Update all dependencies by redhat-renovate-bot · Pull Request #345 · release-engineering/product-listings-manager

redhat-renovate-bot · 2025-06-16T00:21:08Z

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/ruff-pre-commit	repository	patch	`v0.11.12` -> `v0.11.13`
opentelemetry-exporter-otlp-proto-http	dependencies	minor	`1.22.0` -> `1.34.1`
postgres		digest	`f325a29` -> `fbe2160`
pycqa/bandit	repository	patch	`1.8.3` -> `1.8.5`
pytest-cov (changelog)	extras	minor	`6.1.1` -> `6.2.1`
quay.io/fedora/python-313	final	major	`20250528` -> `20250613`
renovatebot/pre-commit-hooks	repository	minor	`40.36.8` -> `40.59.2`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

`v0.11.13`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.11.13

open-telemetry/opentelemetry-python (opentelemetry-exporter-otlp-proto-http)

`v1.34.1`: Version 1.34.1/0.55b1

Compare Source

This is a patch release on the previous 1.34.0/0.55b0 release, fixing the issue(s) below.

opentelemetry-sdk: Fix invalid type: ignore that causes mypy to ignore the whole file (#4618)
Add span_exporter property back to BatchSpanProcessor class (#4621)

`v1.34.0`

Compare Source

typecheck: add sdk/resources and drop mypy
(#4578)
Use PEP702 for marking deprecations
(#4522)
Refactor BatchLogRecordProcessor and BatchSpanProcessor to simplify code
and make the control flow more clear (#4562
#4535, and
#4580).
Remove log messages from BatchLogRecordProcessor.emit, this caused the program
to crash at shutdown with a max recursion error (#4586).
Configurable max retry timeout for grpc exporter
(#4333)
opentelemetry-api: allow importlib-metadata 8.7.0
(#4593)
opentelemetry-test-utils: assert explicit bucket boundaries in histogram metrics
(#4595)
Bump semantic conventions to 1.34.0
(#4599)
Drop support for Python 3.8
(#4520)

`v1.33.1`: Version 1.33.1/0.54b1

Compare Source

This is a patch release on the previous 1.33.0/0.54b0 release, fixing the issue(s) below.

Remove log messages from BatchLogRecordProcessor.emit, this caused the program to crash at shutdown with a max recursion error (#4586).

`v1.33.0`

Compare Source

Fix intermittent Connection aborted error when using otlp/http exporters
(#4477)
opentelemetry-sdk: use stable code attributes: code.function -> code.function.name, code.lineno -> code.line.number, code.filepath -> code.file.path
(#4508)
Fix serialization of extended attributes for logs signal
(#4342)
Handle OTEL_PROPAGATORS contains None
(#4553)
docs: updated and added to the metrics and log examples
(#4559)
Bump semantic conventions to 1.33.0
(#4567)

`v1.32.1`: Version 1.32.1/0.53b1

Compare Source

This is a patch release on the previous 1.32.0/0.53b0 release, fixing the issue(s) below.

`v1.32.0`

Compare Source

Fix user agent in OTLP HTTP metrics exporter
(#4475)
Improve performance of baggage operations
(#4466)
sdk: remove duplicated constant definitions for environment_variables
(#4491)
api: Revert record BaseException change in trace_api.use_span()
(#4494)
Improve CI by cancelling stale runs and setting timeouts
(#4498)
Patch logging.basicConfig so OTel logs don't cause console logs to disappear
(#4436)
Bump semantic conventions to 1.32.0
(#4530)
Fix ExplicitBucketHistogramAggregation to handle multiple explicit bucket boundaries advisories
(#4521)
opentelemetry-sdk: Fix serialization of objects in log handler
(#4528)

`v1.31.1`: Version 1.31.1/0.52b1

Compare Source

This is a patch release on the previous 1.31.0/0.52b0 release, fixing the issue(s) below.

api: Revert record BaseException change in trace_api.use_span() (#4494)

