chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
bandit (source, changelog)	1.7.8 -> 1.7.9					dev-dependencies	patch
docker/build-push-action	v5 -> v6					action	major
pytest (changelog)	8.2.1 -> 8.2.2					dev-dependencies	patch
python	3.12.3 -> 3.12.4						patch
python	3.12.3-slim-bookworm -> 3.12.4-slim-bookworm					final	patch
ruff (source, changelog)	0.4.6 -> 0.4.9					dev-dependencies	patch

---

Release Notes

PyCQA/bandit (bandit)

v1.7.9

Compare Source

What's Changed

• Bump docker/build-push-action from 5.1.0 to 5.2.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1117
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1119
• New logo for Bandit based on raccoon by @​ericwb in https://github.com/PyCQA/bandit/pull/1121
• Start testing on Python 3.13 by @​ericwb in https://github.com/PyCQA/bandit/pull/1122
• Bump docker/build-push-action from 5.2.0 to 5.3.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1123
• Bump docker/setup-buildx-action from 3.1.0 to 3.2.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1124
• Bump docker/login-action from 3.0.0 to 3.1.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1125
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1126
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1127
• Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1130
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1131
• Bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1132
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1133
• Updates banner logo so it renders well in dark mode by @​ericwb in https://github.com/PyCQA/bandit/pull/1134
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1135
• Add a sponsor section to README by @​ericwb in https://github.com/PyCQA/bandit/pull/1137
• Ensure sarif extra is included as part of doc build by @​ericwb in https://github.com/PyCQA/bandit/pull/1139
• Bump docker/login-action from 3.1.0 to 3.2.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1142
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1143
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in https://github.com/PyCQA/bandit/pull/1145
• Guard against empty call argument list by @​ericwb in https://github.com/PyCQA/bandit/pull/1146
• Bump docker/build-push-action from 5.3.0 to 5.4.0 by @​dependabot in https://github.com/PyCQA/bandit/pull/1144
• Support configfile in .bandit file by @​bersbersbers in https://github.com/PyCQA/bandit/pull/1052

New Contributors

• @​pre-commit-ci made their first contribution in https://github.com/PyCQA/bandit/pull/1119
• @​bersbersbers made their first contribution in https://github.com/PyCQA/bandit/pull/1052

Full Changelog: PyCQA/bandit@1.7.8...1.7.9

docker/build-push-action (docker/build-push-action)

v6

Compare Source

pytest-dev/pytest (pytest)

v8.2.2

Compare Source

pytest 8.2.2 (2024-06-04)

Bug Fixes

• #​12355: Fix possible catastrophic performance slowdown on a certain parametrization pattern involving many higher-scoped parameters.
• #​12367: Fix a regression in pytest 8.2.0 where unittest class instances (a fresh one is created for each test) were not released promptly on test teardown but only on session teardown.
• #​12381: Fix possible "Directory not empty" crashes arising from concurent cache dir (.pytest_cache) creation. Regressed in pytest 8.2.0.

Improved Documentation

• #​12290: Updated Sphinx theme to use Furo instead of Flask, enabling Dark mode theme.
• #​12356: Added a subsection to the documentation for debugging flaky tests to mention
  lack of thread safety in pytest as a possible source of flakyness.
• #​12363: The documentation webpages now links to a canonical version to reduce outdated documentation in search engine results.

astral-sh/ruff (ruff)

v0.4.9

Compare Source

Preview features

• [pylint] Implement consider-dict-items (C0206) (#​11688)
• [refurb] Implement repeated-global (FURB154) (#​11187)

Rule changes

• [pycodestyle] Adapt fix for E203 to work identical to ruff format (#​10999)

Formatter

• Fix formatter instability for lines only consisting of zero-width characters (#​11748)

Server

• Add supported commands in server capabilities (#​11850)
• Use real file path when available in ruff server (#​11800)
• Improve error message when a command is run on an unavailable document (#​11823)
• Introduce the ruff.printDebugInformation command (#​11831)
• Tracing system now respects log level and trace level, with options to log to a file (#​11747)

CLI

• Handle non-printable characters in diff view (#​11687)

Bug fixes

• [refurb] Avoid suggesting starmap when arguments are used outside call (FURB140) (#​11830)
• [flake8-bugbear] Avoid panic in B909 when checking large loop blocks (#​11772)
• [refurb] Fix misbehavior of operator.itemgetter when getter param is a tuple (FURB118) (#​11774)

v0.4.8

Compare Source

Performance

• Linter performance has been improved by around 10% on some microbenchmarks by refactoring the lexer and parser to maintain synchronicity between them (#​11457)

Preview features

• [flake8-bugbear] Implement return-in-generator (B901) (#​11644)
• [flake8-pyi] Implement PYI063 (#​11699)
• [pygrep_hooks] Check blanket ignores via file-level pragmas (PGH004) (#​11540)

Rule changes

• [pyupgrade] Update UP035 for Python 3.13 and the latest version of typing_extensions (#​11693)
• [numpy] Update NPY001 rule for NumPy 2.0 (#​11735)

Server

• Formatting a document with syntax problems no longer spams a visible error popup (#​11745)

CLI

• Add RDJson support for --output-format flag (#​11682)

Bug fixes

• [pyupgrade] Write empty string in lieu of panic when fixing UP032 (#​11696)
• [flake8-simplify] Simplify double negatives in SIM103 (#​11684)
• Ensure the expression generator adds a newline before type statements (#​11720)
• Respect per-file ignores for blanket and redirected noqa rules (#​11728)

v0.4.7

Compare Source

Preview features

• [flake8-pyi] Implement PYI064 (#​11325)
• [flake8-pyi] Implement PYI066 (#​11541)
• [flake8-pyi] Implement PYI057 (#​11486)
• [pyflakes] Enable F822 in __init__.py files by default (#​11370)

Formatter

• Fix incorrect placement of trailing stub function comments (#​11632)

Server

• Respect file exclusions in ruff server (#​11590)
• Add support for documents not exist on disk (#​11588)
• Add Vim and Kate setup guide for ruff server (#​11615)

Bug fixes

• Avoid removing newlines between docstring headers and rST blocks (#​11609)
• Infer indentation with imports when logical indent is absent (#​11608)
• Use char index rather than position for indent slice (#​11645)
• [flake8-comprehension] Strip parentheses around generators in C400 (#​11607)
• Mark repeated-isinstance-calls as unsafe on Python 3.10 and later (#​11622)

---

Configuration

📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.