[upd] pypi: Update docutils requirement from >=0.21.2 to >=0.23

Updates the requirements on [docutils](https://github.com/rtfd/recommonmark) to permit the latest version.
- [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rtfd/recommonmark/commits)

---
updated-dependencies:
- dependency-name: docutils
  dependency-version: '0.23'
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/container.yml

@@ -106,10 +106,10 @@ jobs:
 
       - if: ${{ matrix.emulation }}
         name: Setup QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a  # v4.0.0
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3  # v4.1.0
 
       - name: Login to GHCR
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121  # v4.1.0
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  # v4.2.0
         with:
           registry: "ghcr.io"
           username: "${{ github.repository_owner }}"
@@ -147,10 +147,10 @@ jobs:
 
       - if: ${{ matrix.emulation }}
         name: Setup QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a  # v4.0.0
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3  # v4.1.0
 
       - name: Login to GHCR
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121  # v4.1.0
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  # v4.2.0
         with:
           registry: "ghcr.io"
           username: "${{ github.repository_owner }}"
@@ -180,14 +180,14 @@ jobs:
           persist-credentials: "false"
 
       - name: Login to GHCR
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121  # v4.1.0
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  # v4.2.0
         with:
           registry: "ghcr.io"
           username: "${{ github.repository_owner }}"
           password: "${{ secrets.GITHUB_TOKEN }}"
 
       - name: Login to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121  # v4.1.0
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  # v4.2.0
         with:
           registry: "docker.io"
           username: "${{ secrets.DOCKER_USER }}"

.github/workflows/security.yml

@@ -41,6 +41,6 @@ jobs:
           write-comment: "false"
 
       - name: Upload SARIFs
-        uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba  # v4.35.5
+        uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa  # v4.36.0
         with:
           sarif_file: "./scout.sarif"

requirements-dev.txt

@@ -20,9 +20,9 @@ aiounittest==1.5.0
 yamllint==1.38.0
 wlc==2.0.0
 coloredlogs==15.0.1
-docutils>=0.21.2;python_version <= "3.11"
+docutils>=0.23;python_version <= "3.11"
 docutils>=0.22.4; python_version > "3.11"
 parameterized==0.9.0
-granian[reload]==2.7.4
+granian[reload]==2.7.5
-basedpyright==1.39.5
+basedpyright==1.39.6
 types-lxml==2026.2.16

requirements-server.txt

@@ -1,2 +1,2 @@
-granian==2.7.4
+granian==2.7.5
-granian[pname]==2.7.4
+granian[pname]==2.7.5

requirements.txt

@@ -13,7 +13,7 @@ sniffio==1.3.1
 valkey==6.1.1
 markdown-it-py==4.2.0
 msgspec==0.21.1
-typer==0.25.1
+typer==0.26.3
 isodate==0.7.2
 whitenoise==6.12.0
 typing-extensions==4.15.0

searx/engines/pexels.py

@@ -9,7 +9,7 @@ from lxml import html
 from searx.result_types import EngineResults
 from searx.utils import eval_xpath_list, gen_useragent
 from searx.enginelib import EngineCache
-from searx.exceptions import SearxEngineAPIException
+from searx.exceptions import SearxEngineAPIException, SearxEngineAccessDeniedException
 from searx.network import get
 
 
@@ -58,6 +58,8 @@ def _get_secret_key():
             # circumvents Cloudflare bot protections
             "User-Agent": gen_useragent(),
             "Referer": base_url,
+            "Sec-GPC": "1",
+            "Connection": "keep-alive",
         },
     )
 
@@ -95,7 +97,7 @@ def request(query, params):
         try:
             secret_key = _get_secret_key()
             CACHE.set(SECRET_KEY_DB_KEY, secret_key)
-        except SearxEngineAPIException as e:
+        except (SearxEngineAPIException, SearxEngineAccessDeniedException) as e:
             logger.debug("failed to extract API key %s" % e)
             secret_key = api_key