[dependabot]

Bumps rsconnect-python from 1.30.0 to 1.32.0.

Changelog

Sourced from rsconnect-python's changelog.

[1.32.0] - 2026-10-16

• OAuth clients now register with Posit Connect as "Posit CLI", the name shown on the consent screen. Previously registered clients keep their existing name.
• Resumable device login stores approved tokens in a separate system keyring entry when available, keeping only a reference in pending state. Protected-file fallback and retries from existing plaintext checkpoints remain supported. Cloud retries preserve rotated tokens without replacing a saved login before account lookup completes.
• Credential files written through the default file backend are created with private permissions, and existing files have their permissions repaired before new credentials are written. Unchanged files also have their permissions repaired. Saves retain existing symlinks and hardlinks and can update writable files without write access to the parent directory.
• Authentication errors and verbose HTTP diagnostics omit provider-supplied error descriptions, response reasons and redirect headers that could expose credentials. OAuth response bodies and redirect destinations are also omitted from verbose logs, along with all OAuth response header values. Resumable Cloud account lookup uses the same protection. Encoded credential query names are redacted, and cookie diagnostics omit names as well as values.
• Generated manifests and bundles exclude .rsconnect-python directories and the configured CLI credential directory, including explicit extra files and symlink aliases. Publishing from inside that directory is rejected, including static notebook rendering before execution. Prepared bundle archives remain unchanged.
• login and add --connect-cloud can start device-code authentication and return approval details as JSON. Finish a pending login by nickname with --finish. Use --timeout to bound the entire finish invocation, including account lookup. Resumable login requires POSIX (Linux or macOS). Pending state is validated before saving and uses owner-only permissions. Connect Cloud finish retains the original OAuth client.
• Added rsconnect preflight to check Python and Node.js runtime availability on self-hosted Posit Connect and Snowpark Container Services (SPCS), from POSIX systems. For first publishes, it considers server installations marked publishable. Python preflight can add a missing .python-version for new content with no constraint; Node.js preflight checks package.json's engines.node range and server runtime availability. Preflight accepts Python file targets as well as directories. Its JSON reports distinguish unresolved checks from operational errors. Runtime incompatibility exits with status 3; operational errors exit with status 1. Unsafe or oversized deployment records return actionable uncertainty.
• write-manifest now writes requirements.txt with the same bytes that it uses for the manifest checksum. On Windows, the file had CRLF line endings and the checksum did not match. An existing requirements file with CRLF line endings also has the correct checksum now.
• rsconnect quickstart without --python now creates the project's virtual environment with the Python that runs rsconnect. Before, uv picked the newest installed Python that satisfied requires-python. Dependencies could then fail to install on a Python version so new that they had no wheels for it yet.
• On Python 3.9 and later, rsconnect-python now requires PyJWT 2.15.0 or later, which fixes several security advisories. Python 3.8 keeps the old minimum, because no fixed PyJWT release supports it.

... (truncated)

Commits

• 5d0f44d Release 1.32.0 (#873)
• 6b3e98b Harden credential storage, diagnostics, and generated bundles (#860)
• 814c243 Register OAuth client as "Posit CLI" (#871)
• e6cdd5f Add resumable device login and Python/Node.js preflight (#859)
• 73de425 chore(deps): bump the github-actions group across 1 directory with 6 updates ...
• ba755e8 chore(deps): upgrade uv.lock (#867)
• c781f9b chore: require PyJWT >= 2.15.0 on Python 3.9+; remove stale requirements file...
• 41a009f ci: upgrade uv.lock with a scheduled workflow instead of dependabot (#865)
• 9e83864 fix: quickstart builds the venv on the running Python (#864)
• 5b9cb3b ci: add dependabot for GitHub Actions and Python dependencies (#862)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)