From a476a2e3abaa9c283409bf2620a814ab14e8f7a4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 18 Dec 2023 19:08:16 +0100
Subject: [PATCH] Bump pip from 23.3.1 to 23.3.2 (PR #6872)

Bumps [pip](https://github.com/pypa/pip) from 23.3.1 to 23.3.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p>
<blockquote>
<h1>23.3.2 (2023-12-17)</h1>
<h2>Bug Fixes</h2>
<ul>
<li>Fix a bug in extras handling for link requirements (<code>[#12372](https://github.com/pypa/pip/issues/12372) &lt;https://github.com/pypa/pip/issues/12372&gt;</code>_)</li>
<li>Fix mercurial revision &quot;parse error&quot;: use <code>--rev={ref}</code> instead of <code>-r={ref}</code> (<code>[#12373](https://github.com/pypa/pip/issues/12373) &lt;https://github.com/pypa/pip/issues/12373&gt;</code>_)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/pip/commit/f9fea4096e7a5c0e6068b874e98f7d4d2a57b0d5"><code>f9fea40</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/pip/commit/3891d417eaaaa10560b5f07ce830d84f18773211"><code>3891d41</code></a> Fix news file name</li>
<li><a href="https://github.com/pypa/pip/commit/fb1be0fe4936e498607c831211ecb04365e949d4"><code>fb1be0f</code></a> Fix a few typing issues</li>
<li><a href="https://github.com/pypa/pip/commit/b23341dce5fe9df8a6e90f56599e43bbe2e57d94"><code>b23341d</code></a> Update AUTHORS.txt</li>
<li><a href="https://github.com/pypa/pip/commit/4513b9cb05346dd45dfe8e4237f2f85df6a93004"><code>4513b9c</code></a> added second test case</li>
<li><a href="https://github.com/pypa/pip/commit/69b58102f522f0e10d2b3bd31e7b9ee074abd16d"><code>69b5810</code></a> Fixed bug in extras handling for link requirements</li>
<li><a href="https://github.com/pypa/pip/commit/7189400275d90953c902addb0a03520adb36bb28"><code>7189400</code></a> Update news/370392cf-52cd-402c-b402-06d2ff398f89.bugfix.rst</li>
<li><a href="https://github.com/pypa/pip/commit/3f9c9f919ed5ef845aaf0880e64b73b992b7aab8"><code>3f9c9f9</code></a> fix mercurial revision parse error: use two hypen argument --rev= instead of -r=</li>
<li>See full diff in <a href="https://github.com/pypa/pip/compare/23.3.1...23.3.2">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=23.3.1&new-version=23.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>
---
 changelogs/unreleased/6872-dependabot.yml | 6 ++++++
 requirements.txt                          | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)
 create mode 100644 changelogs/unreleased/6872-dependabot.yml

diff --git a/changelogs/unreleased/6872-dependabot.yml b/changelogs/unreleased/6872-dependabot.yml
new file mode 100644
index 0000000000..e1cb02ac0d
--- /dev/null
+++ b/changelogs/unreleased/6872-dependabot.yml
@@ -0,0 +1,6 @@
+change-type: patch
+description: Bump pip from 23.3.1 to 23.3.2
+destination-branches:
+- master
+- iso7
+sections: {}
diff --git a/requirements.txt b/requirements.txt
index 3cda24b7b3..ec7c26f154 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,7 +13,7 @@ jinja2==3.1.2
 more-itertools==10.1.0
 netifaces==0.11.0
 packaging==23.2
-pip==23.3.1
+pip==23.3.2
 ply==3.11
 pydantic==2.5.2
 pyformance==0.4