Repository navigation
fix(deps): update all non-major dependencies - #391
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
Contributor
Author
|
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
October 18, 2026 16:39
cf9dc6e to
18cd435
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
7 times, most recently
from
October 25, 2026 21:25
62f4116 to
631c143
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
November 2, 2026 19:29
314994a to
12954bf
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
11 times, most recently
from
November 12, 2026 19:08
ab2039e to
0472ca8
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
November 13, 2026 16:58
0472ca8 to
31e3649
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
November 13, 2026 23:11
31e3649 to
4e79b9b
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
v10.3.0→v10.3.3v0.17.0→v0.17.5>=2.13.1→>=2.16.0>=0.7.3→>=0.8.0v8.1.1→v8.1.3>=4.6.2→>=4.7.0>=9.1.1→>=9.2.0>=1.4.0→>=1.5.0>=0.17.0→>=0.17.5v2.9.2→v2.10.0>=8.3.0→>=8.5.0Note: The
pre-commitmanager in Renovate is not supported by thepre-commitmaintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.Release Notes
astral-sh/setup-uv
v10.3.3: 🌈 Use Astral mirror for version manifests with GitHub fallbackCompare Source
Changes
This release contains something that should have been included a very long time ago. Sorry for sleeping on that.
This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable.
(Known checksums are still checked, so the security impact does not change)
Also a big thank you to @soujasK for a set of bugfixes 👏
🐛 Bug fixes
🧰 Maintenance
📚 Documentation
v10.3.2: 🌈 update known checksums for 0.13.5Compare Source
Changes
🧰 Maintenance
📚 Documentation
v10.3.1: 🌈 preserve cache error class names in save-cache bundleCompare Source
Changes
This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn
##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.🐛 Bug fixes
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
charliermarsh/ruff-pre-commit
v0.17.5Compare Source
See: https://github.com/astral-sh/ruff/releases/tag/0.17.5
v0.17.4Compare Source
See: https://github.com/astral-sh/ruff/releases/tag/0.17.4
v0.17.3Compare Source
See: https://github.com/astral-sh/ruff/releases/tag/0.17.3
v0.17.2Compare Source
See: https://github.com/astral-sh/ruff/releases/tag/0.17.2
v0.17.1Compare Source
See: https://github.com/astral-sh/ruff/releases/tag/0.17.1
pydantic/httpx2 (httpx2)
v2.16.0Compare Source
Highlights
🍪 Faster requests with large cookie jars
Building the
Cookieheader no longer scans every cookie in the jar. The client reuses its jar instead of copying it on every request and redirect (#1284), only looks up the domains that can match the request host, and skips the expired cookie sweep until a cookie is due (#1285). With 1,000 cookies across 500 domains, building theCookieheader is about 18 times faster.Cookies from different domains are now sent from the least to the most specific domain, for example
.example.orgbeforesub.example.org, instead of in the order the domains were added. Cookies with longer paths still come first.httpx2
Changed
Cookieheader is about 18 times faster. Cookies from different domains are now sent from the least to the most specific domain (#1285).Fixed
client.cookies.jar.set_policy()now applies to outgoing requests (#1284).httpcore2
No changes since
2.15.1. Version bumped to stay in lockstep withhttpx2.Full Changelog: pydantic/httpx2@v2.15.1...v2.16.0
v2.15.1Compare Source
Highlights
🔒 Flat CPU usage for long-lived clients on Linux
On Linux, the default SSL context is now configured once instead of on every handshake (#1253). With OpenSSL older than 3.4, each handshake added a duplicate certificate lookup path, so CPU usage per request grew over the lifetime of a reused client. Certificate verification is unchanged, and Windows and macOS still use
truststore.httpx2
Fixed
httpcore2
Fixed
Full Changelog: pydantic/httpx2@v2.15.0...v2.15.1
v2.15.0Compare Source
Highlights
🐍 Python 3.11+ required
httpx2andhttpcore2no longer support Python 3.10 (#1274). There are no other changes in this release.httpx2
Removed
httpcore2
Removed
Full Changelog: pydantic/httpx2@v2.14.0...v2.15.0
v2.14.0Compare Source
Highlights
🌐 CIDR ranges in
NO_PROXYNO_PROXYandmountsnow match IP CIDR ranges like192.168.0.0/16and[fe80::]/10, so any address in the range bypasses the proxy (#1165). Bracketed IPv6 addresses like[::1]:8080are accepted, and unparseableNO_PROXYentries are ignored instead of failing client creation (#1267).🔐 FIPS-enforced Python support
httpx2now imports on FIPS-enforced Python builds withouthashlib.md5.DigestAuthraisesProtocolErroronly when the server asks for an unavailable algorithm (#1130).🔌 Sturdier connections and WebSocket shutdown
HTTP/2 reads no longer block when a server lowers
SETTINGS_MAX_CONCURRENT_STREAMSmid-flight (#1217), and writing after a peer closes TLS withoutclose_notifyraisesWriteError(#1263). Sync WebSocket sessions no longer hang on exit with a full event queue (#1123), and ASGI WebSocket reads after app shutdown no longer leakanyioexceptions (#1233).httpx2
Added
192.168.0.0/16and[fe80::]/10, inNO_PROXYandmounts. Requests to any address in the range now bypass the proxy; previously only the network address itself did (#1165).[::1]and[::1]:8080, inNO_PROXY(#1267).Changed
InvalidURLfor amountskey with an IP host followed by anything other than a valid CIDR prefix, likeall://10.0.0.0/33(#1165).Fixed
NO_PROXYentries that cannot be parsed, instead of raisingInvalidURLwhen the client is created (#1267).httpx2on FIPS-enforced Python builds withouthashlib.md5.DigestAuthraisesProtocolErrorwhen the server asks for an unavailable algorithm (#1130).anyioexceptions (#1233).httpcore2
Fixed
CONNECTand absolute-form proxy targets when the request sets thetargetextension (#1262).SETTINGS_MAX_CONCURRENT_STREAMSwhile requests are in flight (#1217).WriteErrorinstead ofanyio.EndOfStreamwhen writing after the peer closes a TLS connection withoutclose_notify(#1263).Full Changelog: pydantic/httpx2@v2.13.1...v2.14.0
Delgan/loguru (loguru)
v0.8.0Compare Source
=====================
#​856 <https://github.com/Delgan/loguru/pull/856>, thanks@tim-x-y-z <https://github.com/tim-x-y-z>).logger.reinstall()method to automatically set up theloggerin spawned child processes (#​818 <https://github.com/Delgan/loguru/issues/818>, thanks@monchin <https://github.com/monchin>).#​1397 <https://github.com/Delgan/loguru/issues/1397>, thanks@TurtleOrangina <https://github.com/TurtleOrangina>).record["template"]that includes the raw, unformatted message (#​1349 <https://github.com/Delgan/loguru/issues/1349>, thanks@sentrivana <https://github.com/sentrivana>).{time:x}(#​1440 <https://github.com/Delgan/loguru/issues/1440>_).#​1474 <https://github.com/Delgan/loguru/issues/1474>, thanks@c-tonneslan <https://github.com/c-tonneslan>)."<weekday> at <time>"rotation firing its first rotation on the creation day instead of the requested weekday when the time of day was later than the creation time (#​1484 <https://github.com/Delgan/loguru/pull/1484>, thanks@gaoflow <https://github.com/gaoflow>).#​1426 <https://github.com/Delgan/loguru/issues/1426>, thanks@turkoid <https://github.com/turkoid>).#​1537 <https://github.com/Delgan/loguru/issues/1537>_).f_linenovalue (#​1435 <https://github.com/Delgan/loguru/issues/1435>_).record["time"]when usingzoneinfo.ZoneInfotimezones (#​1260 <https://github.com/Delgan/loguru/pull/1260>, thanks@bijlpieter <https://github.com/bijlpieter>).ValueErrorraised on Windows when system clock was set far ahead in the future (#​1291 <https://github.com/Delgan/loguru/issues/1291>_).Exceptionpossibly causing invalid state generating repeatedRuntimeErrorof avoided deadlock (#​1335 <https://github.com/Delgan/loguru/issues/1335>_).#​1500 <https://github.com/Delgan/loguru/issues/1500>_).#​1501 <https://github.com/Delgan/loguru/issues/1501>_).Handlerrecords when usingenqueue=True(#​1527 <https://github.com/Delgan/loguru/issues/1527>_).catch=Truebeing ignored for exceptions raised during sink termination, such as file retention or compression triggered bylogger.remove()(#​1532 <https://github.com/Delgan/loguru/issues/1532>_).logger.parse()decoding log files with the locale encoding instead of UTF-8 when given a path, which failed on non-ASCII logs written using the file sink default encoding on Windows (#​1540 <https://github.com/Delgan/loguru/pull/1540>_).ExceptionGrouperrors, which used a plural for a single remaining exception and could miss the closing ruler (#​1541 <https://github.com/Delgan/loguru/pull/1541>, thanks@JeremyL691 <https://github.com/JeremyL691>)..levelattribute of standard loggingHandlerused as sink, which was previously ignored (#​1409 <https://github.com/Delgan/loguru/issues/1409>_).rotationargument of file sinks to accept a list of rotation conditions, any of which can trigger the rotation (#​1174 <https://github.com/Delgan/loguru/issues/1174>, thanks@CollinHeist <https://github.com/CollinHeist>).NO_COLORenvironment variable which disables color output by default ifcolorizeis not provided (#​1178 <https://github.com/Delgan/loguru/issues/1178>_).FORCE_COLORenvironment variable which enables color output by default ifcolorizeis not provided (#​1305 <https://github.com/Delgan/loguru/issues/1305>, thanks@nhurden <https://github.com/nhurden>).TERMenvironment variable not to be"dumb"to enable colorization (#​1287 <https://github.com/Delgan/loguru/pull/1287>, thanks@snosov1 <https://github.com/snosov1>).logger.catch()usable as an asynchronous context manager (#​1084 <https://github.com/Delgan/loguru/issues/1084>_).logger.catch()compatible with asynchronous generators (#​1302 <https://github.com/Delgan/loguru/issues/1302>_).#​1450 <https://github.com/Delgan/loguru/issues/1450>, thanks@Krishnachaitanyakc <https://github.com/Krishnachaitanyakc>).peter-evans/create-pull-request
v8.1.3: Create Pull Request v8.1.3Compare Source
What's Changed
Full Changelog: peter-evans/create-pull-request@v8.1.2...v8.1.3
v8.1.2: Create Pull Request v8.1.2Compare Source
What's Changed
uuiddep with Node.js built-incrypto.randomUUIDby @peter-evans in #4377sign-commitsby @MrSubidubi in #4473New Contributors
Full Changelog: peter-evans/create-pull-request@v8.1.1...v8.1.2
pre-commit/pre-commit (pre-commit)
v4.7.0Compare Source
==================
Fixes
language: nodehooks during commit with-aor inside a submodule.pytest-dev/pytest (pytest)
v9.2.0Compare Source
pytest 9.2.0 (2026-10-27)
Removals and backward incompatible breaking changes
#14716:
-cnow raises a usage error for a path that does not exist, is a directory, or is in a format pytest has no loader for. Such paths were previously either ignored or reported as an unhandledFileNotFoundError.#8593: The
indirect,idsandscopearguments ofMetafunc.parametrize() <pytest.Metafunc.parametrize>-- and therefore of@pytest.mark.parametrize <pytest.mark.parametrize ref>-- are now keyword-only.Passing them positionally was a common source of confusing errors, e.g.
parametrize("arg1", "arg2", [(1, 2)])made the argvalues land inindirectand failed withindirect fixture '(1, 2)' doesn't exist; such mistakes now fail with an understandableTypeError. The type annotations have always declared these arguments as keyword-only.#993: Plugin import failures at startup are now reported and classified instead of escaping as a raw traceback with the accidental exit code
1:-p,pytest_pluginsorPYTEST_PLUGINS-- exits withpytest.ExitCodeUSAGE_ERROR(4), like aconftest.pythat fails to import;pytest11entry point or a missing plugin dependency -- exits withpytest.ExitCodeINTERNAL_ERROR(3), with the traceback preserved.pytest.mainnow returns these codes instead of raisingImportError. Also fixed anIndexErrorfrom pytest's own internals when the plugin raised an exception with no arguments.Deprecations (removal in next major release)
#14742: The private
_pytest.python.CallSpec2name has been renamed toCallSpec.The old
CallSpec2alias remains available for now and will be removed in pytest 10 or 11.#14755: Schedule yield_fixture decorator for removal in pytest 10 or 11.
#14774: Similarly to the deprecation of class-scoped fixtures defined as instance methods in pytest 9.1,
all higher-scoped fixtures (
module,package, andsession) definedas instance methods are now deprecated.
They suffer from the same issue the original deprecation only fixed for
class-scoped fixtures, see
10819and14011.#14808: Passing a non-string value to a
string-typed ini option now emits apytest.PytestRemovedIn10Warning. This affects[tool.pytest.ini_options]inpyproject.toml. In pytest 10 this will raise aTypeError, matching the behavior of the corresponding TOML config path.#7323: Passing
bytestoTerminalReporter.write_line()is now deprecated, pass astrinstead.New features
strict_markersis enabled, marker names used in-mexpressions are now validated against registered markers.parametrize_long_str_id_strategyconfiguration option to control how longstr/bytesparameter values are handled in auto-generated test IDs. Explicit IDs set viaids=[...]orpytest.param(..., id=...)are not affected. Available strategies:short(default, values over 100 chars fall back toargname+index),sha256(SHA-256 hex digest),legacy(keep full value), anddisallow(error requesting explicit IDs).Improvements in existing functionality
#10745: A
RecursionErrorwhose recursion origin cannot be located now shows only thefirst and last 10 stack frames, matching what pytest already did when locating
the origin failed outright. Previously the full traceback -- often around a
thousand near-identical frames -- was rendered, which was both slow and
unreadable. Pass
--full-traceto see every frame.#10745: The line numbers of a module's statements are now computed once per traceback
instead of once per traceback entry, which noticeably speeds up rendering
failures raised from large test modules.
#11418: The cached rewritten modules in
__pycache__are now invalidated by a hash ofthe source instead of its modification time, using the checked-hash pyc format
from
552.Timestamps make the cache useless wherever source files get fresh modification
times, most notably in CI: a checkout gives every file a new mtime, so a
restored cache is discarded in full and every test module is rewritten again.
Hashing the source costs roughly 15 microseconds per file and makes the cache
survive that.
Existing timestamp based caches are ignored and rewritten once.
#12624: The
pytest_pluginsvariable and thePYTEST_PLUGINSenvironment variable now also accept entry point names of installed plugins (e.g.xdist), in addition to importable module names, matching the behavior of the-pcommand-line option.As part of this change, plugins specified by entry point name through these mechanisms are now also listed in the
plugins:line of the terminal header (12615).Based on the original implementation by Marcel Telka in
12616.#12697: Warnings emitted while importing plugins through
-p,PYTEST_PLUGINS, or entry point autoloading are now captured, filtered, and reported like other warnings.#12860: Assertion diffs for
dict.items()anddict.keys()comparisons (>=,<=,>,<,==) now show which items are missing, the same way set comparisons do.#13354:
Node.get_closest_marker <_pytest.nodes.Node.get_closest_marker>now also accepts a~pytest.MarkDecoratoras itsdefault, for exampleitem.get_closest_marker("foo", pytest.mark.foo(1)), and returns the wrapped~pytest.Mark.Previously the only way to build a
defaultwas to instantiate~pytest.Markdirectly, which is private and warns.#13369: Improved the error from
pytest.RunResult.assert_outcomeswhen a plugin changes or removes pytest's standard terminal summary, and documented how to isolate output-changing plugins.#13431: Exposed
pytest.ParameterSetas the type of the return value ofpytest.param().This can be used in type annotations and
isinstancechecks.#13564: Issue a warning when fixtures are wrapped with a decorator that prevents
correct discovery, including
@classmethodabove@pytest.fixtureand@staticmethodabove@pytest.fixture. Put@pytest.fixtureabovethose decorators on test classes.
#14164: Exposed
pytest.Approxas the type of the return value ofpytest.approx().This can be used in type annotations and
isinstancechecks.#14463: Assertion diffs for mappings now match up keys the way the compared mappings match them themselves.
Key comparison goes through the mappings' key views instead of plain sets of their keys, so a mapping
with its own notion of key equivalence, such as case-insensitive header mappings, no longer
reports its common keys as missing on either side.
#14523: Large assertion comparison diffs are now built lazily and capped to the
truncation budget, so a huge diff is no longer formatted in full just to
be truncated. As a consequence, the truncation footer no longer
reports the exact number of hidden lines.
#14687: The default fd-level output capturing (
--capture=fd) now skips reading the capture buffer for tests which produce no output, reducing per-test overhead in large test suites.#14724:
--no-summarynow only applies directly to pytest's own summary.The flag no longer skips the
pytest_terminal_summaryhook, so third-partyplugins (for example coverage) can still write their terminal summaries.
#14751:
parser.addini <pytest.Parser.addini>now also accepts type expressions for itstypeargument, in addition to the existing string tags: the plain Python typesstr,bool,int,float, aLiteralof strings, and unions of these (for exampleint | strorint | Literal["auto"]).#14754:
pytest.approx()now rejects infinite relative tolerances fordatetime.timedeltavalues with a clearValueErrorinstead of raisingOverflowError.#14791: The
junit_family,junit_logging,junit_duration_report,console_output_style,empty_parameter_set_mark,assertion_text_diff_styleandtmp_path_retention_policyconfiguration options are now registered with the set of values they accept: an invalid value now fails with a clean usage error instead of being silently ignored or crashing later, andpytest --helplists the accepted values.config.getini <pytest.Config.getini>now raisespytest.UsageErrorinstead ofTypeErrororValueErrorwhen the value read from the configuration file does not match the registered type, so a bad value is always reported as a short usage error message instead of an internal error traceback. Asking for an option name that was never registered still raisesValueError.#15006:
pytest.approxnow emitspytest.PytestApproxDecimalToleranceWarningwhen arelorabstolerance is given as afloatthat cannot be represented exactly for a~decimal.Decimalcomparison, since such a tolerance is widened to the float's exact binary value.#14675, #14953, #15153, #15132: The
truncation_limit_lines,truncation_limit_chars,max_warnings,verbosity_assertions,verbosity_test_cases,verbosity_subtests,tmp_path_retention_count,log_level,log_cli_level,log_file_level,log_auto_indentandfaulthandler_timeoutconfiguration options now accept native integer (and, forlog_auto_indent, boolean) values in TOML configuration files, while still accepting strings for backward compatibility.log_file_modenow reports invalid values as a usage error.#15254:
tmp_pathandTempPathFactory.mktemp <pytest.TempPathFactory.mktemp>no longer list the whole base temporary directory on every call, which made sessions with many temporary directories quadratically slow. Numbers are now handed out from a per-prefix counter, skipping names that already exist.#4569:
Node.add_marker <_pytest.nodes.Node.add_marker>now stores a~pytest.Markinnode.keywords, matching what marks applied during collection store. Previously it stored a~pytest.MarkDecorator.#9436: Avoided formatting tracebacks for tests marked with
xfail(run=False).Bug fixes
#10128: Configured warning filters now apply to warnings emitted by
pytest_configurehooks.#10210:
pytest.approxnow raises aTypeErrorfor any nested container, notonly for one of the same type as its parent. Previously
approx([{"k": 1}])and
approx({"k": [1]})were accepted and then compared unequal to everyvalue, silently ignoring the tolerance, while
approx([[1]])correctlyreported that nesting is unsupported.
#10644:
monkeypatch.setattr()no longer leaves a new entry in the instance__dict__when it patches an attribute that the instance inherits from its class.Previously
undo()assigned the inherited value onto the instance, which shadowed the class attribute -- permanently freezing the result for descriptors that resolve dynamically.#1139: Fixed tracebacks showing
???instead of source lines for code compiled with a filename relative to a directory other than the current working directory -- e.g. compiled Cython modules, when running pytest from a subdirectory of the project root.The source lookup now falls back to searching
sys.pathfor such filenames, as the standardtracebackmodule does.#11502: The
rootdiris no longer derived from a configuration file that is not a regular file, such as--config-file=/dev/null.#11783: Plugins installed in editable mode (
660) are marked for assertion rewriting again.Such installs do not record the package's Python files in the distribution metadata, so pytest found nothing to rewrite and assertions inside the plugin lost their introspection. The plugin's entry point is now used to locate the package in that case.
#11933:
pytest.warnsno longer re-emits unmatched warnings withmodule="warnings", which causedmodule-based warning filters to be applied to the wrong warnings. Sincewarnings.WarningMessagedoes not record the module a warning was emitted with, re-emitted warnings now use the standardwarnings.warn_explicitdefault of deriving the module from the warning's filename.#12175:
ExceptionInfo.exconly(tryshort=True) <pytest.ExceptionInfo.exconly>now strips theAssertionError:prefix of failedassertstatements for~pytest.ExceptionInfoobjects created bypytest.raises, and failures insideunittest.TestCase.subTestreport the same short crash line as regular tests.#12223: The
messageattribute of<failure>and<error>elements in--junitxmlreports is now shortened to whole lines within 500 characters. When something is dropped, it ends with a note pointing to the element text, which still holds the full report. Previously, very verbose assertion output (e.g. with-vv) produced attributes tens of thousands of characters long, which some XML parsers fail on.#12307: Fixed truncation of long collections (lists, dicts, sets, etc.) in the "message" part of failed assertions (as in
assert condition, msg) when using-vv: the message now uses the same unlimited repr as the rest of the assertion output, instead of eliding collection elements with....#12824: Custom command-line options now fail with a clear error when their implicit
destination conflicts with an existing option, avoiding silent overrides of
built-in
Configuration
📅 Schedule: (UTC)
* * * * 0,6)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.