fix(deps): update all non-major dependencies (!26) · Merge requests · Information Services / DevOps / Django Libraries / External Settings

This MR contains the following updates:

Package	Change	Type	Update
coverage	`7.10.1` → `7.13.3`	dev	minor
django (changelog)	`6.0.1` → `6.0.2`	project.optional-dependencies	patch
faker (changelog)	`37.4.2` → `37.12.0`	dev	minor
geddit	`2.1.5` → `2.1.6`	project.dependencies	patch
poetry (changelog)	`2.1.3` → `2.3.2`		minor
pre-commit/mirrors-mypy	`v1.17.0` → `v1.19.1`	repository	minor
pytest (changelog)	`8.4.1` → `8.4.2`	dev	patch
pytest-cov (changelog)	`6.2.1` → `6.3.0`	dev	minor
pytest-mock (changelog)	`3.14.1` → `3.15.1`	dev	minor
tox (changelog)	`4.28.1` → `4.34.1`		minor
tox (changelog)	`4.27.0` → `4.34.1`	dev	minor
uis/devops/continuous-delivery/ci-templates	`v7.6.2` → `v7.27.8`	repository	minor
whitenoise (changelog)	`6.9.0` → `6.11.0`	dev	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

coveragepy/coveragepy (coverage)

`v7.13.3`

Compare Source

Fix: in some situations, third-party code was measured when it shouldn't have been, slowing down test execution. This happened with layered virtual environments such as uv sometimes makes. The problem is fixed, closing issue 2082_. Now any directory on sys.path that is inside a virtualenv is considered third-party code.

.. _issue 2082: #2082

.. _changes_7-13-2:

`v7.13.2`

Compare Source

Fix: when Python is installed via symlinks, for example with Homebrew, the standard library files could be incorrectly included in coverage reports. This is now fixed, closing issue 2115_.
Fix: if a data file is created with no read permissions, the combine step would fail completely. Now a warning is issued and the file is skipped. Closes issue 2117_.

.. _issue 2115: #2115 .. _issue 2117: #2117

.. _changes_7-13-1:

`v7.13.1`

Compare Source

Added: the JSON report now includes a "start_line" key for function and class regions, indicating the first line of the region in the source. Closes issue 2110_.
Added: The debug data command now takes file names as arguments on the command line, so you can inspect specific data files without needing to set the COVERAGE_FILE environment variable.
Fix: the JSON report used to report module docstrings as executed lines, which no other report did, as described in issue 2105_. This is now fixed, thanks to Jianrong Zhao.
Fix: coverage.py uses a more disciplined approach to detecting where third-party code is installed, and avoids measuring it. This shouldn't change any behavior. If you find that it does, please get in touch.
Performance: data files that will be combined now record their hash as part of the file name. This lets us skip duplicate data more quickly, speeding the combining step.
Docs: added a section explaining more about what is considered a missing branch and how it is reported: :ref:branch_explain, as requested in issue 1597. Thanks to Ayisha Mohammed <pull 2092_>.
Tests: the test suite misunderstood what core was being tested if COVERAGE_CORE wasn't set on 3.14+. This is now fixed, closing issue 2109_.

.. _issue 1597: #1597 .. _pull 2092: #2092 .. _issue 2105: #2105 .. _issue 2109: #2109 .. _issue 2110: #2110

.. _changes_7-13-0:

`v7.13.0`

Compare Source

Feature: coverage.py now supports :file:.coveragerc.toml configuration files. These files use TOML syntax and take priority over :file:pyproject.toml but lower priority than :file:.coveragerc files. Closes issue 1643_ thanks to Olena Yefymenko <pull 1952_>_.
Fix: we now include a permanent .pth file which is installed with the code, fixing issue 2084. In 7.12.1b1 this was done incorrectly: it didn't work when using the source wheel (py3-none-any). This is now fixed. Thanks, Henry Schreiner <pull 2100_>.
Deprecated: when coverage.py is installed, it creates three command entry points: coverage, coverage3, and coverage-3.10 (if installed for Python 3.10). The second and third of these are not needed and will eventually be removed. They still work for now, but print a message about their deprecation.

.. _issue 1643: #1643 .. _pull 1952: #1952 .. _pull 2100: #2100

.. _changes_7-12-1b1:

`v7.12.0`

Compare Source

The HTML report now shows separate coverage totals for statements and branches, as well as the usual combined coverage percentage. Thanks to Ryuta Otsuka for the discussion <issue 2081_>_ and the implementation <pull 2085_>_.
The JSON report now includes separate coverage totals for statements and branches, thanks to Ryuta Otsuka <pull 2090_>_.
Fix: except* clauses were not handled properly under the "sysmon" measurement core, causing KeyError exceptions as described in issue 2086_. This is now fixed.
Fix: we now defend against aggressive mocking of open() that could cause errors inside coverage.py. An example of a failure is in issue 2083_.
Fix: in unusual cases where a test suite intentionally exhausts the system's file descriptors to test handling errors in open(), coverage.py would fail when trying to open source files, as described in issue 2091_. This is now fixed.
A small tweak to the HTML report: file paths now use thin spaces around slashes to make them easier to read.

.. _issue 2081: #2081 .. _issue 2083: #2083 .. _pull 2085: #2085 .. _issue 2086: #2086 .. _pull 2090: #2090 .. _issue 2091: #2091

.. _changes_7-11-3:

`v7.11.3`

Compare Source

Fix: the 7.11.1 changes meant that conflicts between a requested measurement core and other settings would raise an error. This was a breaking change from previous behavior, as reported in issue 2076_ and issue 2078_.

The previous behavior has been restored: when the requested core conflicts with other settings, another core is used instead, and a warning is issued.
For contributors: the repo has moved from Ned's nedbat GitHub account_ to the coveragepy GitHub organization_. The default branch has changed from master to main.

.. _issue 2076: #2076 .. _issue 2078: #2078 .. _nedbat GitHub account: https://github.com/nedbat .. _coveragepy GitHub organization: https://github.com/coveragepy

.. _changes_7-11-2:

`v7.11.2`

Compare Source

Fix: using the "sysmon" measurement core in 7.11.1, if Python code was claimed to come from a non-Python file, a NotPython exception could be raised. This could happen for example with Jinja templates compiled to Python, as reported in issue 2077_. This is now fixed.
Doc: corrected the first entry in the 7.11.1 changelog.

.. _issue 2077: #2077

.. _changes_7-11-1:

`v7.11.1`

Compare Source

Fix: some chanages to details of how the measurement core is chosen, and how conflicting settings are handled. The "sysmon" core cannot be used with some conurrency settings, with dynamic context, and in Python 3.12/3.13, with branch measurement.
- If the core is not specified and defaults to "sysmon" (Python 3.14+), but other settings conflict with sysmon, then the "ctrace" core will be used instead with no warning. For concurrency conflicts, this used to produce an error, as described in issue 2064_.
- If the "sysmon" core is explicitly requested in your configuration, but other settings conflict, an error is now raised. This used to produce a warning.
Fix: some multi-line case clauses or for loops (and probably other constructs) could cause incorrect claims of missing branches with the sys.monitoring core, as described in issue 2070_. This is now fixed.
Fix: when running in pytest under coverage, a breakpoint() would stop in the wrong frame, one level down from where it should, as described in issue 1420_. This was due to a coverage change in v6.4.1 that seemed to give a slight performance improvement, but I couldn't reproduce the performance gain, so it's been reverted, fixing the debugger problem.
A new debug option --debug=core shows which core is in use and why.
Split sqlite debugging information out of the sys :ref:coverage debug <cmd_debug> and :ref:cmd_run_debug options since it's bulky and not very useful.
Updated the :ref:howitworks page to better describe the three different measurement cores.

.. _issue 1420: #1420 .. _issue 2064: #2064 .. _issue 2070: #2070

.. _changes_7-11-0:

`v7.11.0`

Compare Source

Dropped support for Python 3.9, declared support for Python 3.15 alpha.

.. _changes_7-10-7:

`v7.10.7`

Compare Source

Performance: with branch coverage in large files, generating HTML, JSON, or LCOV reports could take far too long due to some quadratic behavior when creating the function and class index pages. This is now fixed, closing issue 2048_. Thanks to Daniel Diniz for help diagnosing the problem.
Most warnings and a few errors now have links to a page in the docs explaining the specific message. Closes issue 1921_.

.. _issue 1921: #1921 .. _issue 2048: #2048

.. _changes_7-10-6:

`v7.10.6`

Compare Source

Fix: source directories were not properly communicated to subprocesses that ran in different directories, as reported in issue 1499_. This is now fixed.
Performance: Alex Gaynor continues fine-tuning <pull 2038_>_ the speed of combination, especially with many contexts.

.. _issue 1499: #1499 .. _pull 2038: #2038

.. _changes_7-10-5:

`v7.10.5`

Compare Source

Big speed improvements for coverage combine: it's now about twice as fast! Huge thanks to Alex Gaynor for pull requests 2032 <pull 2032_>, 2033 <pull 2033_>, and 2034 <pull 2034_>_.

.. _pull 2032: #2032 .. _pull 2033: #2033 .. _pull 2034: #2034

.. _changes_7-10-4:

`v7.10.4`

Compare Source

Added patch = fork for times when the built-in forking support is insufficient.
Fix: patch = execv also inherits the entire coverage configuration now.

.. _changes_7-10-3:

`v7.10.3`

Compare Source

Fixes for patch = subprocess:
- If subprocesses spawned yet more subprocesses simultaneously, some coverage could be missed. This is now fixed, closing issue 2024_.
- If subprocesses were created in other directories, their data files were stranded there and not combined into the totals, as described in issue 2025_. This is now fixed.
- On Windows (or maybe only some Windows?) the patch would fail with a ModuleNotFound error trying to import coverage. This is now fixed, closing issue 2022_.
- Originally only options set in the coverage configuration file would apply to subprocesses. Options set on the coverage run command line (such as --branch) wouldn't be communicated to the subprocesses. This could lead to combining failures, as described in issue 2021_. Now the entire configuration is used in subprocesses, regardless of its origin.
- Added debug=patch to help diagnose problems.
Fix: really close all SQLite databases, even in-memory ones. Closes issue 2017_.

.. _issue 2017: #2017 .. _issue 2021: #2021 .. _issue 2022: #2022 .. _issue 2024: #2024 .. _issue 2025: #2025

.. _changes_7-10-2:

`v7.10.2`

Compare Source

Fix: some code with NOP bytecodes could report missing branches that are actually executed. This is now fixed, closing issue 1999_. Python 3.9 still shows the problem.

.. _issue 1999: #1999

.. _changes_7-10-1:

django/django (django)

`v6.0.2`

Compare Source

joke2k/faker (faker)

`v37.12.0`

Compare Source

Add french VAT number. Thanks @fabien-michel.

`v37.11.0`

Compare Source

Add French company APE code. Thanks @fabien-michel.

`v37.9.0`

Compare Source

Add names generation to en_KE locale. Thanks @titustum.

`v37.8.0`

Compare Source

Add Automotive providers for ja_JP locale. Thanks @ItoRino424.

`v37.7.0`

Compare Source

Add Nigerian name locales (yo_NG, ha_NG, ig_NG, en_NG). Thanks @ifeoluwaoladeji.

`v37.6.0`

Compare Source

Add Automotive providers for ko_KR locale. Thanks @ydj515.

`v37.5.3`

Compare Source

Allow Decimal type for min_value and max_value in pydecimal. Thanks @sshishov.

`v37.5.2`

Compare Source

Fix Turkish Republic National Number (TCKN) provider. Thanks @fleizean.

`v37.5.1`

Compare Source

Fix unnatural Korean company names in ko_KR locale. Thanks @r-4bb1t.

`v37.5.0`

Compare Source

Add Spanish lorem provider for es_ES, es_AR and es_MX. Thanks @Pandede.

`v37.4.3`

Compare Source

Fix male names in sv_SE locale. Thanks @peterk.

python-poetry/poetry (poetry)

`v2.3.2`

Compare Source

Changed

Allow dulwich>=1.0 (#10701).

poetry-core (`2.3.1`)

Fix an issue where platform_release could not be parsed on Windows Server (#911).

`v2.3.1`

Compare Source

Fixed

Fix an issue where cached information about each package was always considered outdated (#10699).

Docs

Document SHELL_VERBOSITY environment variable (#10678).

`v2.3.0`

Compare Source

Added

Add support for exporting pylock.toml files with poetry-plugin-export (#10677).
Add support for specifying build constraints for dependencies (#10388).
Add support for publishing artifacts whose version is determined dynamically by the build-backend (#10644).
Add support for editable project plugins (#10661).
Check requires-poetry before any other validation (#10593).
Validate the content of project.readme when running poetry check (#10604).
Add the option to clear all caches by making the cache name in poetry cache clear optional (#10627).
Automatically update the cache for packages where the locked files differ from cached files (#10657).
Suggest to clear the cache if running a command with --no-cache solves an issue (#10585).
Propose poetry init when trying poetry new for an existing directory (#10563).
Add support for poetry publish --skip-existing for new Nexus OSS versions (#10603).
Show Poetry's own Python's path in poetry debug info (#10588).

Changed

Drop support for Python 3.9 (#10634).
Change the default of installer.re-resolve from true to false (#10622).
PEP 735 dependency groups are considered in the lock file hash (#10621).
Deprecate poetry.utils._compat.metadata, which is sometimes used in plugins, in favor of importlib.metadata (#10634).
Improve managing free-threaded Python versions with poetry python (#10606).
Prefer JSON API to HTML API in legacy repositories (#10672).
When running poetry init, only add the readme field in the pyproject.toml if the readme file exists (#10679).
Raise an error if no hash can be determined for any distribution link of a package (#10673).
Require dulwich>=0.25.0 (#10674).

Fixed

Fix an issue where poetry remove did not work for PEP 735 dependency groups with include-group items (#10587).
Fix an issue where poetry remove caused dangling include-group references in PEP 735 dependency groups (#10590).
Fix an issue where poetry add did not work for PEP 735 dependency groups with include-group items (#10636).
Fix an issue where PEP 735 dependency groups were not considered in the lock file hash (#10621).
Fix an issue where wrong markers were locked for a dependency that was required by several groups with different markers (#10613).
Fix an issue where non-deterministic markers were created in a method used by poetry-plugin-export (#10667).
Fix an issue where wrong wheels were chosen for installation in free-threaded Python environments if Poetry itself was not installed with free-threaded Python (#10614).
Fix an issue where poetry publish used the metadata of the project instead of the metadata of the build artifact (#10624).
Fix an issue where poetry env use just used another Python version instead of failing when the requested version was not supported by the project (#10685).
Fix an issue where poetry env activate returned the wrong command for dash (#10696).
Fix an issue where data-dir and python.installation-dir could not be set (#10595).
Fix an issue where Python and pip executables were not correctly detected on Windows (#10645).
Fix an issue where invalid template variables in virtualenvs.prompt caused an incomprehensible error message (#10648).

Docs

Add a warning about ~/.netrc for Poetry credential configuration (#10630).
Clarify that the local configuration takes precedence over the global configuration (#10676).
Add an explanation in which cases packages are automatically detected (#10680).

poetry-core (`2.3.0`)

Normalize versions (#893).
Fix an issue where unsatisfiable requirements did not raise an error (#891).
Fix an issue where the implicit main group did not exist if it was explicitly declared as not having any dependencies (#892).
Fix an issue where python_full_version markers with pre-release versions were parsed incorrectly (#893).

`v2.2.1`

Compare Source

Fixed

Fix an issue where poetry self show failed with a message about an invalid output format (#10560).

Docs

Remove outdated statements about dependency groups (#10561).

poetry-core (`2.2.1`)

Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#888).

`v2.2.0`

Compare Source

Added

Add support for nesting dependency groups (#10166).
Add support for PEP 735 dependency groups (#10130).
Add support for PEP 639 license clarity (#10413).
Add a --format option to poetry show to alternatively output json format (#10487).
Add official support for Python 3.14 (#10514).

Changed

Normalize dependency group names (#10387).
Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#10278).
Improve log output during poetry install when a wheel is built from source (#10404).
Improve error message in case a file lock could not be acquired while cloning a git repository (#10535).
Require dulwich>=0.24.0 (#10492).
Allow virtualenv>=20.33 again (#10506).
Allow findpython>=0.7 (#10510).
Allow importlib-metadata>=8.7 (#10511).

Fixed

Fix an issue where poetry new did not create the project structure in an existing empty directory (#10431).
Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#10516).

poetry-core (`2.2.0`)

Deprecate table values and values that are not valid SPDX expressions for [project.license] (#870).
Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#874).
Fix an issue where marker operations could result in invalid markers (#875).

`v2.1.4`

Compare Source

Changed

Require virtualenv<20.33 to work around an issue where Poetry uses the wrong Python version (#10491).
Improve the error messages for the validation of the pyproject.toml file (#10471).

Fixed

Fix an issue where project plugins were installed even though poetry install was called with --no-plugins (#10405).
Fix an issue where dependency resolution failed for self-referential extras with duplicate dependencies (#10488).

Docs

Clarify how to include files that were automatically excluded via VCS ignore settings (#10442).
Clarify the behavior of poetry add if no version constraint is explicitly specified (#10445).

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

pytest-dev/pytest (pytest)

`v8.4.2`

Compare Source

pytest 8.4.2 (2025-09-03)

Bug fixes

#13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.
#13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.
#13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.
#13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.
#13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

#13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

#13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
#13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
#13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.

pytest-dev/pytest-cov (pytest-cov)

`v6.3.0`

Compare Source

Added support for markdown reports. Contributed by Marcos Boger in #712 <https://github.com/pytest-dev/pytest-cov/pull/712>_ and #714 <https://github.com/pytest-dev/pytest-cov/pull/714>_.
Fixed some formatting issues in docs. Anonymous contribution in #706 <https://github.com/pytest-dev/pytest-cov/pull/706>_.

pytest-dev/pytest-mock (pytest-mock)

`v3.15.1`

Compare Source

2025-09-16

#529 <https://github.com/pytest-dev/pytest-mock/issues/529>_: Fixed itertools._tee object has no attribute error -- now duplicate_iterators=True must be passed to mocker.spy to duplicate iterators.

`v3.15.0`

Compare Source

2025-09-04

Python 3.8 (EOL) is no longer supported.
#524 <https://github.com/pytest-dev/pytest-mock/pull/524>_: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.

tox-dev/tox (tox)

`v4.34.1`

Compare Source

What's Changed

fix: wheel corruption when running parallel tox processes by @gaborbernat in #3667

Full Changelog: https://github.com/tox-dev/tox/compare/4.34.0...4.34.1

`v4.34.0`

Compare Source

What's Changed

feat: Support depenedcy groups with self references by @Czaki in #3666

Full Changelog: https://github.com/tox-dev/tox/compare/4.33.0...4.34.0

`v4.33.0`

Compare Source

What's Changed

Pass LOCALAPPDATA by default on Windows (#3639) by @clint-lawrence in #3640
Docs: Add caution about ranges like py{39-314} by @ferdnyc in #3652
CLI Parser: Drop epilog message for Sphinx help by @ferdnyc in #3653
📚 Integrate sphinx-issues extension by @webknjaz in #3655
Fix sphinx doc build by @gaborbernat in #3662
feat: add conditional set_env support via PEP-496 markers by @gaborbernat in #3663

New Contributors

@clint-lawrence made their first contribution in #3640
@ferdnyc made their first contribution in #3652

Full Changelog: https://github.com/tox-dev/tox/compare/4.32.0...4.33.0

`v4.32.0`

Compare Source

What's Changed

docs: Add Python 3.14 and 3.14t to config examples by @cclauss in #3626
Fix broken log message (in that branch it did not match the arguments). by @ionelmc in #3634
Allow braced range syntax in internal sections of tox.ini file by @marcosboger in #3631
fix: ensure log folder is created before writing the execution logs by @ssbarnea in #3633
TST: add weekly compatibility checks for CPython 3.15 by @neutrinoceros in #3629

New Contributors

@ionelmc made their first contribution in #3634
@marcosboger made their first contribution in #3631
@neutrinoceros made their first contribution in #3629

Full Changelog: https://github.com/tox-dev/tox/compare/4.31.0...4.32.0

`v4.31.0`

Compare Source

What's Changed

Address a type-conversion noted during doc builds by @kurtmckee in #3623
Add 3.14, drop 3.9 and support | union style by @gaborbernat in #3624

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.3...4.31.0

`v4.30.3`

Compare Source

What's Changed

Isolate the test suite from any existing DEFAULT_CONFIG_FILE file by @kurtmckee in #3612
Fix none config file issue 3611 by @kurtmckee in #3613
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3608
Fix incorrect type annotations in PythonPathPackageWithDeps (fixes #3607) by @PreistlyPython in #3616
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3615

New Contributors

@PreistlyPython made their first contribution in #3616

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.2...4.30.3

`v4.30.2`

Compare Source

What's Changed

Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 by @dependabot[bot] in #3603
Ensure automatically provisioned environment is torn down by @vytas7 in #3601
Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in /.github/workflows by @dependabot[bot] in #3604

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.1...4.30.2

`v4.30.1`

Compare Source

What's Changed

Prevent Tox from hanging with --installpkg sdist due to orphaned build backend by @vytas7 in #3530

New Contributors

@vytas7 made their first contribution in #3530

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.0...4.30.1

`v4.30.0`

Compare Source

What's Changed

Pass through CI as __TOX_ENVIRONMENT_VARIABLE_ORIGINAL_CI by @Liam-DeVoe in #3592
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3596
Fix the built docs HTML path hint in tox.toml by @webknjaz in #3594
Add a "version added" note for tox_extend_envs by @webknjaz in #3595
fix: provide clear messaging about config file loading by @ssbarnea in #3578
Ensure tox_extend_envs list can be read twice by @webknjaz in #3598

New Contributors

@Liam-DeVoe made their first contribution in #3592

Full Changelog: https://github.com/tox-dev/tox/compare/4.29.0...4.30.0

`v4.29.0`

Compare Source

What's Changed

Docs: environment variables contain strings by @hroncok in #3575
🐍 Fix sys_platform Fixture Leakage breaking the CI by @gaborbernat in #3589
Expose a new tox_extend_envs hook in plugins API by @webknjaz in #3591

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.4...4.29.0

`v4.28.4`

Compare Source

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3570
Pass ssh-agent variables by default by @daniilgankov in #3572

New Contributors

@daniilgankov made their first contribution in #3572

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.3...4.28.4

`v4.28.3`

Compare Source

What's Changed

Fix typo on cmd_build filter check expression by @gaborbernat in #3569

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.2...4.28.3

`v4.28.2`

Compare Source

What's Changed

Don't pass in the filter argument to tar.extractall on old Python versions by @gaborbernat in #3568

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.1...4.28.2

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.27.8`: 7.27.8

Compare Source

7.27.8 (2026-02-05)

`v7.27.7`: 7.27.7

Compare Source

7.27.7 (2026-02-05)

`v7.27.6`: 7.27.6

Compare Source

7.27.6 (2026-02-05)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to bc4c7bc (d7ce92f)
deps: update python:3 docker digest to 1c4c033 (856a122)
deps: update python:3.14 docker digest to 1c4c033 (0182a8c)

`v7.27.5`: 7.27.5

Compare Source

7.27.5 (2026-02-04)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 1f8c9cd (60f854e)

`v7.27.4`: 7.27.4

Compare Source

7.27.4 (2026-02-04)

`v7.27.3`: 7.27.3

Compare Source

7.27.3 (2026-02-04)

Bug Fixes

deps: update docker:dind docker digest to 8bcbad4 (4ccc9c3)
deps: update python:3 docker digest to fbf695a (134b929)
deps: update python:3.14 docker digest to fbf695a (da47b1e)

`v7.27.2`: 7.27.2

Compare Source

7.27.2 (2026-02-03)

`v7.27.1`: 7.27.1

Compare Source

7.27.1 (2026-02-03)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to bf0a912 (2fe852d)

`v7.27.0`: 7.27.0

Compare Source

7.27.0 (2026-02-02)

Features

gitlab-ci: include mandatory jobs (2342bab), closes #192

`v7.26.3`: 7.26.3

Compare Source

7.26.3 (2026-02-02)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to e8b8b9e (2bb77ff)

`v7.26.2`: 7.26.2

Compare Source

7.26.2 (2026-01-29)

`v7.26.1`: 7.26.1

Compare Source

7.26.1 (2026-01-29)

Bug Fixes

deps: update docker:dind docker digest to a284d31 (ab440ee)

`v7.26.0`: 7.26.0

Compare Source

7.26.0 (2026-01-28)

Features

use gitlab runner cache for pre-commit jobs (fe53b0d)

`v7.25.17`: 7.25.17

Compare Source

7.25.17 (2026-01-28)

Bug Fixes

deps: update docker:dind docker digest to 6a58fe0 (123bec6)

`v7.25.16`: 7.25.16

Compare Source

7.25.16 (2026-01-26)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to d3265ad (929aa91)

`v7.25.15`: 7.25.15

Compare Source

7.25.15 (2026-01-22)

`v7.25.14`: 7.25.14

Compare Source

7.25.14 (2026-01-22)

Bug Fixes

deps: update python:3 docker digest to 17bc9f1 (9106fe0)
deps: update python:3.14 docker digest to 17bc9f1 (9ae614e)

`v7.25.13`: 7.25.13

Compare Source

7.25.13 (2026-01-19)

`v7.25.12`: 7.25.12

Compare Source

7.25.12 (2026-01-19)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to de3d0ab (8fcb386)
deps: update docker:dind docker digest to 3a33fc8 (4d1f0cb)

`v7.25.11`: 7.25.11

Compare Source

7.25.11 (2026-01-15)

Bug Fixes

pick up only the first value for the version from the openapi.yaml (857b1dd)

`v7.25.10`: 7.25.10

Compare Source

7.25.10 (2026-01-14)

Bug Fixes

deps: update python:3 docker digest to 37cba11 (f8bd952)
deps: update python:3.14 docker digest to 37cba11 (c0cd872)

`v7.25.9`: 7.25.9

Compare Source

7.25.9 (2026-01-12)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 51c2543 (26f1d48)

`v7.25.8`: 7.25.8

Compare Source

7.25.8 (2026-01-12)

Bug Fixes

deps: update docker:dind docker digest to d954272 (a5f62f1)

`v7.25.7`: 7.25.7

Compare Source

7.25.7 (2026-01-06)

Bug Fixes

deps: pin dependencies (7e5e93a)

`v7.25.6`: 7.25.6

Compare Source

7.25.6 (2026-01-05)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 26adc0a (e0ed213)
deps: update python:3.14 docker digest to 6d58c1a (a892e63)

`v7.25.5`: 7.25.5

Compare Source

7.25.5 (2025-12-31)

Bug Fixes

deps: update python:3.14 docker digest to f05033a (4028511)

`v7.25.4`: 7.25.4

Compare Source

7.25.4 (2025-12-30)

Bug Fixes

deps: update python:3.14 docker digest to 8797f8e (e2c0097)

`v7.25.3`: 7.25.3

Compare Source

7.25.3 (2025-12-29)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 7fe4ff7 (bfed258)

`v7.25.2`: 7.25.2

Compare Source

7.25.2 (2025-12-22)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 7feb224 (d5237fc)

`v7.25.1`: 7.25.1

Compare Source

7.25.1 (2025-12-18)

Bug Fixes

deps: update python:3.14 docker digest to 492b292 (db790a4)

`v7.25.0`: 7.25.0

Compare Source

7.25.0 (2025-12-18)

Features

move remaining dind job to use dind fragment (8d344ce)

`v7.24.0`: 7.24.0

Compare Source

7.24.0 (2025-12-18)

Features

add timeout when waiting for docker in .docker-in-docker fragment (b172f4c)

`v7.23.7`: 7.23.7

Compare Source

7.23.7 (2025-12-10)

Bug Fixes

dind in poe-tests-base fragment (d777a42)

`v7.23.6`: 7.23.6

Compare Source

7.23.6 (2025-12-10)

Bug Fixes

deps: update python:3.14 docker digest to 2febcd1 (b030909)

`v7.23.5`: 7.23.5

Compare Source

7.23.5 (2025-12-09)

Bug Fixes

remove container_scanning override for multi target docker images (085386c), closes #182 #182

`v7.23.4`: 7.23.4

Compare Source

7.23.4 (2025-12-09)

Bug Fixes

deps: update python:3.14 docker digest to c1684c8 (87ab2f7)

`v7.23.3`: 7.23.3

Compare Source

7.23.3 (2025-12-08)

Bug Fixes

deps: update docker:28-dind docker digest to 2a232a4 (71efda9)

`v7.23.2`: 7.23.2

Compare Source

7.23.2 (2025-12-08)

Bug Fixes

deps: update all non-major dependencies (b2a5bf1)
deps: update alpine/httpie:3.2.4 docker digest to 2b01527 (a0ce1f6)

`v7.23.1`: 7.23.1

Compare Source

7.23.1 (2025-12-05)

`v7.23.0`: 7.23.0

Compare Source

7.23.0 (2025-11-28)

Features

tox-tests to use dind config from fragments (c765400)

`v7.22.1`: 7.22.1

Compare Source

7.22.1 (2025-11-25)

Bug Fixes

add missing before_script reference to dind in .terraform-test-cleanup (2852ccd)

`v7.22.0`: 7.22.0

Compare Source

7.22.0 (2025-11-24)

Features

docker-in-docker: add waiting before_script to fragment (2b0924e), closes #178

`v7.21.0`: 7.21.0

Compare Source

7.21.0 (2025-11-19)

Features

re-work maven jobs rules (da9962b)
re-work maven jobs rules: try to re-name the job (4efa101)

`v7.20.3`: 7.20.3

Compare Source

7.20.3 (2025-11-03)

Bug Fixes

use only needed bits of Terraform-Module.gitlab-ci.yml to avoid duplicate jobs (ff646a0)

`v7.20.2`: 7.20.2

Compare Source

7.20.2 (2025-10-30)

Bug Fixes

check-latest-tag-in-changelog: skip job if tag is an alpha or beta release (210ffd5)

`v7.20.1`: 7.20.1

Compare Source

7.20.1 (2025-10-29)

Bug Fixes

allow no test coverage in maven (40db7bf)

`v7.20.0`: 7.20.0

Compare Source

7.20.0 (2025-10-28)

Features

add code coverage to maven jobs (53c1345)

`v7.19.2`: 7.19.2

Compare Source

7.19.2 (2025-10-23)

Bug Fixes

maven.gitab-ci.yml: added missing GKE_RUNNER_TAG on build_artifact (470fc86)

`v7.19.1`: 7.19.1

Compare Source

7.19.1 (2025-10-23)

Bug Fixes

maven.gitlab-ci.yml: update publish to use CI_COMMIT_TAG for a release, or script for snapshot (e616bd4)

`v7.19.0`: 7.19.0

Compare Source

7.19.0 (2025-10-16)

Features

add poe-based test runner proof of concept (8e159c9)

`v7.18.0`: 7.18.0

Compare Source

7.18.0 (2025-10-02)

Features

python: remove Python 3.9 from default Python version list (6468459), closes #167

`v7.17.7`: 7.17.7

Compare Source

7.17.7 (2025-10-02)

Bug Fixes

python-tox: increase Kubernetes memory limit for python-tox jobs (461ab04)

`v7.17.6`: 7.17.6

Compare Source

7.17.6 (2025-10-01)

Bug Fixes

terraform: set kubernetes CPU requests for terraform jobs (5c75c2d)

`v7.17.5`: 7.17.5

Compare Source

7.17.5 (2025-09-30)

Bug Fixes

exclude modules example sub-dirs from trivy scan (3adf47a)

`v7.17.4`: 7.17.4

Compare Source

7.17.4 (2025-09-29)

Bug Fixes

yarn: bump k8s memory limit for yarn:pack jobs (739da6d), closes #158 #158

`v7.17.3`: 7.17.3

Compare Source

7.17.3 (2025-09-29)

`v7.17.2`: 7.17.2

Compare Source

7.17.2 (2025-09-25)

Bug Fixes

mandatory-jobs: reduce cpu and memory requests for SAST jobs (9d3526a)

`v7.17.1`: 7.17.1

Compare Source

7.17.1 (2025-09-25)

Bug Fixes

pre-commit: certdir variable must be an empty string (d608c55)

`v7.17.0`: 7.17.0

Compare Source

7.17.0 (2025-09-24)

Features

mandatory-jobs: increase runner resources for failing SAST jobs (cfb7fd5)

`v7.16.0`: 7.16.0

Compare Source

7.16.0 (2025-09-19)

Features

🎸 Move standard job to Generic GKE Runner (59d2a0e)

`v7.15.2`: 7.15.2

Compare Source

7.15.2 (2025-09-17)

`v7.15.1`: 7.15.1

Compare Source

7.15.1 (2025-09-11)

Bug Fixes

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)