest when it is available.",
+      "schema:description": "TRACE TRO for certified runtime bundle us-6.2.1 covering the bundle manifest, the certified dataset artifact, the country model wheel, and the country data release manifest when it is available.",
       "schema:name": "policyengine us certified bundle TRO",
       "trov:createdWith": {
         "@type": "schema:SoftwareApplication",
         "schema:name": "policyengine",
-        "schema:softwareVersion": "6.2.0"
+        "schema:softwareVersion": "6.2.1"
       },
       "trov:hasArrangement": [
         {
           "@id": "arrangement/1",
           "@type": "trov:ArtifactArrangement",
-          "rdfs:comment": "Certified arrangement for bundle us-6.2.0.",
+          "rdfs:comment": "Certified arrangement for bundle us-6.2.1.",
           "trov:hasArtifactLocation": [
             {
               "@id": "arrangement/1/location/bundle_manifest",
@@ -74,7 +74,7 @@
             "@type": "trov:ResearchArtifact",
             "schema:name": "policyengine.py bundle manifest for us",
             "trov:mimeType": "application/json",
-            "trov:sha256": "8a942b26fec7ed828ba533c6c456d95c3292c52a0370e1713a4e2d6cf186ae29"
+            "trov:sha256": "0b80f402511f5cec0cfbe018b7f8b42e83b54a7bdfc5c9c210a2f77bb63bd21b"
           },
           {
             "@id": "composition/1/artifact/data_release_manifest",
@@ -101,7 +101,7 @@
         "trov:hasFingerprint": {
           "@id": "composition/1/fingerprint",
           "@type": "trov:CompositionFingerprint",
-          "trov:sha256": "acb3c462fafa434aa3f54fd5cfed5e38647679da1889582c3c5edfded5e13dbb"
+          "trov:sha256": "7f7f19f41f2cfd707098768565562f6509b454b48c79bcd0558dab061b5b40a6"
         }
       },
       "trov:hasPerformance": {

{policyengine-6.2.0 → policyengine-6.2.1/src/policyengine.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: policyengine
-Version: 6.2.0
+Version: 6.2.1
 Summary: A package to conduct policy analysis using PolicyEngine tax-benefit models.
 Author-email: PolicyEngine <hello@policyengine.org>
 License:                     GNU AFFERO GENERAL PUBLIC LICENSE
@@ -685,15 +685,15 @@ Requires-Dist: plotly>=5.0.0; extra == "plotting"
 Provides-Extra: graph
 Requires-Dist: networkx>=3.0; extra == "graph"
 Provides-Extra: models
-Requires-Dist: policyengine-core==3.32.5; extra == "models"
+Requires-Dist: policyengine-core==3.32.10; extra == "models"
 Requires-Dist: policyengine-us==2.2.1; extra == "models"
 Requires-Dist: policyengine-uk==2.102.3; extra == "models"
 Requires-Dist: spm-calculator==1.0.0; extra == "models"
 Provides-Extra: uk
-Requires-Dist: policyengine-core==3.32.5; extra == "uk"
+Requires-Dist: policyengine-core==3.32.10; extra == "uk"
 Requires-Dist: policyengine-uk==2.102.3; extra == "uk"
 Provides-Extra: us
-Requires-Dist: policyengine-core==3.32.5; extra == "us"
+Requires-Dist: policyengine-core==3.32.10; extra == "us"
 Requires-Dist: policyengine-us==2.2.1; extra == "us"
 Requires-Dist: spm-calculator==1.0.0; extra == "us"
 Provides-Extra: dev
@@ -711,7 +711,7 @@ Requires-Dist: towncrier>=24.8.0; extra == "dev"
 Requires-Dist: mypy>=1.11.0; extra == "dev"
 Requires-Dist: pytest-cov>=5.0.0; extra == "dev"
 Requires-Dist: hypothesis>=6.100.0; extra == "dev"
-Requires-Dist: policyengine-core==3.32.5; extra == "dev"
+Requires-Dist: policyengine-core==3.32.10; extra == "dev"
 Requires-Dist: policyengine-us==2.2.1; extra == "dev"
 Requires-Dist: policyengine-uk==2.102.3; extra == "dev"
 Requires-Dist: spm-calculator==1.0.0; extra == "dev"

{policyengine-6.2.0 → policyengine-6.2.1}/src/policyengine.egg-info/requires.txt

@@ -22,7 +22,7 @@ towncrier>=24.8.0
 mypy>=1.11.0
 pytest-cov>=5.0.0
 hypothesis>=6.100.0
-policyengine-core==3.32.5
+policyengine-core==3.32.10
 policyengine-us==2.2.1
 policyengine-uk==2.102.3
 spm-calculator==1.0.0
@@ -31,7 +31,7 @@ spm-calculator==1.0.0
 networkx>=3.0
 
 [models]
-policyengine-core==3.32.5
+policyengine-core==3.32.10
 policyengine-us==2.2.1
 policyengine-uk==2.102.3
 spm-calculator==1.0.0
@@ -40,10 +40,10 @@ spm-calculator==1.0.0
 plotly>=5.0.0
 
 [uk]
-policyengine-core==3.32.5
+policyengine-core==3.32.10
 policyengine-uk==2.102.3
 
 [us]
-policyengine-core==3.32.5
+policyengine-core==3.32.10
 policyengine-us==2.2.1
 spm-calculator==1.0.0

{policyengine-6.2.0 → policyengine-6.2.1}/tests/test_release_tro_generation.py

@@ -13,6 +13,7 @@ import pytest
 import requests
 
 from policyengine.provenance import manifest
+from policyengine.provenance.trace import compute_trace_composition_fingerprint
 
 ROOT = Path(__file__).resolve().parents[1]
 FIXTURES = ROOT / "tests" / "fixtures" / "release_tros"
@@ -21,6 +22,27 @@ import bundle as maintenance  # noqa: E402
 import generate_trace_tros as generator  # noqa: E402
 
 
+@pytest.mark.parametrize("country", ["us", "uk"])
+def test_bundled_tro_composition_fingerprint_matches_artifacts(country):
+    tro_path = (
+        ROOT
+        / "src"
+        / "policyengine"
+        / "data"
+        / "bundle"
+        / f"{country}.trace.tro.jsonld"
+    )
+    tro = json.loads(tro_path.read_text())["@graph"][0]
+    composition = tro["trov:hasComposition"]
+    artifact_hashes = [
+        artifact["trov:sha256"] for artifact in composition["trov:hasArtifact"]
+    ]
+
+    assert composition["trov:hasFingerprint"]["trov:sha256"] == (
+        compute_trace_composition_fingerprint(artifact_hashes)
+    )
+
+
 @pytest.fixture
 def release(monkeypatch, tmp_path):
     package = tmp_path / "policyengine"
@@ -300,15 +322,18 @@ def test_release_workflows_gate_complete_inputs_and_lock():
         assert commands.index(
             "python scripts/check_release_credentials.py"
         ) < commands.index("check --published-spm")
-    # The pull-request job checks only the reviewed registry lock. The
-    # read-only credential, published-measurement and TRACE sidecar gates
-    # depend on the release workflow regenerating sidecars and publishing
-    # wheels first, so a pull request can never satisfy them.
+    # Same-repository pull requests have the read-only credential required to
+    # run the exact pre-versioning release check before merge.
     pr_commands = "\n".join(
         step.get("run", "") for step in pr["jobs"]["BundleVerification"]["steps"]
     )
     assert "python scripts/release_lock.py" in pr_commands
-    assert "--published-spm" not in pr_commands
+    assert "check --published-spm --include-tros --strict-tros" in pr_commands
+    assert 'if [[ -z "${HUGGING_FACE_TOKEN:-}" ]]' in pr_commands
+    assert "python scripts/check_release_credentials.py" in pr_commands
+    assert pr_commands.index(
+        "python scripts/check_release_credentials.py"
+    ) < pr_commands.index("check --published-spm")
     commands = "\n".join(
         step.get("run", "") for step in push["jobs"]["Versioning"]["steps"]
     )

{policyengine-6.2.0 → policyengine-6.2.1}/uv.lock

@@ -1807,7 +1807,7 @@ wheels = [
 
 [[package]]
 name = "policyengine"
-version = "6.2.0"
+version = "6.2.1"
 source = { editable = "." }
 dependencies = [
     { name = "h5py" },
@@ -1880,10 +1880,10 @@ requires-dist = [
     { name = "pandas", specifier = ">=2.0.0" },
     { name = "plotly", marker = "extra == 'dev'", specifier = ">=5.0.0" },
     { name = "plotly", marker = "extra == 'plotting'", specifier = ">=5.0.0" },
-    { name = "policyengine-core", marker = "extra == 'dev'", specifier = "==3.32.5" },
-    { name = "policyengine-core", marker = "extra == 'models'", specifier = "==3.32.5" },
-    { name = "policyengine-core", marker = "extra == 'uk'", specifier = "==3.32.5" },
-    { name = "policyengine-core", marker = "extra == 'us'", specifier = "==3.32.5" },
+    { name = "policyengine-core", marker = "extra == 'dev'", specifier = "==3.32.10" },
+    { name = "policyengine-core", marker = "extra == 'models'", specifier = "==3.32.10" },
+    { name = "policyengine-core", marker = "extra == 'uk'", specifier = "==3.32.10" },
+    { name = "policyengine-core", marker = "extra == 'us'", specifier = "==3.32.10" },
     { name = "policyengine-uk", marker = "extra == 'dev'", specifier = "==2.102.3" },
     { name = "policyengine-uk", marker = "extra == 'models'", specifier = "==2.102.3" },
     { name = "policyengine-uk", marker = "extra == 'uk'", specifier = "==2.102.3" },
@@ -1907,7 +1907,7 @@ provides-extras = ["plotting", "graph", "models", "uk", "us", "dev"]
 
 [[package]]
 name = "policyengine-core"
-version = "3.32.5"
+version = "3.32.10"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "dpath" },
@@ -1928,9 +1928,9 @@ dependencies = [
     { name = "standard-imghdr" },
     { name = "wheel" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/12/54/cfd2138584de9cddaa4459bba7fdc381101ca8b8ffd38356a1b256850d5f/policyengine_core-3.32.5.tar.gz", hash = "sha256:f051c269b538fe77ee7868f7cfbc0138551960b1b677a0ad6fdc1a93f1660460", size = 420112, upload-time = "2026-09-10T04:16:48.889Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/d6/cd/9fc967c5b787baa5f9d83461773ba0982a8e22ae83c40155a7ee55edd11a/policyengine_core-3.32.10.tar.gz", hash = "sha256:0f51e8abfa8f172c69d03ba8f4304632a348fc6dca780e41021b2fd0cec04fde", size = 427479, upload-time = "2026-09-29T17:56:43.582Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/c6/d9/72c3707465e9fe77e6f7a55ea64b49a287cbf875b78f6e862d945df26975/policyengine_core-3.32.5-py3-none-any.whl", hash = "sha256:9d8c162d5fe5c784ae16c885da3ffbfc39a536add0e111133144d8edd555935f", size = 245925, upload-time = "2026-09-10T04:16:47.153Z" },
+    { url = "https://files.pythonhosted.org/packages/58/50/291d73da16f39a3c4f05dffb6d40b1142fc400ec39b5a2ca7481e6fe9d90/policyengine_core-3.32.10-py3-none-any.whl", hash = "sha256:124afc555fe7c848ae8237b820fed0b6ea0ea1280e8850ad8bf356937ee10e5b", size = 247410, upload-time = "2026-09-29T17:56:42.218Z" },
 ]
 
 [[package]]
@@ -2219,7 +2219,7 @@ wheels = [
 
 [[package]]
 name = "pytest"
-version = "8.4.1"
+version = "9.1.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "colorama", marker = "sys_platform == 'win32'" },
@@ -2228,21 +2228,22 @@ dependencies = [
     { name = "pluggy" },
     { name = "pygments" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/08/ba/45911d754e8eba3d5a841a5ce61a65a685ff1798421ac054f85aa8747dfb/pytest-8.4.1.tar.gz", hash = "sha256:7c67fd69174877359ed9371ec3af8a3d2b04741818c51e5e99cc1742251fa93c", size = 1517714, upload-time = "2025-06-18T05:48:06.109Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/e4/47/b9efed96c114afcfa3c9d3fe98a76a1d14c74a9e266d397cf6eb64be5e01/pytest-9.1.1.tar.gz", hash = "sha256:1088fbde8f2b49d95a549a195707afa7a76a3ce9bcadc26b6d71f0ffda5fe313", size = 1636369, upload-time = "2026-06-19T10:58:32.857Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/29/16/c8a903f4c4dffe7a12843191437d7cd8e32751d5de349d45d3fe69544e87/pytest-8.4.1-py3-none-any.whl", hash = "sha256:539c70ba6fcead8e78eebbf1115e8b589e7565830d7d006a8723f19ac8a0afb7", size = 365474, upload-time = "2025-06-18T05:48:03.955Z" },
+    { url = "https://files.pythonhosted.org/packages/24/25/1de2678b631f5a49215c6c96fff41ba892b0a34df68d6d80292b1b48aa7f/pytest-9.1.1-py3-none-any.whl", hash = "sha256:37a86b45efb9a47a61a36449063e8e18d0cab3161329fc099eb21783169c4f0c", size = 386536, upload-time = "2026-06-19T10:58:31.347Z" },
 ]
 
 [[package]]
 name = "pytest-asyncio"
-version = "1.1.0"
+version = "1.4.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "pytest" },
+    { name = "typing-extensions", marker = "python_full_version < '3.13'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/4e/51/f8794af39eeb870e87a8c8068642fc07bce0c854d6865d7dd0f2a9d338c2/pytest_asyncio-1.1.0.tar.gz", hash = "sha256:796aa822981e01b68c12e4827b8697108f7205020f24b5793b3c41555dab68ea", size = 46652, upload-time = "2025-07-16T04:29:26.393Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/43/7c/d36d04db312ecf4298932ef77e6e4a9e8ad017906e24e34f0b0c361a2473/pytest_asyncio-1.4.0.tar.gz", hash = "sha256:c6c0d2259945122819f171a32ecea2c349ead889ee28176caaf492143424be42", size = 58514, upload-time = "2026-05-26T09:56:04.083Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/c7/9d/bf86eddabf8c6c9cb1ea9a869d6873b46f105a5d292d3a6f7071f5b07935/pytest_asyncio-1.1.0-py3-none-any.whl", hash = "sha256:5fe2d69607b0bd75c656d1211f969cadba035030156745ee09e7d71740e58ecf", size = 15157, upload-time = "2025-07-16T04:29:24.929Z" },
+    { url = "https://files.pythonhosted.org/packages/03/e2/08a497ef684b88559c9cc5f4ad53a37e7b99e727094a86d6ea32536d5d3c/pytest_asyncio-1.4.0-py3-none-any.whl", hash = "sha256:933ca923a23075a87fb7070c0ec272a6848489824d887c85c812670932835aa1", size = 16930, upload-time = "2026-05-26T09:56:02.576Z" },
 ]
 
 [[package]]