Skip to content

Update all dependencies - #506

Merged
hluk merged 1 commit into
masterfrom
konflux/mintmaker/master/all-dependencies
Sep 1, 2026
Merged

hluk merged 1 commit into
masterfrom
konflux/mintmaker/master/all-dependencies

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
astral-sh/ruff-pre-commit repository patch v0.16.1v0.16.5 age confidence
astral-sh/setup-uv action major v9.0.0v10.0.1 age confidence
codespell-project/codespell repository patch v2.4.1v2.4.3 age confidence
gunicorn (changelog) project.dependencies minor >=26,<26.1>=26,<26.3 age confidence
hadolint/hadolint-action action minor v3.3.0v3.5.0 age confidence
pre-commit/mirrors-mypy repository patch v2.3.0v2.3.1 age confidence
redhat-actions/buildah-build (changelog) action digest 3a51aad719e3c4

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

v0.16.5

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.16.5

v0.16.4

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.16.4

v0.16.3

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.16.3

v0.16.2

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.16.2

astral-sh/setup-uv (astral-sh/setup-uv)

v10.0.1: 🌈 Tolerate transient manifest timeouts

Compare Source

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes
🧰 Maintenance
📚 Documentation

v10.0.0: 🌈 Disable automatic caching for sensitive events and new QOL features

Compare Source

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

  • pull_request_target
  • workflow_run
  • release

You can read the full reasoning in #​984

version: latest-known
- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions
- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"

Will now also set the python version if it is defined in .tool-versions. You can read the details in the docs

🚨 Breaking changes
🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
codespell-project/codespell (codespell-project/codespell)

v2.4.3

Compare Source

What's Changed

New Contributors

Full Changelog: codespell-project/codespell@v2.4.2...v2.4.3

v2.4.2

Compare Source

Highlights

  • Fixed compatibility with chardet 7+

What's Changed

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@codecov

codecov Bot commented Sep 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.53%. Comparing base (ae0322b) to head (5eb942f).

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #506   +/-   ##
=======================================
  Coverage   92.53%   92.53%           
=======================================
  Files          55       55           
  Lines        4272     4272           
  Branches      270      270           
=======================================
  Hits         3953     3953           
  Misses        264      264           
  Partials       55       55           
Flag Coverage Δ
unit-tests 92.53% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@hluk
hluk merged commit dcf8830 into master Sep 1, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant