Update all dependencies#145
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
60e2355 to
b086190
Compare
b086190 to
7278fa1
Compare
0c3b0e4 to
2bca253
Compare
2bca253 to
93be112
Compare
93be112 to
2852862
Compare
2852862 to
b9bcc35
Compare
b9bcc35 to
40dd62b
Compare
ac1fc93 to
e2d7010
Compare
9961c9b to
519d9e0
Compare
519d9e0 to
1b3977d
Compare
7fd9518 to
5916ca8
Compare
5916ca8 to
5b82939
Compare
5b82939 to
35cc4fb
Compare
35cc4fb to
13c3c89
Compare
324d335 to
0e566a3
Compare
0e566a3 to
e529468
Compare
e529468 to
ef62e13
Compare
9f32c01 to
d86c012
Compare
35e0b5e to
dcbb315
Compare
dcbb315 to
2c4fcb4
Compare
2c4fcb4 to
8e5df27
Compare
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
8e5df27 to
9b19061
Compare
Member
|
This includes an update to poetry beyond our org standard version, so that will need to be removed from the PR first. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
7.0.0→7.3.0v4→v5v4→v6v4→v8v5→v6v4→v7^2.2.1→2.3.3^2.0.4→2.3.2^24.0.0→24.10.0~5.6.0→~6.1.0^7.0.0→7.14.1^1.7.5→1.7.8^7.0.0→7.3.0^2024.0.0→2024.2.26v0.40.0→v0.48.0^5.12.0→5.13.2^3.0.0→3.8.0v4.6.0→v6.0.05.13.2→8.0.1^0.9.3→0.9.41.8.3→2.4.124.4.2→26.5.1^7.0.0→7.4.7^2.0.0→2.0.0Note: The
pre-commitmanager in Renovate is not supported by thepre-commitmaintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.Release Notes
PyCQA/flake8 (PyCQA/flake8)
v7.3.0Compare Source
v7.2.0Compare Source
v7.1.2Compare Source
v7.1.1Compare Source
v7.1.0Compare Source
actions/cache (actions/cache)
v5.0.5Compare Source
What's Changed
Full Changelog: actions/cache@v5...v5.0.5
v5.0.4Compare Source
v5.0.3Compare Source
What's Changed
@actions/cacheto v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)@actions/coreto v2.0.3Full Changelog: actions/cache@v5...v5.0.3
v5.0.2Compare Source
v5.0.1Compare Source
v5.0.0Compare Source
v5Compare Source
actions/checkout (actions/checkout)
v6.0.3Compare Source
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.1Compare Source
What's Changed
Full Changelog: actions/checkout@v5...v5.0.1
v5.0.0Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/checkout@v4...v5.0.0
v5Compare Source
actions/download-artifact (actions/download-artifact)
v8.0.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v8...v8.0.1
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter tofalse.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: actions/download-artifact@v7...v8.0.0
v8Compare Source
v7.0.0Compare Source
v7 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v6.0.0...v7.0.0
v7Compare Source
v6.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v6.0.0by @danwkennedy in #438New Contributors
Full Changelog: actions/download-artifact@v5...v6.0.0
v6Compare Source
v5.0.0Compare Source
What's Changed
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
name: my-artifact→ extracted topath/(direct)artifact-ids: 12345→ extracted topath/my-artifact/(nested)Now both methods are consistent:
name: my-artifact→ extracted topath/(unchanged)artifact-ids: 12345→ extracted topath/(fixed - now direct)Migration Guide
✅ No Action Needed If:
merge-multiple: trueas a workaroundYou download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
To maintain old behavior (if needed):
New Contributors
Full Changelog: actions/download-artifact@v4...v5.0.0
v5Compare Source
actions/setup-python (actions/setup-python)
v6.2.0Compare Source
v6.1.0Compare Source
What's Changed
Enhancements:
pip-installinput by @gowridurgad in #1201Dependency and Documentation updates:
allow-prereleasesby @yarikoptic in #979New Contributors
Full Changelog: actions/setup-python@v6...v6.1.0
v6.0.0Compare Source
What's Changed
Breaking Changes
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Enhancements:
pip-versionby @priyagupta108 in #1129Bug fixes:
Dependency updates:
New Contributors
Full Changelog: actions/setup-python@v5...v6.0.0
v6Compare Source
actions/upload-artifact (actions/upload-artifact)
v7.0.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v7...v7.0.1
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v6...v7.0.0
v7Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.0Compare Source
v5Compare Source
agronholm/cbor2 (cbor2)
v6.1.2Compare Source
cbor2.load()crash caused by incorrect handling of internal read buffer extension during stream deserialization. (#307; PR by @noderyos)v6.1.1Compare Source
cbor2.load()returning corrupted data for payloads exceeding 4096 bytes (#304)v6.1.0Compare Source
allow_duplicate_keysparameter toCBORDecoder,loadandloads(default:True). When set toFalse, aCBORDecodeErroris raised upon encountering a duplicate key within the same map. (#283)memoryvieworbytearray) in addition tobytes(#297)v6.0.1Compare Source
v6.0.0Compare Source
v5.9.0Compare Source
max_depthdecoder parameter to limit the maximum allowed nesting level of containers, with a default value of 400 levels (CVE-2026-26209)read_sizefrom 4096 to 1 for backwards compatibility. The buffered reads introduced in 5.8.0 could cause issues when code needs to access the stream position after decoding. Users can opt-in to faster decoding by passingread_size=4096when they don't need to access the stream directly after decoding. Added a direct read path forread_size=1to avoid buffer management overhead. (#275; PR by @andreer)CBOREncoder.encode_shared()(#287)str_errorssetting when decoding strings, and improved string decoding performance by using stack allocation for small strings and eliminating unnecessary conditionals. Benchmarks show 9-17% faster deserialization. (#255; PR by @andreer)v5.8.0Compare Source
v5.7.1Compare Source
v5.7.0Compare Source
igorshubovych/markdownlint-cli (igorshubovych/markdownlint-cli)
v0.48.0Compare Source
Dependabotv0.47.0Compare Source
markdownlintdependency to0.40.0MD011/MD013/MD051/MD060Dependabotv0.46.0Compare Source
globdependency withtinyglobby(smaller and fewer dependencies)markdownlintdependency to0.39.0MD060/table-column-styleMD001/MD007/MD009/MD010/MD029/MD033/MD037/MD059Dependabotv0.45.0Compare Source
markdownlintdependency to0.38.0MD059/descriptive-link-textMD025/MD027/MD036/MD038/MD041/MD043/MD045/MD051/MD052Dependabotv0.44.0Compare Source
markdownlintdependency to0.37.4require, convert toimportMD032Dependabotv0.43.0Compare Source
markdownlintdependency to0.36.1MD051micromarkparser available to custom rulesDependabotv0.42.0Compare Source
markdownlintdependency to0.35.0MD058/blanks-around-tablesmicromarkinMD001/MD003/MD009/MD010/MD013/MD014/MD019/MD021/MD023/MD024/MD025/MD039/MD042/MD043MD018/MD020/MD031/MD034/MD044markdown-itparser no longer invoked by defaultDependabotv0.41.0: 0.41.0Compare Source
smol-tomlwhich supports v1.0.0 of the specificationDependabotpre-commit/pre-commit-hooks (pre-commit/pre-commit-hooks)
v6.0.0: pre-commit-hooks v6.0.0Compare Source
Fixes
check-shebang-scripts-are-executable: improve error message.Migrating
file-contents-sorter: disallow--uniqueand--ignore-caseat the sametime.
check-byte-order-markerandfix-encoding-pragma.check-byte-order-marker: migrate tofix-byte-order-marker.fix-encoding-pragma: migrate topyupgrade.v5.0.0: pre-commit-hooks v5.0.0Compare Source
Features
requirements-txt-fixer: also removepkg_resources==....check-illegal-windows-names: new hook!pretty-format-json: continue processing even if a file has a json error.Fixes
destroyed-symlinks: setstagesto[pre-commit, pre-push, manual]Migrating
pre-commit>=3.2.0.stages.pycqa/isort (pycqa/isort)
v8.0.1Compare Source
Changes
v8.0.0Compare Source
--old-findersand--magic-placementflags andold_findersconfiguration option. The legacy finder logic that relied on environment introspection has been removed (#2445) @joao-faria-devploneprofile to not clash withblack(#2456) @ale-rtv7.0.0Compare Source
Changes
💥 Breaking Changes
🚀 Features
🪲 Fixes
3.14and fix any bugs (#2425) @DanielNoord👷 Continuous Integration
ruffinstead ofblack(#2432) @DanielNoordruff(#2431) @DanielNoord📦 Dependencies
v6.1.0Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
python-poetry/poetry (python-poetry/poetry)
v2.4.1Compare Source
Changed
installer==0.7.0(#10887).Fixed
poetry update <package>failed when<package>was a transitive dependency (#10885).v2.4.0Compare Source
Added
solver.min-release-agesetting to require package releases to be a certain number of days old before they are considered during dependency resolution (#10824).solver.min-release-age-excludeto exclude selected packages from age filtering (#10824).solver.min-release-age-exclude-sourceto exclude all packages from selected package indexes from age filtering (#10824).Changed
poetry update(#10721).installer>=1.0.0(#10869).findpython>=0.8(#10874).Fixed
requires-pluginsfails on Windows if scheme paths are on different drives (#10869).poetry selfcommands failed due to an outdated lock file (#10715).poetry env activatedid not work for bash on Windows (#10716).poetry debug resolvefailed when there was a package with a marker (#10807).--config-settings(#10804).Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.