Skip to content

chore(deps): update all dependencies#5011

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all
Open

chore(deps): update all dependencies#5011
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 6, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
ansible-creator (changelog) 26.3.0 → 26.4.3 age confidence dependency-groups minor
ansible/actions v1.1.0 → v1.1.2 age confidence repository patch
ansible/team-devtools v26.2.1 → v26.4.0 age confidence repository minor
astral-sh/setup-uv v7 → v8.1.0 age confidence action major
astral-sh/uv-pre-commit 0.10.9 → 0.11.8 age confidence repository minor
attrs (changelog) ==25.4.0 → ==26.1.0 age confidence major
biomejs/pre-commit v2.4.6 → v2.4.13 age confidence repository patch v2.4.14
build (changelog) 1.4.0 → 1.5.0 age confidence dependency-groups minor
check-jsonschema 0.37.0 → 0.37.1 age confidence dependency-groups patch
click (changelog) ==8.3.1 → ==8.3.3 age confidence patch
coverage 7.13.4 → 7.13.5 age confidence dependency-groups patch
filelock ==3.25.2 → ==3.29.0 age confidence minor
filelock 3.25.2 → 3.29.0 age confidence project.dependencies minor
ipython 9.11.0 → 9.13.0 age confidence dependency-groups minor
jendrikseipp/vulture v2.14 → v2.16 age confidence repository minor
mkdocs-ansible (changelog) 25.6.2 → 26.4.0 age confidence dependency-groups major
mypy (changelog) 1.19.1 → 1.20.2 age confidence dependency-groups minor
pathspec (changelog) ==1.0.4 → ==1.1.1 age confidence minor
pathspec (changelog) >=1.0.3,<1.1.0 → >=1.1.1,<1.2.0 age confidence project.dependencies minor
pipx (changelog) 1.8.0 → 1.11.1 age confidence dependency-groups minor
platformdirs (changelog) ==4.9.4 → ==4.9.6 age confidence patch
prek (source, changelog) 0.3.5 → 0.3.11 age confidence dependency-groups patch
prettier (source) 3.8.1 → 3.8.3 age confidence devDependencies patch
pyright 1.1.408 → 1.1.409 age confidence dependency-groups patch
ruff (source, changelog) 0.15.6 → 0.15.12 age confidence dependency-groups patch
setuptools-scm 9.2.2 → 10.0.5 age confidence dependency-groups major
setuptools_scm 9.2.2 → 10.0.5 age confidence build-system.requires major
tombi 0.9.6 → 0.10.1 age confidence dependency-groups minor 0.10.2
tomli (changelog) 2.4.0 → 2.4.1 age confidence dependency-groups patch
tox (changelog) 4.49.1 → 4.53.0 age confidence dependency-groups minor 4.53.1
tox-uv (changelog) 1.33.4 → 1.35.1 age confidence dependency-groups minor
types-jsonschema (changelog) 4.26.0.20260202 → 4.26.0.20260408 age confidence dependency-groups patch
types-pyyaml (changelog) 6.0.12.20250915 → 6.0.12.20260408 age confidence dependency-groups patch

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

ansible/ansible-creator (ansible-creator)

v26.4.3

Compare Source

Fixes

Maintenance

v26.4.2

Compare Source

Features

v26.4.1

Compare Source

Fixes

Maintenance

Contributors

@​NilashishC, @​anusshukla

v26.4.0

Compare Source

Fixes

Maintenance

v26.3.3

Compare Source

Features

Fixes

Maintenance

v26.3.2

Compare Source

Features

Fixes

v26.3.1

Compare Source

Fixes

Maintenance

ansible/actions (ansible/actions)

v1.1.2

Compare Source

Fixes

Maintenance

v1.1.1

Compare Source

Fixes

Maintenance

ansible/team-devtools (ansible/team-devtools)

v26.4.0

Compare Source

Fixes

Maintenance

v26.2.2

Compare Source

Maintenance

astral-sh/setup-uv (astral-sh/setup-uv)

v8.1.0: 🌈 New input no-project

Compare Source

Changes

This add the a new boolean input no-project.
It only makes sense to use in combination with activate-environment: true and will append --no project to the uv venv call. This is for example useful if you have a pyproject.toml file with parts unparseable by uv

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v8.0.0: 🌈 Immutable releases and secure tags

Compare Source

This is the first immutable release of setup-uv 🥳

All future releases are also immutable, if you want to know more about what this means checkout the docs.

This release also has two breaking changes

New format for manifest-file

The previously deprecated way of defining a custom version manifest to control which uv versions are available and where to download them from got removed. The functionality is still there but you have to use the new format.

No more major and minor tags

To increase security even more we will stop publishing minor tags. You won't be able to use @v8 or @v8.0 any longer. We do this because pinning to major releases opens up users to supply chain attacks like what happened to tj-actions.

[!TIP]
Use the immutable tag as a version astral-sh/setup-uv@v8.0.0
Or even better the githash astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57

🚨 Breaking changes
🧰 Maintenance
astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

v0.11.8

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.8

v0.11.7

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.7

v0.11.6

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.6

v0.11.5

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.5

v0.11.4

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.4

v0.11.3

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.3

v0.11.2

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.2

v0.11.1

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.1

v0.11.0

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.0

v0.10.12

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.10.12

v0.10.11

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.10.11

v0.10.10

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.10.10

python-attrs/attrs (attrs)

v26.1.0

Compare Source

Backwards-incompatible Changes
  • Field aliases are now resolved before calling field_transformer, so transformers receive fully populated Attribute objects with usable alias values instead of None.
    The new Attribute.alias_is_default flag indicates whether the alias was auto-generated (True) or explicitly set by the user (False).
    #​1509
Changes
  • Fix type annotations for attrs.validators.optional(), so it no longer rejects tuples with more than one validator.
    #​1496
  • The attrs.validators.disabled() contextmanager can now be nested.
    #​1513
  • Frozen classes can set on_setattr=attrs.setters.NO_OP in addition to None.
    #​1515
  • It's now possible to pass attrs instances in addition to attrs classes to attrs.fields().
    #​1529
biomejs/pre-commit (biomejs/pre-commit)

v2.4.13

Compare Source

v2.4.12

Compare Source

v2.4.11

Compare Source

v2.4.10

Compare Source

v2.4.9

Compare Source

v2.4.8

Compare Source

v2.4.7

Compare Source

pypa/build (build)

v1.5.0

Compare Source

What's Changed

Full Changelog: pypa/build@1.4.4...1.5.0

v1.4.4

Compare Source

What's Changed

Full Changelog: pypa/build@1.4.3...1.4.4

v1.4.3

Compare Source

What's Changed
New Contributors

Full Changelog: pypa/build@1.4.2...1.4.3

v1.4.2

Compare Source

What's Changed

New Contributors

Full Changelog: pypa/build@1.4.1...1.4.2

v1.4.1

Compare Source

What's Changed

Full Changelog: pypa/build@1.4.0...1.4.1

python-jsonschema/check-jsonschema (check-jsonschema)

v0.37.1

Compare Source

  • Update vendored schemas: buildkite, circle-ci, dependabot, github-workflows,
    gitlab-ci, mergify, readthedocs, renovate, woodpecker-ci (2026-03-25)
  • Add Changie.dev schema and pre-commit hook. Thanks :user:edgarrmondragon! (:pr:662)
pallets/click (click)

v8.3.3

Compare Source

v8.3.2

Compare Source

Released 2026-04-02

  • Fix handling of flag_value when is_flag=False to allow such options to be
    used without an explicit value. :issue:3084 :pr:3152
  • Hide Sentinel.UNSET values as None when using lookup_default().
    :issue:3136 :pr:3199 :pr:3202 :pr:3209 :pr:3212 :pr:3224
  • Prevent _NamedTextIOWrapper from closing streams owned by StreamMixer.
    :issue:824 :issue:2991 :issue:2993 :issue:3110 :pr:3139 :pr:3140
  • Add comprehensive tests for CliRunner stream lifecycle, covering
    logging interaction, multi-threaded safety, and sequential invocation
    isolation. Add high-iteration stress tests behind a stress marker
    with a dedicated CI job. :pr:3139
  • Fix callable flag_value being instantiated when used as a default via
    default=True. :issue:3121 :pr:3201 :pr:3213 :pr:3225
coveragepy/coveragepy (coverage)

v7.13.5

Compare Source

  • Fix: issue 2138_ describes a memory leak that happened when repeatedly
    using the Coverage API with in-memory data. This is now fixed.

  • Fix: the markdown-formatted coverage report didn't fully escape special
    characters in file paths (issue 2141). This would be very unlikely to
    cause a problem, but now it's done properly, thanks to Ellie Ayla <pull 2142_>    .

  • Fix: the C extension wouldn't build on VS2019, but now it does (issue 2145_).

.. _issue 2138: #​2138
.. _issue 2141: #​2141
.. _pull 2142: #​2142
.. _issue 2145: #​2145

.. _changes_7-13-4:

tox-dev/py-filelock (filelock)

v3.29.0

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.28.0...3.29.0

v3.28.0

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.27.0...3.28.0

ipython/ipython (ipython)

v9.13.0

Compare Source

v9.12.0

Compare Source

jendrikseipp/vulture (jendrikseipp/vulture)

v2.16

Compare Source

2.16 (2026-03-25)

  • Fix false positives for dead code after while loops (#​412, #​413, Jendrik Seipp).
  • Use ty instead of pytype for testing type annotations (Jendrik Seipp).

v2.15

Compare Source

2.15 (2026-03-04)

  • Handle while True loops without break statements (kreathon).
  • Add whitelist for ssl.SSLContext (tunnelsociety, #​392).
  • Add more ruff rules (even-even).
  • Drop support for Python 3.8 (Jendrik Seipp, #​398).
  • Add support for Python 3.14 (even-even).
ansible/mkdocs-ansible (mkdocs-ansible)

[v26.4.0](https://redirect.github.com/ansib

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • "before 4am on monday"
  • Automerge
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner April 6, 2026 01:47
@github-actions github-actions Bot added chore and removed chore labels Apr 6, 2026
@ansibuddy ansibuddy enabled auto-merge (squash) April 6, 2026 01:47
@github-actions github-actions Bot added chore and removed chore labels Apr 6, 2026
@github-actions github-actions Bot added chore and removed chore labels Apr 8, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Apr 19, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml
Artifact update for tombi resolved to version 0.10.2, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.10.1
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for tox resolved to version 4.53.1, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 4.53.0
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ansibuddy ansibuddy ansibuddy approved these changes

Assignees

No one assigned

Labels

chore dependencies

Projects

🧰 devtools project board
Status: Review

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ansibuddy