chore(deps): update all dependencies #4900

renovate · 2026-01-12T00:39:21Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
RobertCraigie/pyright-python	repository	patch	`v1.1.407` → `v1.1.408`
astral-sh/ruff-pre-commit	repository	patch	`v0.14.10` → `v0.14.11`
astral-sh/uv-pre-commit	repository	patch	`0.9.22` → `0.9.24`
biomejs/pre-commit	repository	patch	`v2.3.10` → `v2.3.11`
build (changelog)	dependency-groups	minor	`1.3.0` → `1.4.0`
filelock		patch	`==3.20.1` → `==3.20.3`
filelock	project.dependencies	patch	`3.20.1` → `3.20.3`
ipython	dependency-groups	minor	`9.8.0` → `9.9.0`
pathspec		major	`==0.12.1` → `==1.0.3`
pathspec	project.dependencies	major	`>=0.10.3,<1.0.0` → `>=1.0.3,<1.1.0`
psutil	dependency-groups	patch	`7.2.0` → `7.2.1`
ruamel-yaml		minor	`==0.18.17` → `==0.19.1`
ruamel-yaml	dependency-groups	minor	`0.18.17` → `0.19.1`
ruff (source, changelog)	dependency-groups	patch	`0.14.10` → `0.14.11`
tombi-toml/tombi-pre-commit	repository	patch	`v0.7.15` → `v0.7.16`	`v0.7.17`
		lockFileMaintenance	All locks refreshed
ruamel-yaml	project.dependencies	minor	`0.18.17` → `0.19.1`
tox (changelog)	dependency-groups	minor	`4.32.0` → `4.34.1`
types-jsonschema (changelog)	dependency-groups	minor	`4.25.1.20251009` → `4.26.0.20260109`
uv (source, changelog)	dependency-groups	patch	`0.9.18` → `0.9.24`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

RobertCraigie/pyright-python (RobertCraigie/pyright-python)

`v1.1.408`

Compare Source

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

`v0.14.11`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.11

astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

`v0.9.24`

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.24

`v0.9.23`

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.23

biomejs/pre-commit (biomejs/pre-commit)

`v2.3.11`

Compare Source

pypa/build (build)

`v1.4.0`

Compare Source

==================

Add --quiet flag
(:pr:947)
Add option to dump PEP 517 metadata with --metadata
(:pr:940, :pr:943)
Support UV environment variable
(:pr:971)
Remove a workaround for 3.14b1
(:pr:960)
In 3.14 final release, color defaults to True already
(:pr:962)
Pass sp-repo-review
(:pr:942)
In pytest configuration, log_level is better than log_cli_level
(:pr:950)
Split up typing and mypy
(:pr:944)
Use types-colorama
(:pr:945)
In docs, first argument for _has_dependency is a name
(PR :pr:970)
Fix test failure when flit-core is installed
(PR :pr:921)

tox-dev/py-filelock (filelock)

`v3.20.3`

Compare Source

What's Changed

Fix TOCTOU symlink vulnerability in SoftFileLock by @gaborbernat in tox-dev/filelock#465

Full Changelog: tox-dev/filelock@3.20.2...3.20.3

`v3.20.2`

Compare Source

What's Changed

Support Unix systems without O_NOFOLLOW by @mwilliamson in tox-dev/filelock#463
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in tox-dev/filelock#464

New Contributors

@mwilliamson made their first contribution in tox-dev/filelock#463

Full Changelog: tox-dev/filelock@3.20.1...3.20.2

ipython/ipython (ipython)

`v9.9.0`

Compare Source

cpburnz/python-pathspec (pathspec)

`v1.0.3`

Compare Source

Bug fixes:

Issue #101_: pyright strict errors with pathspec >= 1.0.0.
Issue #102_: No module named 'tomllib'.

.. _Issue #101: #101
.. _Issue #102: #102

`v1.0.2`

Compare Source

Bug fixes:

Type hint collections.abc.Callable does not properly replace typing.Callable until Python 3.9.2.

`v1.0.1`

Compare Source

Bug fixes:

Issue #100_: ValueError(f"{patterns=!r} cannot be empty.") when using black.

.. _Issue #100: #100

`v1.0.0`

Compare Source

Bug fixes:

Issue #101_: pyright strict errors with pathspec >= 1.0.0.
Issue #102_: No module named 'tomllib'.

