chore(deps): update dependency pygments to v2.21.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
pygments (changelog)	==2.20.0 → ==2.21.0

---

Release Notes

pygments/pygments (pygments)

v2.21.0

Compare Source

(released August 17th, 2026)

• New lexers:

  • BitBake (#​3103)
  • Caddyfile (#​3225)
  • CEL (#​3048)
  • PureScript (#​1077, #​3054)

• Updated lexers:

  • Bash: Fix coloured keyword at the beginning of a name (#​2926)
  • Boogie: Add missing Boogie and Civl Verifier keywords (#​3156)
  • C#:
    • Recognize interpolated verbatim strings with either $@ or @$
      prefixes (#​2685)
    • Support dollar-prefixed and multi-quote raw strings (#​3129, #​2897)
    • Recognize union (#​3182)
  • C/C++:
    • Add C23/C++26 attributes (#​3084)
    • Add more C2Y keywords (#​3092)
    • Highlight a function following a namespace body (#​2928)
    • Fix C/C++ lexer support for multiline pre-processor comments (#​3051)
    • Add .ipp as a file extension (#​3141, #​1008)
  • Clojure: Recognize named, octal and unicode character literals such as
    \space and \o377 as a single token (#​979)
  • Csound: Add missing opcode parameter type letter (#​3161)
  • CUDA: Derive from the C++ lexer instead of C to highlight C++
    constructs such as template, class and namespace (#​3127)
  • D: Allow non-ASCII (Unicode) identifiers (#​1088)
  • Fish: Fix single quote backslash escape (#​3138, #​2821)
  • Go: Various lexer improvements (#​3199)
  • GoogleSQL: Require a word break after SET (#​3167)
  • Hexdump: Only match valid digits (#​3200, #​2847)
  • JavaScript: Highlight the arguments object (#​3146)
  • Jsonnet: Recognize colons in array slice expressions (#​2828)
  • JSX: Allow apostrophes in element text (#​2816)
  • Julia: Fix rstrings backslash (#​3140, #​2537)
  • Kotlin: Support companion objects without an explicit name (#​2525)
  • Kotlin: Don't let a nullable type marker (?) consume the following
    character, so Foo?, and a?:b tokenize correctly (#​2964)
  • Kusto: Recognize member-access dots in dynamic objects (#​2779)
  • Lua: Various improvements (#​3143)
  • Macaulay2: Update symbols to 1.26.05 (#​3120)
  • Markdown:
    • Highlight bold-italics (***...*** and ___...___) (#​3067)
    • Fix mention regex to support hyphens in usernames (#​3139, #​3135)
  • Markdown, reStructuredText, TiddlyWiki5: Fix wrong token offsets for
    embedded code blocks (#​3133)
  • Mathematica: Recognize \[Name] named-character escapes such as
    \[Nu] instead of emitting an Error token (#​3097)
  • MATLAB, Octave, Scilab: Allow ... line continuations in function
    definition signatures (#​659)
  • MySQL: Require a word break after SET (#​3110)
  • PostgreSQL: Add more keywords (#​3066)
  • Python:
    • Recognize sentinel (#​3114)
    • Recognize frozendict (#​3119)
    • Recognize lazy imports (#​3115)
  • reStructuredText: Allow . and + in directive/role names (#​3085)
  • Ruby: Don't duplicate the body of an unterminated heredoc (#​2998)
  • Ruby: Treat << after ), ] or } as the shift operator
    rather than the start of a heredoc (#​760)
  • SCSS: Recognize variable references in property values (#​2818)
  • Shell: Recognize chevron prompts (#​3096)
  • Smithy: Fix text blocks and add missing syntax (#​3168)
  • Swift: Keep func a keyword in class func type methods (#​1125)
  • Tcl: Stop $name variable references at a dash (#​1720)
  • TeX: Recognize LaTeX math environments as math (#​3034)
  • Twig: Allow uppercase letters at the start of identifiers (#​3159, #​2965)
  • TypeScript: Only treat module as a keyword when followed by
    whitespace, so identifiers like modules and module.exports
    are highlighted correctly (#​2823)
  • Vala: Recognize verbatim strings before ordinary quoted strings (#​2861)
  • Vala: Recognize conditional compilation directives (#​2858)
  • Vim:
    • Bump the syntax file to vim 9.2 (#​3183, #​3174)
    • Small improvements to the VimScript lexer (#​3173)
  • YAML: Add yml alias (#​3169), recognize non-breaking spaces as valid
    scalar content (#​2827)
  • WebAssembly: Recognize sign-extension operators (#​2991, #​3160)
  • XML: Mark SVG files as XML (#​3093)

• New styles:

  • Night Owl (#​3132)

• Fix catastrophic backtracking in looks_like_xml (#​2931, #​3112)

• Improve monokai theme colors (#​3100)

• Improve handling of non-string types in html_escape to fix broken clients (#​3090, #​3086)

• LaTeX formatter: honor the wrapped lexer's stripnl and other input
  options when escapeinside is set, so blank lines are no longer stripped
  under stripnl=false (#​2975)

• RawTokenFormatter: fix a crash when error_color is set (#​3215)

• Groff formatter: don't duplicate a character when word-wrapping (wrap)
  a token that is not at the end of a line (#​3201)

• Add support for Python 3.15 (#​3099)

• Fix invalid -L values report success (#​3217)

• Allow transparent as a color style definition (#​3180, #​3170)

• HtmlFormatter: " and ' now render literally (#​3185)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

LGTM — trivial dev-dependency patch bump.

Extended reasoning...

Overview

This PR only bumps pygments from 2.20.0 to 2.21.0 in requirements-dev.txt, a lockfile entry autogenerated by pip-compile. Pygments is a transitive dev dependency pulled in by pytest and sphinx for syntax highlighting in test output and documentation builds; it is not part of the shipped pyUSPTO package or any production code path.

Security risks

None. Pygments has no interaction with runtime application logic, user input, or network/auth surfaces in this repo — it's only invoked during local test runs and doc generation. A patch-level bump introduces no new risk here.

Level of scrutiny

Minimal scrutiny is appropriate: this is a mechanical, Renovate-generated lockfile change with no logic changes, no touched source files, and no CODEOWNER-sensitive paths.

Other factors

The diff is a single-line version bump with no other file changes. No outstanding review comments exist on this PR.