`v1.31.0`

Compare Source

semantic-conventions: Bump to 1.31.0
(#4471)
Add type annotations to context's attach & detach
(#4346)
Fix OTLP encoders missing instrumentation scope schema url and attributes
(#4359)
prometheus-exporter: fix labels out of place for data points with different
attribute sets
(#4413)
Type indent parameter in to_json
(#4402)
Tolerates exceptions when loading resource detectors via OTEL_EXPERIMENTAL_RESOURCE_DETECTORS
(#4373)
Disconnect gRPC client stub when shutting down OTLPSpanExporter
(#4370)
opentelemetry-sdk: fix OTLP exporting of Histograms with explicit buckets advisory
(#4434)
opentelemetry-exporter-otlp-proto-grpc: better dependency version range for Python 3.13
(#4444)
opentelemetry-exporter-opencensus: better dependency version range for Python 3.13
(#4444)
Updated tracecontext-integration-test gitref to d782773b2cf2fa4afd6a80a93b289d8a74ca894d
(#4448)
Make trace_api.use_span() record BaseException as well as Exception
(#4406)
Fix env var error message for TraceLimits/SpanLimits
(#4458)
pylint-ci updated python version to 3.13
(#4450)
Fix memory leak in Log & Trace exporter
(#4449)

`v1.30.0`

Compare Source

Always setup logs sdk, OTEL_PYTHON_LOGGING_AUTO_INSTRUMENTATION_ENABLED only controls python logging module handler setup
(#4340)
Add attributes field in metrics.get_meter wrapper function
(#4364)
Add Python 3.13 support
(#4353)
sdk: don't log or print warnings when the SDK has been disabled
(#4371)
Fix span context manager typing by using ParamSpec from typing_extensions
(#4389)
Fix serialization of None values in logs body to match 1.31.0+ data model
(#4400)
[BREAKING] semantic-conventions: Remove opentelemetry.semconv.attributes.network_attributes.NETWORK_INTERFACE_NAME
introduced by mistake in the wrong module.
(#4391)
Add support for explicit bucket boundaries advisory for Histograms
(#4361)
semantic-conventions: Bump to 1.30.0
(#4337)

`v1.29.0`

Compare Source

Fix crash exporting a log record with None body
(#4276)
Fix metrics export with exemplar and no context and filtering observable instruments
(#4251)
Fix recursion error with sdk disabled and handler added to root logger
(#4259)
sdk: setup EventLogger when OTEL_PYTHON_LOGGING_AUTO_INSTRUMENTATION_ENABLED is set
(#4270)
api: fix logging of duplicate EventLogger setup warning
(#4299)
sdk: fix setting of process owner in ProcessResourceDetector
(#4311)
sdk: fix serialization of logs severity_number field to int
(#4324)
Remove TestBase.assertEqualSpanInstrumentationInfo method, use assertEqualSpanInstrumentationScope instead
(#4310)
sdk: instantiate lazily ExemplarBuckets in ExemplarReservoirs
(#4260)
semantic-conventions: Bump to 1.29.0
(#4337)

`v1.28.2`: Version 1.28.2/0.49b2

Compare Source

This is a patch release on the previous 1.28.1/0.49b1 release, fixing the issue(s) below.

Fix crash exporting a log record with None body (#4276)
sdk: setup EventLogger when OTEL_PYTHON_LOGGING_AUTO_INSTRUMENTATION_ENABLED is set (#4270)

`v1.28.1`: Version 1.28.1/0.49b1

Compare Source

This is a patch release on the previous 1.28.0/0.49b0 release, fixing the issue(s) below.

