Skip to content

chore(deps): update all dependencies - #424

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all
Open

chore(deps): update all dependencies#424
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Apr 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
actions/checkout action major v6 → v7 age confidence
actions/download-artifact (changelog) action digest 3e5f45b → 9000827
actions/setup-python action major v6 → v7 age confidence
actions/upload-artifact (changelog) action digest bbbca2d → cf430e0
ansible-core dependency-groups minor 2.19.9 → 2.21.5 age confidence
ansible/actions repository patch v1.1.0 → v1.1.2 age confidence
ansible/actions (changelog) action digest 9048781 → ee3cc15
ansible/actions (changelog) action digest 96828a1 → b2b0657
ansible/team-devtools (changelog) workflow digest a7f2500 → a8b84b3
astral-sh/setup-uv action major v7 → v10.3.3 age confidence
astral-sh/uv-pre-commit repository minor 0.11.2 → 0.13.6 age confidence
biomejs/pre-commit repository minor v2.4.9 → v2.6.4 age confidence
codecov/codecov-action action major v6 → v7 age confidence
coverage dependency-groups minor 7.13.5 → 7.17.0 age confidence
gitpython (changelog) project.dependencies minor 3.1.47 → 3.2.1 age confidence
jdx/mise-action action major v4 → v5 v5.2.5 age confidence
mypy (changelog) dependency-groups major 1.20.2 → 2.4.1 age confidence
nodeenv dependency-groups minor 1.10.0 → 1.11.1 1.12.0 age confidence
nox dependency-groups minor 2026.4.10 → 2026.10.20 age confidence
packaging dependency-groups minor 26.2 → 26.3 age confidence
packaging project.dependencies minor 26.2 → 26.3 age confidence
pip (changelog) dependency-groups minor 26.1 → 26.2.2 age confidence
pip (changelog) project.dependencies minor 26.1 → 26.2.2 age confidence
pipdeptree (changelog) dependency-groups major 2.35.1 → 4.2.13 age confidence
pipx (changelog) dependency-groups minor 1.11.1 → 1.18.10 1.18.11 age confidence
pluggy (changelog) project.dependencies minor 1.6.0 → 1.7.0 age confidence
prek (source, changelog) dependency-groups minor 0.3.10 → 0.5.7 0.5.9 (+1) age confidence
pytest (changelog) dependency-groups minor 9.0.3 → 9.2.0 age confidence
pytest-benchmark (changelog) dependency-groups minor 5.2.3 → 5.3.0 5.3.1 age confidence
python uses-with minor 3.14 → 3.15 age confidence
re-actors/alls-green (changelog) action digest 05ac938 → b5b5b37
release-drafter/release-drafter (changelog) action digest 139054a → 978bb0b
ruff (source, changelog) dependency-groups minor 0.15.12 → 0.17.3 age confidence
setuptools (changelog) build-system.requires major 82.0.1 → 84.2.1 age confidence
setuptools (changelog) dependency-groups major 82.0.1 → 84.2.1 age confidence
setuptools (changelog) project.dependencies major 82.0.1 → 84.2.1 age confidence
softprops/action-gh-release action major v2 → v3 age confidence
tombi dependency-groups major 0.9.24 → 1.9.8 age confidence
tox (changelog) dependency-groups minor 4.53.0 → 4.67.4 4.67.5 age confidence
twine dependency-groups major 6.2.0 → 7.0.0 age confidence
typer (changelog) project.dependencies minor 0.25.0 → 0.27.3 age confidence
typing-extensions (changelog) project.dependencies minor 4.15.0 → 4.16.0 age confidence
ubuntu github-runner major 24.04 → 26.04 age confidence
uv (source, changelog) project.dependencies minor 0.11.7 → 0.13.6 age confidence
uv_build (source, changelog) build-system.requires minor >=0.11.2,<0.12.0 → >=0.13.6,<0.14.0 age confidence
zensical (changelog) dependency-groups patch 0.0.36 → 0.0.73 0.0.74 age confidence

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

actions/checkout

v7.0.1

Compare Source

v7.0.0

Compare Source

  • Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
  • Various dependency updates
actions/setup-python

v7.1.0

Compare Source

What's Changed
Enhancements
Dependency Upgrade
New Contributors

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

v7.0.0

Compare Source

What's Changed

Enhancements
Bug Fix
Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

ansible/actions

v1.1.2

Compare Source

Fixes

Maintenance

v1.1.1

Compare Source

Fixes

Maintenance

astral-sh/setup-uv

v10.3.3: 🌈 Use Astral mirror for version manifests with GitHub fallback

Compare Source

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable.
(Known checksums are still checked, so the security impact does not change)

