chore(deps-dev): Bump doccmd from 2026.9.1 to 2026.9.7

[dependabot]

Bumps doccmd from 2026.9.1 to 2026.9.7.

Release notes

Sourced from doccmd's releases.

Release 2026.09.07

2026.09.07

• Sign the macOS binary with a Developer ID certificate and notarize it, so Gatekeeper no longer blocks it when it is downloaded in a browser. The xattr -d com.apple.quarantine workaround is no longer needed.

Changelog

Sourced from doccmd's changelog.

Changelog

.. towncrier release notes start

2026.09.07

• Sign the macOS binary with a Developer ID certificate and notarize it, so Gatekeeper no longer blocks it when it is downloaded in a browser. The xattr -d com.apple.quarantine workaround is no longer needed.

2026.09.01

• Support Click 8.5.

2026.08.30.1

No significant changes.

2026.08.30

No significant changes.

2026.08.16

No significant changes.

2026.07.19

• Reject --temporary-file-name-template values that could resolve outside the temporary directory, preventing accidental overwrite or deletion of unrelated files. See [#1211](https://github.com/adamtheturtle/doccmd/issues/1211) <https://github.com/adamtheturtle/doccmd/issues/1211>__.

• Support configured file extensions with more than one dot (for example --rst-extension=.test.rst) for both direct files and directory discovery ([#1212](https://github.com/adamtheturtle/doccmd/issues/1212) <https://github.com/adamtheturtle/doccmd/issues/1212>_).

• Reject an empty or malformed --command value with a usage error instead of crashing ([#1213](https://github.com/adamtheturtle/doccmd/issues/1213) <https://github.com/adamtheturtle/doccmd/issues/1213>_).

• Always generate a valid Python module name for temporary files so linters do not flag doccmd's own filenames ([#1214](https://github.com/adamtheturtle/doccmd/issues/1214) <https://github.com/adamtheturtle/doccmd/issues/1214>_).

• Support UTF-16 documents by detecting newlines on the decoded text ([#1215](https://github.com/adamtheturtle/doccmd/issues/1215) <https://github.com/adamtheturtle/doccmd/issues/1215>_).

• Reject an empty --exclude pattern with a usage error instead of crashing.

2026.05.25

... (truncated)

Commits

• 6931589 Bump CHANGELOG
• 24300df Finish porting the signed macOS release from literalizer-cli (#1398)
• 30f29f9 Merge pull request #1395 from adamtheturtle/dependabot/uv/no-defaults-2026.9.1
• 7e24230 Merge pull request #1393 from adamtheturtle/dependabot/uv/vale-3.20.0.0
• 21d6aed Merge pull request #1389 from adamtheturtle/dependabot/pip/ty-0.0.78
• 303b5df Merge pull request #1391 from adamtheturtle/dependabot/pip/vale-3.20.0.0
• d691fcf chore(deps): Bump no-defaults from 2.3.0 to 2026.9.1
• 0d59cbd Merge pull request #1388 from adamtheturtle/dependabot/pip/pyproject-fmt-2.29.3
• 85fadc4 Merge pull request #1386 from adamtheturtle/dependabot/pip/ruff-0.16.6
• 411221c Merge pull request #1387 from adamtheturtle/dependabot/pip/prek-0.5.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)