Fix metrics export with exemplar and no context and filtering observable instruments (#4251)
Fix recursion error with sdk disabled and handler added to root logger (#4259)

`v1.28.0`

Compare Source

Removed superfluous py.typed markers and added them where they were missing
(#4172)
Include metric info in encoding exceptions
(#4154)
sdk: Add support for log formatting
(#4137)
sdk: Add Host resource detector
(#4182)
sdk: Implementation of exemplars
(#4094)
Implement events sdk
(#4176)
Update semantic conventions to version 1.28.0
(#4218)
Add support to protobuf 5+ and drop support to protobuf 3 and 4
(#4206)
Update environment variable descriptions to match signal
(#4222)
Record logger name as the instrumentation scope name
(#4208)
Fix memory leak in exporter and reader
(#4224)
Drop OTEL_PYTHON_EXPERIMENTAL_DISABLE_PROMETHEUS_UNIT_NORMALIZATION environment variable
(#4217)
Improve compatibility with other logging libraries that override
LogRecord.getMessage() in order to customize message formatting
(#4216)

`v1.27.0`

Compare Source

Implementation of Events API
(#4054)
Make log sdk add exception.message to logRecord for exceptions whose argument
is an exception not a string message
(#4122)
Fix use of link.attributes.dropped, which may not exist
(#4119)
Running mypy on SDK resources
(#4053)
Added py.typed file to top-level module
(#4084)
Drop Final annotation from Enum in semantic conventions
(#4085)
Update log export example to not use root logger (#4090)
sdk: Add OS resource detector
(#3992)
sdk: Accept non URL-encoded headers in OTEL_EXPORTER_OTLP_*HEADERS to match other languages SDKs
(#4103)
Update semantic conventions to version 1.27.0
(#4104)
Add support to type bytes for OTLP AnyValue
(#4128)
Export ExponentialHistogram and ExponentialHistogramDataPoint
(#4134)
Implement Client Key and Certificate File Support for All OTLP Exporters
(#4116)
Remove _start_time_unix_nano attribute from _ViewInstrumentMatch in favor
of using time_ns() at the moment when the aggregation object is created
(#4137)

`v1.26.0`

Compare Source

Standardizing timeout calculation in measurement consumer collect to nanoseconds
(#4074)
optional scope attributes for logger creation
(#4035)
optional scope attribute for tracer creation
(#4028)
OTLP exporter is encoding invalid span/trace IDs in the logs fix
(#4006)
Update sdk process resource detector process.command_args attribute to also include the executable itself
(#4032)
Fix start_time_unix_nano for delta collection for explicit bucket histogram aggregation
(#4009)
Fix start_time_unix_nano for delta collection for sum aggregation
(#4011)
Update opentracing and opencesus docs examples to not use JaegerExporter
(#4023)
Do not execute Flask Tests in debug mode
(#3956)
When encountering an error encoding metric attributes in the OTLP exporter, log the key that had an error.
(#3838)
Fix ExponentialHistogramAggregation
(#3978)
Log a warning when a LogRecord in sdk/log has dropped attributes
due to reaching limits
(#3946)
Fix RandomIdGenerator can generate invalid Span/Trace Ids
(#3949)
Add Python 3.12 to tox
(#3616)
Improve resource field structure for LogRecords
(#3972)
Update Semantic Conventions code generation scripts:
- fix namespace exclusion that resulted in dropping os and net namespaces.
- add Final decorator to constants to prevent collisions
- enable mypy and fix detected issues
- allow to drop specific attributes in preparation for Semantic Conventions v1.26.0
  (#3973)
Update semantic conventions to version 1.26.0.
(#3964)
Use semconv exception attributes for record exceptions in spans
(#3979)
Fix _encode_events assumes events.attributes.dropped exists
(#3965)
Validate links at span creation
(#3991)
Add attributes field in MeterProvider.get_meter and InstrumentationScope
(#4015)
Fix inaccessible SCHEMA_URL constants in opentelemetry-semantic-conventions
(#4069)

`v1.25.0`

Compare Source

Fix class BoundedAttributes to have RLock rather than Lock
(#3859)
Remove thread lock by loading RuntimeContext explicitly.
(#3763)
Update proto version to v1.2.0
(#3844)
Add to_json method to ExponentialHistogram
(#3780)
Bump mypy to 1.9.0
(#3795)
Fix exponential histograms
(#3798)
Fix otlp exporter to export log_record.observed_timestamp
(#3785)
Add capture the fully qualified type name for raised exceptions in spans
(#3837)
Prometheus exporter sort label keys to prevent duplicate metrics when user input changes order
(#3698)
Update semantic conventions to version 1.25.0.
Refactor semantic-convention structure:
- SpanAttributes, ResourceAttributes, and MetricInstruments are deprecated.
- Attribute and metric definitions are now grouped by the namespace.
- Stable attributes and metrics are moved to opentelemetry.semconv.attributes
  and opentelemetry.semconv.metrics modules.
- Stable and experimental attributes and metrics are defined under
  opentelemetry.semconv._incubating import path.
  (#3586)
Rename test objects to avoid pytest warnings
([#3823] (https://github.com/open-telemetry/opentelemetry-python/pull/3823))
Add span flags to OTLP spans and links
(#3881)
Record links with invalid SpanContext if either attributes or TraceState are not empty
(#3917)
Add OpenTelemetry trove classifiers to PyPI packages
([#3913] (https://github.com/open-telemetry/opentelemetry-python/pull/3913))
Fix prometheus metric name and unit conversion
(#3924)
- this is a breaking change to prometheus metric names so they comply with the
  specification.
- you can temporarily opt-out of the unit normalization by setting the environment variable
  OTEL_PYTHON_EXPERIMENTAL_DISABLE_PROMETHEUS_UNIT_NORMALIZATION=true
- common unit abbreviations are converted to Prometheus conventions (s -> seconds),
  following the collector's implementation
- repeated _ are replaced with a single _
- unit annotations (enclosed in curly braces like {requests}) are stripped away
- units with slash are converted e.g. m/s -> meters_per_second.
- The exporter's API is not changed
Add parameters for Distros and configurators to configure autoinstrumentation in addition to existing environment variables.
(#3864)

`v1.24.0`

Compare Source

Make create_gauge non-abstract method
(#3817)
Make tracer.start_as_current_span() decorator work with async functions
(#3633)
Fix python 3.12 deprecation warning
(#3751)
bump mypy to 0.982
(#3776)
Add support for OTEL_SDK_DISABLED environment variable
(#3648)
Fix ValueError message for PeriodicExportingMetricsReader
(#3769)
Use BaseException instead of Exception in record_exception
(#3354)
Make span.record_exception more robust
(#3778)
Fix license field in pyproject.toml files
(#3803)

`v1.23.0`

Compare Source

Use Attribute rather than boundattribute in logrecord
(#3567)
Fix flush error when no LoggerProvider configured for LoggingHandler
(#3608)
Add Span.add_link() method to add link after span start
(#3618)
Fix OTLPMetricExporter ignores preferred_aggregation property
(#3603)
Logs: set observed_timestamp field
(#3565)
Add missing Resource SchemaURL in OTLP exporters
(#3652)
Fix loglevel warning text
(#3566)
Prometheus Exporter string representation for target_info labels
(#3659)
Logs: ObservedTimestamp field is missing in console exporter output
(#3564)
Fix explicit bucket histogram aggregation
(#3429)
Add code.lineno, code.function and code.filepath to all logs
(#3675)
Add Synchronous Gauge instrument
(#3462)
Drop support for 3.7
(#3668)
Include key in attribute sequence warning
(#3639)
Upgrade markupsafe, Flask and related dependencies to dev and test
environments (#3609)
Handle HTTP 2XX responses as successful in OTLP exporters
(#3623)
Improve Resource Detector timeout messaging
(#3645)
Add Proxy classes for logging
(#3575)
Remove dependency on 'backoff' library
(#3679)

pycqa/bandit (pycqa/bandit)

What's Changed

Add more random functions to B311 check by @aripollak in https://github.com/PyCQA/bandit/pull/1235
Metadata: rename classifier to classifiers by @ericwb in https://github.com/PyCQA/bandit/pull/1237
Bump sigstore/cosign-installer from 3.8.0 to 3.8.1 by @dependabot in https://github.com/PyCQA/bandit/pull/1239
Bump docker/build-push-action from 6.13.0 to 6.14.0 by @dependabot in https://github.com/PyCQA/bandit/pull/1238
Bump docker/build-push-action from 6.14.0 to 6.15.0 by @dependabot in https://github.com/PyCQA/bandit/pull/1240
Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @dependabot in https://github.com/PyCQA/bandit/pull/1241
Bump docker/login-action from 3.3.0 to 3.4.0 by @dependabot in https://github.com/PyCQA/bandit/pull/1245
Bump bandit version in bug template by @ericwb in https://github.com/PyCQA/bandit/pull/1247
Fix traceback from trojansource plugin by @ericwb in https://github.com/PyCQA/bandit/pull/1248
Ensure the man page is built by @ericwb in https://github.com/PyCQA/bandit/pull/1257
Update documentation to cover --severity-level and --confidence-level by @bmos in https://github.com/PyCQA/bandit/pull/1254
Use license property in lieu of classifier by @ericwb in https://github.com/PyCQA/bandit/pull/1259
Fix up some of the warnings when building docs by @ericwb in https://github.com/PyCQA/bandit/pull/1258
Add a doc describing various integrations by @ericwb in https://github.com/PyCQA/bandit/pull/1253
Use ubuntu latest for readthedocs build by @ericwb in https://github.com/PyCQA/bandit/pull/1260
Bump docker/build-push-action from 6.15.0 to 6.16.0 by @dependabot in https://github.com/PyCQA/bandit/pull/1261
Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in https://github.com/PyCQA/bandit/pull/1262
Remove etc from list of temp paths by @ericwb in https://github.com/PyCQA/bandit/pull/1263
Bump docker/build-push-action from 6.16.0 to 6.17.0 by @dependabot in https://github.com/PyCQA/bandit/pull/1265
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in https://github.com/PyCQA/bandit/pull/1266
Bump docker/build-push-action from 6.17.0 to 6.18.0 by @dependabot in https://github.com/PyCQA/bandit/pull/1268
add github-actions documentation by @Killpit in https://github.com/PyCQA/bandit/pull/1172

New Contributors

@aripollak made their first contribution in https://github.com/PyCQA/bandit/pull/1235
@bmos made their first contribution in https://github.com/PyCQA/bandit/pull/1254
@Killpit made their first contribution in https://github.com/PyCQA/bandit/pull/1172

Full Changelog: PyCQA/bandit@1.8.3...1.8.4

pytest-dev/pytest-cov (pytest-cov)

`v6.2.1`

Compare Source

Added a version requirement for pytest's pluggy dependency (1.2.0, released 2023-06-21) that has the required new-style hookwrapper API.
Removed deprecated license classifier (packaging).
Disabled coverage warnings in two more situations where they have no value:
- "module-not-measured" in workers
- "already-imported" in subprocesses

`v6.2.0`

Compare Source

The plugin now adds 3 rules in the filter warnings configuration to prevent common coverage warnings being raised as obscure errors::

default:unclosed database in <sqlite3.Connection object at:ResourceWarning
once::PytestCovWarning
once::CoverageWarning

This fixes most of the bad interactions that are occurring on pytest 8.4 with filterwarnings=error.

The plugin will check if there already matching rules for the 3 categories
(ResourceWarning, PytestCovWarning, CoverageWarning) and message (unclosed database in <sqlite3.Connection object at) before adding the filters.

This means you can have this in your pytest configuration for complete oblivion (not recommended, if that is not clear)::

filterwarnings = [
"error",
"ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning",
"ignore::PytestCovWarning",
"ignore::CoverageWarning",
]