Also a big thank you to @​soujasK for a set of bugfixes 👏

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.3.2: 🌈 update known checksums for 0.13.5

Compare Source

Changes
🧰 Maintenance
📚 Documentation

v10.3.1: 🌈 preserve cache error class names in save-cache bundle

Compare Source

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.3.0: 🌈 Add Python architecture selection

Compare Source

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v10.2.0: 🌈 Disable automatic cache saves for merge queues

Compare Source

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v10.1.0: 🌈 New output python-runtime-idand respect NO_PROXY

Compare Source

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 (comment) for details on why this can be useful.

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v10.0.1: 🌈 Tolerate transient manifest timeouts

Compare Source

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes
🧰 Maintenance
📚 Documentation

v10.0.0: 🌈 Disable automatic caching for sensitive events and new QOL features

Compare Source

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

  • pull_request_target
  • workflow_run
  • release

You can read the full reasoning in #​984

version: latest-known
- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions
- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"

Will now also set the python version if it is defined in .tool-versions. You can read the details in the docs

🚨 Breaking changes
🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v9.0.0: 🌈 Change prune-cache default to false

Compare Source

Changes

This release disables the default cache cache pruning to ease the load on the PyPi infrastructure.
Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #​967

Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.

🚨 Breaking changes
🐛 Bug fixes
  • fix: fall back to distribution ID when os-release has no version field @​cxzhong (#​961)
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v8.3.2: 🌈 update known checksums for 0.11.28

Compare Source

Changes

Just a maintenance release

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v8.3.1: 🌈 update known checksums for 0.11.27

Compare Source

Changes

Just a maintenance release

🧰 Maintenance

📚 Documentation

v8.3.0: 🌈 Support uv.lock as a version-file source

Compare Source

Changes

Thanks to @​somaz94 you can now use the pinned version of uv itself in uv.lock. It gets picked up automatically.
If you have pinned another version of uv in your uv.lock you can use the inputs version or version-source to override this.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v8.2.0: 🌈 New inputs quiet and download-from-astral-mirror

Compare Source

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details.
In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

[!IMPORTANT]
✂ PR body was truncated to here.

@renovate renovate Bot added chore dependencies Pull requests that update a dependency file labels Apr 1, 2026
@renovate
renovate Bot requested a review from ssbarnea as a code owner April 1, 2026 13:58
github-actions[bot]
github-actions Bot approved these changes Apr 1, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved automated PR

@renovate
renovate Bot force-pushed the renovate/all branch 14 times, most recently from d82a832 to 5a24a90 Compare April 8, 2026 18:15
@renovate
renovate Bot force-pushed the renovate/all branch 11 times, most recently from bcade1b to 158c7ba Compare April 12, 2026 04:44
@renovate
renovate Bot force-pushed the renovate/all branch 10 times, most recently from ec16545 to 62910ee Compare April 24, 2026 19:46
@renovate
renovate Bot force-pushed the renovate/all branch 10 times, most recently from 7713406 to 04b11e8 Compare May 2, 2026 04:58
@renovate
renovate Bot force-pushed the renovate/all branch 7 times, most recently from 66c520d to fa6b3f8 Compare May 6, 2026 12:41
@renovate

renovate Bot commented Aug 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml
Artifact update for nodeenv resolved to version 1.12.0, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 1.11.1
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for pipx resolved to version 1.18.11, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 1.18.10
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for prek resolved to version 0.5.9, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.5.7
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for tox resolved to version 4.67.5, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 4.67.4
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for zensical resolved to version 0.0.74, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.0.73
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for prek resolved to version 0.5.9, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.5.7
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

@datadog-pycontribs

datadog-pycontribs Bot commented Sep 25, 2026 •
edited
Loading

Copy link
Copy Markdown

Pipelines

⚠️ Warnings

Your PR has warnings. Please review the issues below.

🚦 2 Pipeline jobs failed

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: f8f9704 | Docs | View more details | Give us feedback!

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes
@ssbarnea ssbarnea Awaiting requested review from ssbarnea ssbarnea is a code owner

Assignees

No one assigned

Labels

chore dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants