fix(deps): update all non-major dependencies (!26) · Merge requests · Information Services / DevOps / Django Libraries / External Settings

This MR contains the following updates:

Package	Change	Type	Update
coverage	`7.10.1` -> `7.10.7`	dev	patch
django (changelog)	`5.2.3` -> `5.2.6`	project.optional-dependencies	patch
faker (changelog)	`37.4.2` -> `37.8.0`	dev	minor
poetry (changelog)	`2.1.3` -> `2.2.1`		minor
pre-commit/mirrors-mypy	`v1.17.0` -> `v1.18.2`	repository	minor
psf/black	`25.1.0` -> `25.9.0`	repository	minor
pytest (changelog)	`8.4.1` -> `8.4.2`	dev	patch
pytest-cov (changelog)	`6.2.1` -> `6.3.0`	dev	minor
pytest-mock (changelog)	`3.14.1` -> `3.15.1`	dev	minor
pyyaml (source)	`6.0.2` -> `6.0.3`	project.dependencies	patch
uis/devops/continuous-delivery/ci-templates	`v7.6.2` -> `v7.17.4`	repository	minor
whitenoise (changelog)	`6.9.0` -> `6.11.0`	dev	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

nedbat/coveragepy (coverage)

`v7.10.7`

Compare Source

Performance: with branch coverage in large files, generating HTML, JSON, or LCOV reports could take far too long due to some quadratic behavior when creating the function and class index pages. This is now fixed, closing issue 2048_. Thanks to Daniel Diniz for help diagnosing the problem.
Most warnings and a few errors now have links to a page in the docs explaining the specific message. Closes issue 1921_.

.. _issue 1921: #1921 .. _issue 2048: #2048

.. _changes_7-10-6:

`v7.10.6`

Compare Source

Fix: source directories were not properly communicated to subprocesses that ran in different directories, as reported in issue 1499_. This is now fixed.
Performance: Alex Gaynor continues fine-tuning <pull 2038_>_ the speed of combination, especially with many contexts.

.. _issue 1499: #1499 .. _pull 2038: #2038

.. _changes_7-10-5:

`v7.10.5`

Compare Source

Big speed improvements for coverage combine: it's now about twice as fast! Huge thanks to Alex Gaynor for pull requests 2032 <pull 2032_>, 2033 <pull 2033_>, and 2034 <pull 2034_>_.

.. _pull 2032: #2032 .. _pull 2033: #2033 .. _pull 2034: #2034

.. _changes_7-10-4:

`v7.10.4`

Compare Source

Added patch = fork for times when the built-in forking support is insufficient.
Fix: patch = execv also inherits the entire coverage configuration now.

.. _changes_7-10-3:

`v7.10.3`

Compare Source

Fixes for patch = subprocess:
- If subprocesses spawned yet more subprocesses simultaneously, some coverage could be missed. This is now fixed, closing issue 2024_.
- If subprocesses were created in other directories, their data files were stranded there and not combined into the totals, as described in issue 2025_. This is now fixed.
- On Windows (or maybe only some Windows?) the patch would fail with a ModuleNotFound error trying to import coverage. This is now fixed, closing issue 2022_.
- Originally only options set in the coverage configuration file would apply to subprocesses. Options set on the coverage run command line (such as --branch) wouldn't be communicated to the subprocesses. This could lead to combining failures, as described in issue 2021_. Now the entire configuration is used in subprocesses, regardless of its origin.
- Added debug=patch to help diagnose problems.
Fix: really close all SQLite databases, even in-memory ones. Closes issue 2017_.

.. _issue 2017: #2017 .. _issue 2021: #2021 .. _issue 2022: #2022 .. _issue 2024: #2024 .. _issue 2025: #2025

.. _changes_7-10-2:

`v7.10.2`

Compare Source

Fix: some code with NOP bytecodes could report missing branches that are actually executed. This is now fixed, closing issue 1999_. Python 3.9 still shows the problem.

.. _issue 1999: #1999

.. _changes_7-10-1:

django/django (django)

joke2k/faker (faker)

`v37.8.0`

Compare Source

Add Automotive providers for ja_JP locale. Thanks @ItoRino424.

`v37.7.0`

Compare Source

Add Nigerian name locales (yo_NG, ha_NG, ig_NG, en_NG). Thanks @ifeoluwaoladeji.

`v37.6.0`

Compare Source

Add Automotive providers for ko_KR locale. Thanks @ydj515.

`v37.5.3`

Compare Source

Allow Decimal type for min_value and max_value in pydecimal. Thanks @sshishov.

`v37.5.2`

Compare Source

Fix Turkish Republic National Number (TCKN) provider. Thanks @fleizean.

`v37.5.1`

Compare Source

Fix unnatural Korean company names in ko_KR locale. Thanks @r-4bb1t.

`v37.5.0`

Compare Source

Add Spanish lorem provider for es_ES, es_AR and es_MX. Thanks @Pandede.

`v37.4.3`

Compare Source

Fix male names in sv_SE locale. Thanks @peterk.

python-poetry/poetry (poetry)

`v2.2.1`

Compare Source

Fixed

Fix an issue where poetry self show failed with a message about an invalid output format (#10560).

Docs

Remove outdated statements about dependency groups (#10561).

poetry-core (`2.2.1`)

Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#888).

`v2.2.0`

Compare Source

Added

Add support for nesting dependency groups (#10166).
Add support for PEP 735 dependency groups (#10130).
Add support for PEP 639 license clarity (#10413).
Add a --format option to poetry show to alternatively output json format (#10487).
Add official support for Python 3.14 (#10514).

Changed

Normalize dependency group names (#10387).
Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#10278).
Improve log output during poetry install when a wheel is built from source (#10404).
Improve error message in case a file lock could not be acquired while cloning a git repository (#10535).
Require dulwich>=0.24.0 (#10492).
Allow virtualenv>=20.33 again (#10506).
Allow findpython>=0.7 (#10510).
Allow importlib-metadata>=8.7 (#10511).

Fixed

Fix an issue where poetry new did not create the project structure in an existing empty directory (#10431).
Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#10516).

poetry-core (`2.2.0`)

Deprecate table values and values that are not valid SPDX expressions for [project.license] (#870).
Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#874).
Fix an issue where marker operations could result in invalid markers (#875).

`v2.1.4`

Compare Source

Changed

Require virtualenv<20.33 to work around an issue where Poetry uses the wrong Python version (#10491).
Improve the error messages for the validation of the pyproject.toml file (#10471).

Fixed

Fix an issue where project plugins were installed even though poetry install was called with --no-plugins (#10405).
Fix an issue where dependency resolution failed for self-referential extras with duplicate dependencies (#10488).

Docs

Clarify how to include files that were automatically excluded via VCS ignore settings (#10442).
Clarify the behavior of poetry add if no version constraint is explicitly specified (#10445).

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

`v1.18.2`

Compare Source

`v1.18.1`

Compare Source

`v1.17.1`

Compare Source

psf/black (psf/black)

`v25.9.0`

Compare Source

Highlights

Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

Fix crash while formatting a long del statement containing tuples (#4628)
Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
Handle # fmt: skip followed by a comment at the end of file (#4635)
Fix crash when a tuple appears in the as clause of a with statement (#4634)
Fix crash when tuple is used as a context manager inside a with statement (#4646)
Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
Fix crash on a \\r\n (#4673)
Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
Fix crash on parenthesized expression inside a type parameter bound (#4684)
Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
Improve multiline_string_handling with ternaries and dictionaries (#4657)
Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
Wrap the in clause of comprehensions across lines if necessary (#4699)
Remove parentheses around multiple exception types in except and except* without as. (#4720)
Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

Rewrite tokenizer to improve performance and compliance (#4536)
Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

Avoid using an extra process when running with only one worker (#4734)

Integrations

Fix the version check in the vim file to reject Python 3.8 (#4567)
Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
Build gallery docker image with python3-slim and reduce image size (#4686)

Documentation

Add FAQ entry for windows emoji not displaying (#4714)

pytest-dev/pytest (pytest)

`v8.4.2`

Compare Source

pytest 8.4.2 (2025-09-03)

Bug fixes

#13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.
#13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.
#13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.
#13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.
#13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

#13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

#13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
#13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
#13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.

pytest-dev/pytest-cov (pytest-cov)

`v6.3.0`

Compare Source

Added support for markdown reports. Contributed by Marcos Boger in #712 <https://github.com/pytest-dev/pytest-cov/pull/712>_ and #714 <https://github.com/pytest-dev/pytest-cov/pull/714>_.
Fixed some formatting issues in docs. Anonymous contribution in #706 <https://github.com/pytest-dev/pytest-cov/pull/706>_.

pytest-dev/pytest-mock (pytest-mock)

`v3.15.1`

Compare Source

2025-09-16

#529 <https://github.com/pytest-dev/pytest-mock/issues/529>_: Fixed itertools._tee object has no attribute error -- now duplicate_iterators=True must be passed to mocker.spy to duplicate iterators.

`v3.15.0`

Compare Source

2025-09-04

Python 3.8 (EOL) is no longer supported.
#524 <https://github.com/pytest-dev/pytest-mock/pull/524>_: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.

yaml/pyyaml (pyyaml)

`v6.0.3`

Compare Source

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.17.4`: 7.17.4

Compare Source

7.17.4 (2025-09-29)

Bug Fixes

yarn: bump k8s memory limit for yarn:pack jobs (739da6d), closes #158 #158

`v7.17.3`: 7.17.3

Compare Source

7.17.3 (2025-09-29)

`v7.17.2`: 7.17.2

Compare Source

7.17.2 (2025-09-25)

Bug Fixes

mandatory-jobs: reduce cpu and memory requests for SAST jobs (9d3526a)

`v7.17.1`: 7.17.1

Compare Source

7.17.1 (2025-09-25)

Bug Fixes

pre-commit: certdir variable must be an empty string (d608c55)

`v7.17.0`: 7.17.0

Compare Source

7.17.0 (2025-09-24)

Features

mandatory-jobs: increase runner resources for failing SAST jobs (cfb7fd5)

`v7.16.0`: 7.16.0

Compare Source

7.16.0 (2025-09-19)

Features

🎸 Move standard job to Generic GKE Runner (59d2a0e)

`v7.15.2`: 7.15.2

Compare Source

7.15.2 (2025-09-17)

`v7.15.1`: 7.15.1

Compare Source

7.15.1 (2025-09-11)

Bug Fixes

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)