.. _Issue #101: #101
.. _Issue #102: #102

giampaolo/psutil (psutil)

`v7.2.1`

Compare Source

=====

2025-12-29

Bug fixes

2699_, [FreeBSD], [NetBSD]: heap_info()_ does not detect small allocations
(<= 1K). In order to fix that, we now flush internal jemalloc cache before
fetching the metrics.

astral-sh/ruff (ruff)

`v0.14.11`

Compare Source

Released on 2026-01-08.

Preview features

Consolidate diagnostics for matched disable/enable suppression comments (#22099)
Report diagnostics for invalid/unmatched range suppression comments (#21908)
[airflow] Passing positional argument into airflow.lineage.hook.HookLineageCollector.create_asset is not allowed (AIR303) (#22046)
[refurb] Mark FURB192 fix as always unsafe (#22210)
[ruff] Add non-empty-init-module (RUF067) (#22143)

Bug fixes

Fix GitHub format for multi-line diagnostics (#22108)
[flake8-unused-arguments] Mark **kwargs in TypeVar as used (ARG001) (#22214)

Rule changes

Add help: subdiagnostics for several Ruff rules that can sometimes appear to disagree with ty (#22331)
[pylint] Demote PLW1510 fix to display-only (#22318)
[pylint] Ignore identical members (PLR1714) (#22220)
[pylint] Improve diagnostic range for PLC0206 (#22312)
[ruff] Improve fix title for RUF102 invalid rule code (#22100)
[flake8-simplify]: Avoid unnecessary builtins import for SIM105 (#22358)

Configuration

Allow Python 3.15 as valid target-version value in preview (#22419)
Check required-version before parsing rules (#22410)
Include configured src directories when resolving graphs (#22451)

Documentation

Update T201 suggestion to not use root logger to satisfy LOG015 (#22059)
Fix iter example in unsafe fixes doc (#22118)
[flake8_print] better suggestion for basicConfig in T201 docs (#22101)
[pylint] Restore the fix safety docs for PLW0133 (#22211)
Fix Jupyter notebook discovery info for editors (#22447)

Contributors

tombi-toml/tombi-pre-commit (tombi-toml/tombi-pre-commit)

`v0.7.16`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.7.16

tox-dev/tox (tox)

`v4.34.1`

Compare Source

What's Changed

fix: wheel corruption when running parallel tox processes by @gaborbernat in #3667

Full Changelog: tox-dev/tox@4.34.0...4.34.1

`v4.34.0`

Compare Source

What's Changed

feat: Support depenedcy groups with self references by @Czaki in #3666

Full Changelog: tox-dev/tox@4.33.0...4.34.0

`v4.33.0`

Compare Source

What's Changed

Pass LOCALAPPDATA by default on Windows (#3639) by @clint-lawrence in #3640
Docs: Add caution about ranges like py{39-314} by @ferdnyc in #3652
CLI Parser: Drop epilog message for Sphinx help by @ferdnyc in #3653
📚 Integrate sphinx-issues extension by @webknjaz in #3655
Fix sphinx doc build by @gaborbernat in #3662
feat: add conditional set_env support via PEP-496 markers by @gaborbernat in #3663

New Contributors

@clint-lawrence made their first contribution in #3640
@ferdnyc made their first contribution in #3652

Full Changelog: tox-dev/tox@4.32.0...4.33.0

astral-sh/uv (uv)

`v0.9.24`

Compare Source

Released on 2026-01-09.

Bug fixes

Fix handling of UV_NO_SYNC=1 uv run ... (#17391)
Rebuild dynamic distribution when version changes with --no-cache (#17387)

Documentation

Add Rust language classifier (#17389)

`v0.9.23`

Compare Source

Released on 2026-01-09.

Enhancements

Only write portable paths in RECORD files (#17339)
Support relative paths in UV_PYTHON_BIN_DIR and UV_TOOL_BIN_DIR (#17367)

Preview features

Enable uploads to S3 via pre-signed URLs (#17349)

Configuration

Allow setting proxy variables via global / user configuration (#16918)
Manually parse and reconcile Boolean environment variables (#17321)

Bug fixes

Avoid broken build artifacts on build failure (#17276)
Fix missing dependencies on synthetic root in SBOM export (#17363)
Recognize armv8l as an alias for armv7l in platform tag parsing (#17384)
Fix redaction of a URL in a middleware trace log (#17346)

Documentation

Add index.md suggestion to llms.txt (#17362)
Clarify that uv run uses inexact syncing by default (#17366)

`v0.9.22`

Compare Source

Released on 2026-01-06.

Enhancements

Use a dedicated error message when lockfile can't be found (#17318)

Bug fixes

Filter unusable wheels from the lockfile for more architectures (#17317)
Correctly count retries originating from early middleware errors (#17274)

Documentation

Clarify requirements file format in docs (#17284)

`v0.9.21`

Compare Source

Released on 2025-12-30.

Bug fixes

Fix regression where zstd distribution hashes were not considered valid (#17265)

Documentation

Fix a typo in the resolution documentation (#17258)
Fix a typo in python install --default documentation (#9826)

`v0.9.20`

Released on 2025-12-29.

This is a re-release of 0.9.20, with internal crate versions incremented to enable publishing to crates.io.

`v0.9.19`

Released on 2025-12-29.

Python

Add CPython 3.15.0a3 (#17165)

Enhancements

Allow uv pip compile to install missing python interpreters in cases where it would otherwise fail (#17216)
Avoid creating file contents with uv init --bare --script (#17162)
Respect --torch-backend in uv tool commands (#17117)
Support comma-separated values in --no-binary and --only-binary (#17185)

Preview features

Summarize package changes in uv sync with JSON output format (#16981)

Performance

Avoid two hot String allocations in deserialization (#17221)
Cache NVIDIA-hosted wheels by default (#17164)

Bug fixes

Avoid enforcing incorrect hash in mixed-hash settings (#17157)
Fix retry counts in cached client (#17104)
Respect UV_PYTHON_DOWNLOAD_MIRROR in uv python list (#16673)
Support remote pylock.toml files (#17119)
Avoid flagging proxied Git URLs as ambiguous authority (#17234)
Fix dropped support of - in pip constraints, overrides, and excludes (#17188)

Configuration

📅 Schedule: Branch creation - "before 4am on monday" in timezone UTC, Automerge - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone UTC.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-01-12T00:41:30Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

chore(deps): update all dependencies

3c2e76a

renovate bot added chore dependencies labels Jan 12, 2026

renovate bot requested a review from a team as a code owner January 12, 2026 00:39

github-project-automation bot added this to 🧰 devtools project board Jan 12, 2026

renovate bot temporarily deployed to ack January 12, 2026 00:39 Inactive

github-actions bot added chore and removed chore labels Jan 12, 2026

ansibuddy enabled auto-merge (squash) January 12, 2026 00:39

ansibuddy approved these changes Jan 12, 2026

View reviewed changes

github-actions bot added the chore label Jan 12, 2026

ansibuddy approved these changes Jan 12, 2026

View reviewed changes

github-project-automation bot moved this to Review in 🧰 devtools project board Jan 12, 2026

ansibuddy approved these changes Jan 12, 2026

View reviewed changes

chore: auto fixes from pre-commit.com hooks

ffdafa8

pre-commit-ci bot temporarily deployed to ack January 12, 2026 00:40 Inactive

github-actions bot added chore and removed chore labels Jan 12, 2026

ansibuddy approved these changes Jan 12, 2026

View reviewed changes

robin-checkmk mentioned this pull request Jan 12, 2026

Bump ansible-lint from 25.12.2 to 26.1.0 Checkmk/ansible-collection-checkmk.general#984

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all dependencies #4900

chore(deps): update all dependencies #4900

renovate bot commented Jan 12, 2026

Uh oh!

renovate bot commented Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update all dependencies #4900

Are you sure you want to change the base?

chore(deps): update all dependencies #4900

Conversation

renovate bot commented Jan 12, 2026

Release Notes

What's Changed

What's Changed

New Contributors

Preview features

Bug fixes

Rule changes

Configuration

Documentation

Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Bug fixes

Documentation

Enhancements

Preview features

Configuration

Bug fixes

Documentation

Enhancements

Bug fixes

Documentation

Bug fixes

Documentation

Python

Enhancements

Preview features

Performance

Bug fixes

Configuration

Uh oh!

renovate bot commented Jan 12, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant