Skip to content

chore(deps): update all dependencies - #424

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all
Open

chore(deps): update all dependencies#424
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Apr 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
actions/checkout action major v6 → v7 age confidence
actions/setup-python action major v6 → v7 age confidence
actions/upload-artifact (changelog) action digest bbbca2d → 043fb46
ansible-core dependency-groups minor 2.20.5 → 2.21.4 age confidence
ansible/actions repository patch v1.1.0 → v1.1.2 age confidence
ansible/actions (changelog) action digest 96828a1 → b2b0657
astral-sh/setup-uv action major v7 → v10.0.1 v10.1.0 age confidence
astral-sh/uv-pre-commit repository minor 0.11.2 → 0.12.12 0.12.13 age confidence
biomejs/pre-commit repository minor v2.4.9 → v2.5.12 v2.5.13 age confidence
codecov/codecov-action action major v6 → v7 age confidence
coverage dependency-groups minor 7.13.5 → 7.16.0 age confidence
gitpython project.dependencies patch 3.1.47 → 3.1.62 age confidence
jdx/mise-action (changelog) action digest 1648a78 → c2a8761
mypy (changelog) dependency-groups major 1.20.2 → 2.3.1 age confidence
nox dependency-groups minor 2026.4.10 → 2026.8.17 age confidence
packaging dependency-groups minor 26.2 → 26.3 age confidence
packaging project.dependencies minor 26.2 → 26.3 age confidence
pip (changelog) dependency-groups minor 26.1 → 26.2.1 age confidence
pip (changelog) project.dependencies minor 26.1 → 26.2.1 age confidence
pipdeptree (changelog) dependency-groups major 2.35.1 → 4.2.5 age confidence
pipx (changelog) dependency-groups minor 1.11.1 → 1.17.2 age confidence
prek (source, changelog) dependency-groups minor 0.3.10 → 0.5.2 age confidence
pytest (changelog) dependency-groups minor 9.0.3 → 9.1.1 age confidence
pytest-benchmark (changelog) dependency-groups minor 5.2.3 → 5.3.0 age confidence
re-actors/alls-green (changelog) action digest 05ac938 → b5b5b37
release-drafter/release-drafter (changelog) action digest 139054a → 34d8067
ruff (source, changelog) dependency-groups minor 0.15.12 → 0.16.6 0.16.7 age confidence
setuptools (changelog) build-system.requires major 82.0.1 → 84.0.0 age confidence
setuptools (changelog) dependency-groups major 82.0.1 → 84.0.0 age confidence
setuptools (changelog) project.dependencies major 82.0.1 → 84.0.0 age confidence
softprops/action-gh-release action major v2 → v3 age confidence
tombi dependency-groups major 0.9.24 → 1.5.4 age confidence
tox (changelog) dependency-groups minor 4.53.0 → 4.61.4 age confidence
twine dependency-groups major 6.2.0 → 7.0.0 age confidence
typer (changelog) project.dependencies minor 0.25.0 → 0.27.2 age confidence
typing-extensions (changelog) project.dependencies minor 4.15.0 → 4.16.0 age confidence
uv (source, changelog) project.dependencies minor 0.11.7 → 0.12.12 0.12.13 age confidence
uv_build (source, changelog) build-system.requires minor >=0.11.2,<0.12.0 → >=0.12.12,<0.13.0 0.12.13 age confidence
zensical (changelog) dependency-groups patch 0.0.36 → 0.0.60 0.0.61 age confidence

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

v7.0.0

Compare Source

actions/setup-python (actions/setup-python)

v7.0.0

Compare Source

ansible/actions (ansible/actions)

v1.1.2

Compare Source

Fixes

Maintenance

v1.1.1

Compare Source

Fixes

Maintenance

astral-sh/setup-uv (astral-sh/setup-uv)

v10.0.1: 🌈 Tolerate transient manifest timeouts

Compare Source

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes
🧰 Maintenance
📚 Documentation

v10.0.0: 🌈 Disable automatic caching for sensitive events and new QOL features

Compare Source

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

  • pull_request_target
  • workflow_run
  • release

You can read the full reasoning in #​984

version: latest-known
- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions
- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"

Will now also set the python version if it is defined in .tool-versions. You can read the details in the docs

🚨 Breaking changes
🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v9.0.0

Compare Source

v8.3.2

Compare Source

v8.3.1

Compare Source

v8.3.0

Compare Source

v8.2.0: 🌈 New inputs quiet and download-from-astral-mirror

Compare Source

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details.
In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
⬆️ Dependency updates

v8.1.0: 🌈 New input no-project

Compare Source

Changes

This add the a new boolean input no-project.
It only makes sense to use in combination with activate-environment: true and will append --no project to the uv venv call. This is for example useful if you have a pyproject.toml file with parts unparseable by uv

🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v8.0.0: 🌈 Immutable releases and secure tags

Compare Source

This is the first immutable release of setup-uv 🥳

All future releases are also immutable, if you want to know more about what this means checkout the docs.

This release also has two breaking changes

New format for manifest-file

The previously deprecated way of defining a custom version manifest to control which uv versions are available and where to download them from got removed. The functionality is still there but you have to use the new format.

No more major and minor tags

To increase security even more we will stop publishing minor tags. You won't be able to use @v8 or @v8.0 any longer. We do this because pinning to major releases opens up users to supply chain attacks like what happened to tj-actions.

[!TIP]
Use the immutable tag as a version astral-sh/setup-uv@v8.0.0
Or even better the githash astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57

🚨 Breaking changes
🧰 Maintenance
astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

v0.12.12

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.12

v0.12.11

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.11

v0.12.10

Compare Source

v0.12.9

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.9

v0.12.8

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.8

v0.12.7

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.7

v0.12.6

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.6

v0.12.5

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.5

v0.12.4

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.4

v0.12.3

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.3

v0.12.2

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.2

v0.12.1

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.1

v0.12.0

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.12.0

v0.11.33

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.33

v0.11.32

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.32

v0.11.31

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.31

v0.11.30

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.30

v0.11.29

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.29

v0.11.28

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.28

v0.11.27

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.27

v0.11.26

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.26

v0.11.25

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.25

v0.11.24

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.24

v0.11.23

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.23

v0.11.22

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.22

v0.11.21

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.21

v0.11.20

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.20

v0.11.19

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.19

v0.11.18

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.18

v0.11.17

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.17

v0.11.16

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.16

v0.11.15

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.15

v0.11.14

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.14

v0.11.13

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.13

v0.11.12

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.12

v0.11.11

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.11

v0.11.10

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.10

v0.11.9

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.9

v0.11.8

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.8

v0.11.7

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.7

v0.11.6

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.6

v0.11.5

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.5

v0.11.4

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.4

v0.11.3

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.3

biomejs/pre-commit (biomejs/pre-commit)

v2.5.12

Compare Source

v2.5.11

Compare Source

v2.5.10

Compare Source

v2.5.9

Compare Source

v2.5.8

Compare Source

v2.5.7

Compare Source

v2.5.6

Compare Source

v2.5.5

Compare Source

v2.5.4

Compare Source

v2.5.3

Compare Source

v2.5.2

Compare Source

v2.5.1

Compare Source

v2.5.0

Compare Source

v2.4.16

Compare Source

v2.4.15

Compare Source

v2.4.14

Compare Source

v2.4.13

Compare Source

v2.4.12

Compare Source

v2.4.11

Compare Source

v2.4.10

Compare Source

codecov/codecov-action (codecov/codecov-action)

v7.0.0

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

❗ Important

✂ PR body was truncated to here.

@renovate renovate Bot added chore dependencies Pull requests that update a dependency file labels Apr 1, 2026
@renovate
renovate Bot requested a review from ssbarnea as a code owner April 1, 2026 13:58
github-actions[bot]
github-actions Bot approved these changes Apr 1, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved automated PR

@renovate
renovate Bot force-pushed the renovate/all branch 14 times, most recently from d82a832 to 5a24a90 Compare April 8, 2026 18:15
@renovate
renovate Bot force-pushed the renovate/all branch 11 times, most recently from bcade1b to 158c7ba Compare April 12, 2026 04:44
@renovate
renovate Bot force-pushed the renovate/all branch 11 times, most recently from ec16545 to 62910ee Compare April 24, 2026 19:46
@renovate
renovate Bot force-pushed the renovate/all branch 10 times, most recently from 7713406 to 04b11e8 Compare May 2, 2026 04:58
@renovate
renovate Bot force-pushed the renovate/all branch 7 times, most recently from 66c520d to fa6b3f8 Compare May 6, 2026 12:41
@renovate

renovate Bot commented Aug 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml
Artifact update for uv resolved to version 0.12.13, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.12.12
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for zensical resolved to version 0.0.61, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.0.60
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for ruff resolved to version 0.16.7, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.16.6
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes
@ssbarnea ssbarnea Awaiting requested review from ssbarnea ssbarnea is a code owner

Assignees

No one assigned

Labels

chore dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants