fix(deps): update all non-major dependencies (!26) · Merge requests · Information Services / DevOps / Django Libraries / External Settings

This MR contains the following updates:

Package	Change	Type	Update
coverage	`7.10.1` -> `7.11.0`	dev	minor
django (changelog)	`5.2.3` -> `5.2.7`	project.optional-dependencies	patch
faker (changelog)	`37.4.2` -> `37.12.0`	dev	minor
poetry (changelog)	`2.1.3` -> `2.2.1`		minor
pre-commit/mirrors-mypy	`v1.17.0` -> `v1.18.2`	repository	minor
psf/black	`25.1.0` -> `25.9.0`	repository	minor
pytest (changelog)	`8.4.1` -> `8.4.2`	dev	patch
pytest-cov (changelog)	`6.2.1` -> `6.3.0`	dev	minor
pytest-mock (changelog)	`3.14.1` -> `3.15.1`	dev	minor
pyyaml (source)	`6.0.2` -> `6.0.3`	project.dependencies	patch
timothycrosley/isort	`6.0.1` -> `6.1.0`	repository	minor
tox (changelog)	`4.28.1` -> `4.32.0`		minor
tox (changelog)	`4.27.0` -> `4.32.0`	dev	minor
uis/devops/continuous-delivery/ci-templates	`v7.6.2` -> `v7.19.2`	repository	minor
whitenoise (changelog)	`6.9.0` -> `6.11.0`	dev	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

nedbat/coveragepy (coverage)

`v7.11.0`

Compare Source

Dropped support for Python 3.9, declared support for Python 3.15 alpha.

.. _changes_7-10-7:

`v7.10.7`

Compare Source

Performance: with branch coverage in large files, generating HTML, JSON, or LCOV reports could take far too long due to some quadratic behavior when creating the function and class index pages. This is now fixed, closing issue 2048_. Thanks to Daniel Diniz for help diagnosing the problem.
Most warnings and a few errors now have links to a page in the docs explaining the specific message. Closes issue 1921_.

.. _issue 1921: #1921 .. _issue 2048: #2048

.. _changes_7-10-6:

`v7.10.6`

Compare Source

Fix: source directories were not properly communicated to subprocesses that ran in different directories, as reported in issue 1499_. This is now fixed.
Performance: Alex Gaynor continues fine-tuning <pull 2038_>_ the speed of combination, especially with many contexts.

.. _issue 1499: #1499 .. _pull 2038: #2038

.. _changes_7-10-5:

`v7.10.5`

Compare Source

Big speed improvements for coverage combine: it's now about twice as fast! Huge thanks to Alex Gaynor for pull requests 2032 <pull 2032_>, 2033 <pull 2033_>, and 2034 <pull 2034_>_.

.. _pull 2032: #2032 .. _pull 2033: #2033 .. _pull 2034: #2034

.. _changes_7-10-4:

`v7.10.4`

Compare Source

Added patch = fork for times when the built-in forking support is insufficient.
Fix: patch = execv also inherits the entire coverage configuration now.

.. _changes_7-10-3:

`v7.10.3`

Compare Source

Fixes for patch = subprocess:
- If subprocesses spawned yet more subprocesses simultaneously, some coverage could be missed. This is now fixed, closing issue 2024_.
- If subprocesses were created in other directories, their data files were stranded there and not combined into the totals, as described in issue 2025_. This is now fixed.
- On Windows (or maybe only some Windows?) the patch would fail with a ModuleNotFound error trying to import coverage. This is now fixed, closing issue 2022_.
- Originally only options set in the coverage configuration file would apply to subprocesses. Options set on the coverage run command line (such as --branch) wouldn't be communicated to the subprocesses. This could lead to combining failures, as described in issue 2021_. Now the entire configuration is used in subprocesses, regardless of its origin.
- Added debug=patch to help diagnose problems.
Fix: really close all SQLite databases, even in-memory ones. Closes issue 2017_.

.. _issue 2017: #2017 .. _issue 2021: #2021 .. _issue 2022: #2022 .. _issue 2024: #2024 .. _issue 2025: #2025

.. _changes_7-10-2:

`v7.10.2`

Compare Source

Fix: some code with NOP bytecodes could report missing branches that are actually executed. This is now fixed, closing issue 1999_. Python 3.9 still shows the problem.

.. _issue 1999: #1999

.. _changes_7-10-1:

django/django (django)

joke2k/faker (faker)

`v37.12.0`

Compare Source

Add french VAT number. Thanks @fabien-michel.

`v37.11.0`

Compare Source

Add French company APE code. Thanks @fabien-michel.

`v37.9.0`

Compare Source

Add names generation to en_KE locale. Thanks @titustum.

`v37.8.0`

Compare Source

Add Automotive providers for ja_JP locale. Thanks @ItoRino424.

`v37.7.0`

Compare Source

Add Nigerian name locales (yo_NG, ha_NG, ig_NG, en_NG). Thanks @ifeoluwaoladeji.

`v37.6.0`

Compare Source

Add Automotive providers for ko_KR locale. Thanks @ydj515.

`v37.5.3`

Compare Source

Allow Decimal type for min_value and max_value in pydecimal. Thanks @sshishov.

`v37.5.2`

Compare Source

Fix Turkish Republic National Number (TCKN) provider. Thanks @fleizean.

`v37.5.1`

Compare Source

Fix unnatural Korean company names in ko_KR locale. Thanks @r-4bb1t.

`v37.5.0`

Compare Source

Add Spanish lorem provider for es_ES, es_AR and es_MX. Thanks @Pandede.

`v37.4.3`

Compare Source

Fix male names in sv_SE locale. Thanks @peterk.

python-poetry/poetry (poetry)

`v2.2.1`

Compare Source

Fixed

Fix an issue where poetry self show failed with a message about an invalid output format (#10560).

Docs

Remove outdated statements about dependency groups (#10561).

poetry-core (`2.2.1`)

Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#888).

`v2.2.0`

Compare Source

Added

Add support for nesting dependency groups (#10166).
Add support for PEP 735 dependency groups (#10130).
Add support for PEP 639 license clarity (#10413).
Add a --format option to poetry show to alternatively output json format (#10487).
Add official support for Python 3.14 (#10514).

Changed

Normalize dependency group names (#10387).
Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#10278).
Improve log output during poetry install when a wheel is built from source (#10404).
Improve error message in case a file lock could not be acquired while cloning a git repository (#10535).
Require dulwich>=0.24.0 (#10492).
Allow virtualenv>=20.33 again (#10506).
Allow findpython>=0.7 (#10510).
Allow importlib-metadata>=8.7 (#10511).

Fixed

Fix an issue where poetry new did not create the project structure in an existing empty directory (#10431).
Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#10516).

poetry-core (`2.2.0`)

Deprecate table values and values that are not valid SPDX expressions for [project.license] (#870).
Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#874).
Fix an issue where marker operations could result in invalid markers (#875).

`v2.1.4`

Compare Source

Changed

Require virtualenv<20.33 to work around an issue where Poetry uses the wrong Python version (#10491).
Improve the error messages for the validation of the pyproject.toml file (#10471).

Fixed

Fix an issue where project plugins were installed even though poetry install was called with --no-plugins (#10405).
Fix an issue where dependency resolution failed for self-referential extras with duplicate dependencies (#10488).

Docs

Clarify how to include files that were automatically excluded via VCS ignore settings (#10442).
Clarify the behavior of poetry add if no version constraint is explicitly specified (#10445).

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

`v1.18.2`

Compare Source

`v1.18.1`

Compare Source

`v1.17.1`

Compare Source

psf/black (psf/black)

`v25.9.0`

Compare Source

Highlights

Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

Fix crash while formatting a long del statement containing tuples (#4628)
Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
Handle # fmt: skip followed by a comment at the end of file (#4635)
Fix crash when a tuple appears in the as clause of a with statement (#4634)
Fix crash when tuple is used as a context manager inside a with statement (#4646)
Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
Fix crash on a \\r\n (#4673)
Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
Fix crash on parenthesized expression inside a type parameter bound (#4684)
Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
Improve multiline_string_handling with ternaries and dictionaries (#4657)
Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
Wrap the in clause of comprehensions across lines if necessary (#4699)
Remove parentheses around multiple exception types in except and except* without as. (#4720)
Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

Rewrite tokenizer to improve performance and compliance (#4536)
Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

Avoid using an extra process when running with only one worker (#4734)

Integrations

Fix the version check in the vim file to reject Python 3.8 (#4567)
Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
Build gallery docker image with python3-slim and reduce image size (#4686)

Documentation

Add FAQ entry for windows emoji not displaying (#4714)

pytest-dev/pytest (pytest)

`v8.4.2`

Compare Source

pytest 8.4.2 (2025-09-03)

Bug fixes

#13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.
#13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.
#13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.
#13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.
#13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

#13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

#13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
#13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
#13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.

pytest-dev/pytest-cov (pytest-cov)

`v6.3.0`

Compare Source

Added support for markdown reports. Contributed by Marcos Boger in #712 <https://github.com/pytest-dev/pytest-cov/pull/712>_ and #714 <https://github.com/pytest-dev/pytest-cov/pull/714>_.
Fixed some formatting issues in docs. Anonymous contribution in #706 <https://github.com/pytest-dev/pytest-cov/pull/706>_.

pytest-dev/pytest-mock (pytest-mock)

`v3.15.1`

Compare Source

2025-09-16

#529 <https://github.com/pytest-dev/pytest-mock/issues/529>_: Fixed itertools._tee object has no attribute error -- now duplicate_iterators=True must be passed to mocker.spy to duplicate iterators.

`v3.15.0`

Compare Source

2025-09-04

Python 3.8 (EOL) is no longer supported.
#524 <https://github.com/pytest-dev/pytest-mock/pull/524>_: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.

yaml/pyyaml (pyyaml)

`v6.0.3`

Compare Source

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3

timothycrosley/isort (timothycrosley/isort)

`v6.1.0`

Compare Source

Add python 3.14 classifier and badge (#2409) @staticdev
- Drop use of non-standard pkg_resources API (#2405) @dvarrazzo

tox-dev/tox (tox)

`v4.32.0`

Compare Source

What's Changed

docs: Add Python 3.14 and 3.14t to config examples by @cclauss in #3626
Fix broken log message (in that branch it did not match the arguments). by @ionelmc in #3634
Allow braced range syntax in internal sections of tox.ini file by @marcosboger in #3631
fix: ensure log folder is created before writing the execution logs by @ssbarnea in #3633
TST: add weekly compatibility checks for CPython 3.15 by @neutrinoceros in #3629

New Contributors

@ionelmc made their first contribution in #3634
@marcosboger made their first contribution in #3631
@neutrinoceros made their first contribution in #3629

Full Changelog: https://github.com/tox-dev/tox/compare/4.31.0...4.32.0

`v4.31.0`

Compare Source

What's Changed

Address a type-conversion noted during doc builds by @kurtmckee in #3623
Add 3.14, drop 3.9 and support | union style by @gaborbernat in #3624

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.3...4.31.0

`v4.30.3`

Compare Source

What's Changed

Isolate the test suite from any existing DEFAULT_CONFIG_FILE file by @kurtmckee in #3612
Fix none config file issue 3611 by @kurtmckee in #3613
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3608
Fix incorrect type annotations in PythonPathPackageWithDeps (fixes #3607) by @PreistlyPython in #3616
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3615

New Contributors

@PreistlyPython made their first contribution in #3616

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.2...4.30.3

`v4.30.2`

Compare Source

What's Changed

Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 by @dependabot[bot] in #3603
Ensure automatically provisioned environment is torn down by @vytas7 in #3601
Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in /.github/workflows by @dependabot[bot] in #3604

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.1...4.30.2

`v4.30.1`

Compare Source

What's Changed

Prevent Tox from hanging with --installpkg sdist due to orphaned build backend by @vytas7 in #3530

New Contributors

@vytas7 made their first contribution in #3530

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.0...4.30.1

`v4.30.0`

Compare Source

What's Changed

Pass through CI as __TOX_ENVIRONMENT_VARIABLE_ORIGINAL_CI by @Liam-DeVoe in #3592
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3596
Fix the built docs HTML path hint in tox.toml by @webknjaz in #3594
Add a "version added" note for tox_extend_envs by @webknjaz in #3595
fix: provide clear messaging about config file loading by @ssbarnea in #3578
Ensure tox_extend_envs list can be read twice by @webknjaz in #3598

New Contributors

@Liam-DeVoe made their first contribution in #3592

Full Changelog: https://github.com/tox-dev/tox/compare/4.29.0...4.30.0

`v4.29.0`

Compare Source

What's Changed

Docs: environment variables contain strings by @hroncok in #3575
🐍 Fix sys_platform Fixture Leakage breaking the CI by @gaborbernat in #3589
Expose a new tox_extend_envs hook in plugins API by @webknjaz in #3591

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.4...4.29.0

`v4.28.4`

Compare Source

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3570
Pass ssh-agent variables by default by @daniilgankov in #3572

New Contributors

@daniilgankov made their first contribution in #3572

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.3...4.28.4

`v4.28.3`

Compare Source

What's Changed

Fix typo on cmd_build filter check expression by @gaborbernat in #3569

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.2...4.28.3

`v4.28.2`

Compare Source

What's Changed

Don't pass in the filter argument to tar.extractall on old Python versions by @gaborbernat in #3568

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.1...4.28.2

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.19.2`: 7.19.2

Compare Source

7.19.2 (2025-10-23)

Bug Fixes

maven.gitab-ci.yml: added missing GKE_RUNNER_TAG on build_artifact (470fc86)

`v7.19.1`: 7.19.1

Compare Source

7.19.1 (2025-10-23)

Bug Fixes

maven.gitlab-ci.yml: update publish to use CI_COMMIT_TAG for a release, or script for snapshot (e616bd4)

`v7.19.0`: 7.19.0

Compare Source

7.19.0 (2025-10-16)

Features

add poe-based test runner proof of concept (8e159c9)

`v7.18.0`: 7.18.0

Compare Source

7.18.0 (2025-10-02)

Features

python: remove Python 3.9 from default Python version list (6468459), closes #167

`v7.17.7`: 7.17.7

Compare Source

7.17.7 (2025-10-02)

Bug Fixes

python-tox: increase Kubernetes memory limit for python-tox jobs (461ab04)

`v7.17.6`: 7.17.6

Compare Source

7.17.6 (2025-10-01)

Bug Fixes

terraform: set kubernetes CPU requests for terraform jobs (5c75c2d)

`v7.17.5`: 7.17.5

Compare Source

7.17.5 (2025-09-30)

Bug Fixes

exclude modules example sub-dirs from trivy scan (3adf47a)

`v7.17.4`: 7.17.4

Compare Source

7.17.4 (2025-09-29)

Bug Fixes

yarn: bump k8s memory limit for yarn:pack jobs (739da6d), closes #158 #158

`v7.17.3`: 7.17.3

Compare Source

7.17.3 (2025-09-29)

`v7.17.2`: 7.17.2

Compare Source

7.17.2 (2025-09-25)

Bug Fixes

mandatory-jobs: reduce cpu and memory requests for SAST jobs (9d3526a)

`v7.17.1`: 7.17.1

Compare Source

7.17.1 (2025-09-25)

Bug Fixes

pre-commit: certdir variable must be an empty string (d608c55)

`v7.17.0`: 7.17.0

Compare Source

7.17.0 (2025-09-24)

Features

mandatory-jobs: increase runner resources for failing SAST jobs (cfb7fd5)

`v7.16.0`: 7.16.0

Compare Source

7.16.0 (2025-09-19)

Features

🎸 Move standard job to Generic GKE Runner (59d2a0e)

`v7.15.2`: 7.15.2

Compare Source

7.15.2 (2025-09-17)

`v7.15.1`: 7.15.1

Compare Source

7.15.1 (2025-09-11)

Bug Fixes

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)