chore(deps): update all non-major dependencies (!22) · Merge requests · Information Services / DevOps / Django Libraries / External Settings · GitLab

FAQ | This is a LIVE service | Changelog

We are aware of a potential issue with using some sha256 digest to pull docker images (e.g. docker pull registry.gitlab.developers.cam.ac.uk/path/to/image@sha256:5e85dd....). Please use a tag or the most recent manifest digest.

This MR contains the following updates:

Package	Type	Update	Change	Age	Confidence
pre-commit/mirrors-mypy	repository	minor	`v1.16.1` -> `v1.17.0`
tox (changelog)		minor	`4.27.0` -> `4.28.1`
uis/devops/continuous-delivery/ci-templates	repository	minor	`v7.2.0` -> `v7.6.2`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

`v1.17.0`

tox-dev/tox (tox)

`v4.28.1`

What's Changed

Fix an issue number typo in changelog by @hroncok in https://github.com/tox-dev/tox/pull/3563
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in https://github.com/tox-dev/tox/pull/3564
Only use tarfile.data_filter when it's available by @gaborbernat in https://github.com/tox-dev/tox/pull/3566

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.0...4.28.1

`v4.28.0`

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in https://github.com/tox-dev/tox/pull/3548
[docs] Document how to require a plugin by @stephenfin in https://github.com/tox-dev/tox/pull/3552
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in https://github.com/tox-dev/tox/pull/3554
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in https://github.com/tox-dev/tox/pull/3558
Add [testenv] constraints option by @stephenfin in https://github.com/tox-dev/tox/pull/3556
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in https://github.com/tox-dev/tox/pull/3562
Allow disabling plugins on a one-off by @gaborbernat in https://github.com/tox-dev/tox/pull/3560

Full Changelog: https://github.com/tox-dev/tox/compare/4.27.0...4.28.0

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.6.2`: 7.6.2

7.6.2 (2025-07-22)

Bug Fixes

handling having set CI_APPLICATION_REPOSITORY with multi target docker builds (1dc6987)

`v7.6.1`: 7.6.1

7.6.1 (2025-07-16)

Bug Fixes

pin trivy to 0.54.0 (c4368bc), closes #128

`v7.6.0`: 7.6.0

7.6.0 (2025-07-10)

Features

terraform: add tfplan.json to artefact list (710623f)

Bug Fixes

terraform: restrict plan artefact access (723e094)

`v7.5.3`: 7.5.3

7.5.3 (2025-07-10)

`v7.5.2`: 7.5.2

7.5.2 (2025-07-10)

`v7.5.1`: 7.5.1

7.5.1 (2025-07-10)

Bug Fixes

maven.gitlab-ci.yml: added missing GKE_RUNNER_TAG for cache-debug job (22df4e5)

`v7.5.0`: 7.5.0

7.5.0 (2025-07-03)

Features

add compile_vulnerability_allowlist as a pre-req for the container_scanning job (94ae968)

`v7.4.0`: 7.4.0

7.4.0 (2025-07-01)

Features

keep trivy output in fixed directory (5ce35ee)

`v7.3.2`: 7.3.2

7.3.2 (2025-06-26)

`v7.3.1`: 7.3.1

7.3.1 (2025-06-26)

`v7.3.0`: 7.3.0

7.3.0 (2025-06-26)

Features

renovate: add all YAML files to gitlabci manager (1dc5db5)

`v7.2.2`: 7.2.2

7.2.2 (2025-06-26)

Bug Fixes

trivy: pin to version 0.54.0 (6c62401), closes #128

`v7.2.1`: 7.2.1

7.2.1 (2025-06-26)

Bug Fixes

trigger-renovatebot: pin httpie image (b4e2c7f), closes #129 #129

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.