chore(deps): update all dependencies #384
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ansibuddy
approved these changes
Oct 27, 2025
ansibuddy
approved these changes
Oct 27, 2025
github-project-automation
bot
moved this from Review
to Done
in 🧰 devtools project board
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.6.2->3.6.3v0.14.1->v0.14.20.9.3->0.9.50.7.3->0.7.40.7.6(+1)v4.0.1->v4.0.225.2->25.30.7.3->0.7.40.7.6(+1)4.0.1->4.0.20.14.1->0.14.24.31.0->4.32.00.9.4->0.9.5Note: The
pre-commitmanager in Renovate is not supported by thepre-commitmaintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.Release Notes
kislyuk/argcomplete (argcomplete)
v3.6.3Compare Source
===============================
Make RE PCRE compatible. Fixes #539
Only execute Python interpreters (#536)
fish: set variable scope to local to avoid clobbering global or
universal variables (#534)
Documentation and help improvements
astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)
v0.14.2Compare Source
See: https://github.com/astral-sh/ruff/releases/tag/0.14.2
astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)
v0.9.5Compare Source
See: https://github.com/astral-sh/uv/releases/tag/0.9.5
v0.9.4Compare Source
See: https://github.com/astral-sh/uv/releases/tag/0.9.4
jsh9/pydoclint (jsh9/pydoclint)
v0.7.4Compare Source
abstract method
pycqa/pylint (pycqa/pylint)
v4.0.2Compare Source
False Positives Fixed
Fix false positive for
invalid-nameon a partially uninferable module-level constant.Closes #10652
Fix a false positive for
invalid-nameon exclusive module-level assignmentscomposed of three or more branches. We won't raise
disallowed-nameon module-level names that can't be inferreduntil a further refactor to remove this false negative is done.
Closes #10664
Fix false positive for
invalid-nameforTypedDictinstances.Closes #10672
pypa/pip (pip)
v25.3Compare Source
pylint-dev/pylint (pylint)
v4.0.2Compare Source
False Positives Fixed
Fix false positive for
invalid-nameon a partially uninferable module-level constant.Closes #10652
Fix a false positive for
invalid-nameon exclusive module-level assignmentscomposed of three or more branches. We won't raise
disallowed-nameon module-level names that can't be inferreduntil a further refactor to remove this false negative is done.
Closes #10664
Fix false positive for
invalid-nameforTypedDictinstances.Closes #10672
astral-sh/ruff (ruff)
v0.14.2Compare Source
Released on 2025-10-23.
Preview features
flake8-gettext] Resolve qualified names and built-in bindings (INT001,INT002,INT003) (#19045)Bug fixes
fastapi] Handle ellipsis defaults inFAST002autofix (#20810)flake8-simplify] SkipSIM911when unknown arguments are present (#20697)pyupgrade] Always parenthesize assignment expressions in fix forf-string(UP032) (#21003)pyupgrade] FixUP032conversion for decimal ints with underscores (#21022)fastapi] Skip autofix for keyword and__debug__path params (FAST003) (#20960)Rule changes
flake8-bugbear] SkipB905andB912for fewer than two iterables and no starred arguments (#20998)ruff] UseDiagnosticTagfor morepyflakesandpandasrules (#20801)CLI
ruff rule(#20168)Documentation
Other changes
matchpatterns bind different names (#20682)Contributors
tox-dev/tox (tox)
v4.32.0Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/tox@4.31.0...4.32.0
astral-sh/uv (uv)
v0.9.5Compare Source
Released on 2025-10-21.
This release contains an upgrade to
astral-tokio-tar, which addresses a vulnerability in tar extraction on malformed archives with mismatching size information between the ustar header and PAX extensions. While theastral-tokio-taradvisory has been graded as "high" due its potential broader impact, the specific impact to uv is low due to a lack of novel attacker capability. Specifically, uv only processes tar archives from source distributions, which already possess the capability for full arbitrary code execution by design, meaning that an attacker gains no additional capabilities throughastral-tokio-tar.Regardless, we take the hypothetical risk of parser differentials very seriously. Out of an abundance of caution, we have assigned this upgrade an advisory: GHSA-w476-p2h3-79g9
Security
astral-tokio-tarto 0.5.6 to address a parsing differential (#16387)Enhancements
uv pip installfailure if the--systemflag is used to select an externally managed interpreter (#16318)Bug fixes
Documentation
Configuration
📅 Schedule: Branch creation - "before 4am on monday" in timezone UTC, Automerge - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone UTC.
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.