fix(deps): update all non-major dependencies (!17) · Merge requests · Information Services / DevOps / Experiments / tb844 Testing / tb844 Testing WebApp

This MR contains the following updates:

Package	Change	Type	Update
@types/jest (source)	`29.5.1` -> `29.5.14`	dependencies	patch
@types/node (source)	`18.16.6` -> `18.19.130`	dependencies	minor
@types/react (source)	`18.2.6` -> `18.3.26`	dependencies	minor
@types/react-dom (source)	`18.2.4` -> `18.3.7`	dependencies	minor
black (changelog)	`25.1.0` -> `25.9.0`	docs	minor
django (changelog)	`5.2` -> `5.2.7`	dependencies	patch
django-cors-headers (changelog)	`4.7.0` -> `4.9.0`	dependencies	minor
django-crispy-forms (changelog)	`2.3` -> `2.4`	dependencies	minor
django-filter (changelog)	`25.1` -> `25.2`	dependencies	minor
djangorestframework (source, changelog)	`3.16.0` -> `3.16.1`	dependencies	patch
mkdocs-material (changelog)	`9.6.11` -> `9.6.21`	docs	patch
mkdocstrings (changelog)	`^0.29.1` -> `^0.30.0`	docs	minor
mkdocstrings-python (changelog)	`1.16.10` -> `1.18.2`	docs	minor
oracledb (changelog)	`3.1.0` -> `3.4.0`	dependencies	minor
poetry (changelog)	`2.1.2` -> `2.2.1`		minor
pre-commit/mirrors-mypy	`v1.4.1` -> `v1.18.2`	repository	minor
pre-commit/pre-commit-hooks	`v4.4.0` -> `v4.6.0`	repository	minor
psf/black	`23.3.0` -> `23.12.1`	repository	minor
psycopg (source, changelog)	`3.2.6` -> `3.2.10`	dependencies	patch
python-poetry/poetry	`1.8.2` -> `1.8.5`	repository	patch
pyyaml (source)	`6.0.2` -> `6.0.3`	dependencies	patch
react (source)	`18.2.0` -> `18.3.1`	dependencies	minor
react-dom (source)	`18.2.0` -> `18.3.1`	dependencies	minor
registry.gitlab.developers.cam.ac.uk/uis/devops/infra/dockerimages/python	`3.11-slim` -> `3.14-slim`	stage	minor
social-auth-app-django (changelog)	`5.4.3` -> `5.6.0`	dependencies	minor
timothycrosley/isort	`5.12.0` -> `5.13.2`	repository	minor
tox (changelog)	`4.25.0` -> `4.31.0`		minor
uis/devops/continuous-delivery/ci-templates	`v6.7.0` -> `v6.15.0`	repository	minor
whitenoise (changelog)	`6.9.0` -> `6.11.0`	dependencies	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

psf/black (black)

`v25.9.0`

Compare Source

Highlights

Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

Fix crash while formatting a long del statement containing tuples (#4628)
Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
Handle # fmt: skip followed by a comment at the end of file (#4635)
Fix crash when a tuple appears in the as clause of a with statement (#4634)
Fix crash when tuple is used as a context manager inside a with statement (#4646)
Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
Fix crash on a \\r\n (#4673)
Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
Fix crash on parenthesized expression inside a type parameter bound (#4684)
Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
Improve multiline_string_handling with ternaries and dictionaries (#4657)
Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
Wrap the in clause of comprehensions across lines if necessary (#4699)
Remove parentheses around multiple exception types in except and except* without as. (#4720)
Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

Rewrite tokenizer to improve performance and compliance (#4536)
Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

Avoid using an extra process when running with only one worker (#4734)

Integrations

Fix the version check in the vim file to reject Python 3.8 (#4567)
Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
Build gallery docker image with python3-slim and reduce image size (#4686)

Documentation

Add FAQ entry for windows emoji not displaying (#4714)

django/django (django)

adamchainz/django-cors-headers (django-cors-headers)

`v4.9.0`

Compare Source

Support Django 6.0.

`v4.8.0`

Compare Source

Support Python 3.14.

django-crispy-forms/django-crispy-forms (django-crispy-forms)

`v2.4`

Compare Source

Added support for Python 3.13.
Confirmed support for Django 5.2.

carltongibson/django-filter (django-filter)

`v25.2`

Compare Source

Added testing for Django 6.0.
Dropped support for Django <5.2 LTS
Dropped support for Python 3.9.

encode/django-rest-framework (djangorestframework)

`v3.16.1`

Compare Source

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

Fix regression in unique_together validation with SerializerMethodField in #9712
Fix UniqueTogetherValidator to handle fields with source attribute in #9688
Drop HTML line breaks on long headers in browsable API in #9438

Translations

Add Kazakh locale support in #9713
Update translations for Korean translations in #9571
Update German translations in #9676
Update Chinese translations in #9675
Update Arabic translations-sal in #9595
Update Persian translations in #9576
Update Spanish translations in #9701
Update Turkish Translations in #9749
Fix some typos in Brazilian Portuguese translations in #9673

Documentation

Removed reference to GitHub Issues and Discussions in #9660
Add drf-restwind and update outdated images in browsable-api.md in #9680
Updated funding page to represent current scope in #9686
Fix broken Heroku JSON Schema link in #9693
Update Django documentation links to use stable version in #9698
Expand docs on unique constraints cause 'required=True' in #9725
Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734
Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

Update GitHub Actions to use Ubuntu 24.04 for testing in #9677
Update test matrix to use Django 5.2 stable version in #9679
Add pyupgrade to pre-commit hooks in #9682
Fix test with Django 5 when pytz is available in #9715

New Contributors

@araggohnxd made their first contribution in #9673
@mbeijen made their first contribution in #9660
@stefan6419846 made their first contribution in #9676
@ren000thomas made their first contribution in #9675
@ulgens made their first contribution in #9682
@bukh-sal made their first contribution in #9595
@rezatn0934 made their first contribution in #9576
@Rohit10jr made their first contribution in #9693
@kushibayev made their first contribution in #9713
@alihassancods made their first contribution in #9732
@kulikjak made their first contribution in #9715
@Natgho made their first contribution in #9749

Full Changelog: https://github.com/encode/django-rest-framework/compare/3.16.0...3.16.1

squidfunk/mkdocs-material (mkdocs-material)

`v9.6.21`: mkdocs-material-9.6.21

Compare Source

Updated Serbian translations
Fixed #8458: Temporary pin of click dependency

`v9.6.20`: mkdocs-material-9.6.20

Compare Source

Fixed #8446: Deprecation warning as of Python 3.14 in Emoji extension
Fixed #8440: & character not escaped in search highlighting
Fixed #8439: FontAwesome icons color not set in social cards (regression)

`v9.6.19`: mkdocs-material-9.6.19

Compare Source

Added support for Python 3.14
Updated Bahasa Malaysia translations

`v9.6.18`: mkdocs-material-9.6.18

Compare Source

Updated Azerbaijani translations
Fixed last compat issues with minijinja, now 100% compatible

`v9.6.17`: mkdocs-material-9.6.17

Compare Source

Fixed #8396: Videos do not autoplay when inside a content tab
Fixed #8394: Stroke width not effective in Mermaid.js diagrams
Fixed disappearing version selector when hiding page title

`v9.6.16`: mkdocs-material-9.6.16

Compare Source

Fixed #8349: Info plugin doesn't correctly detect virtualenv in some cases
Fixed #8334: Find-in-page detects matches in hidden search result list

`v9.6.15`: mkdocs-material-9.6.15

Compare Source

Updated Mongolian translations
Improved semantic markup of "edit this page" button
Improved info plugin virtual environment resolution
Fixed #8291: Large font size setting throws of breakpoints in JavaScript

`v9.6.14`: mkdocs-material-9.6.14

Compare Source

Fixed #8215: Social plugin crashes when CairoSVG is updated to 2.8

`v9.6.13`: mkdocs-material-9.6.13

Compare Source

Fixed #8204: Annotations showing list markers in print view
Fixed #8153: Improve style of cardinality symbols in Mermaid.js ER diagrams

`v9.6.12`: mkdocs-material-9.6.12

Compare Source

Fixed #8158: Flip footnote back reference icon for right-to-left languages

mkdocstrings/mkdocstrings (mkdocstrings)

`v0.30.1`

Compare Source

Compare with 0.30.0

Bug Fixes

Create default SSL context in main thread before downloading inventories (eec7fb4 by Çağlar Kutlu). Issue-796, MR-797

`v0.30.0`

Compare Source

Compare with 0.29.1

Features

Add data-skip-inventory boolean attribute for elements to skip registration in local inventory (f856160 by Bartosz Sławecki). Issue-671, MR-774
Add I18N support (translations) (2b4ed54 by Nyuan Zhang). MR-645, Co-authored-by: Timothée Mazzucotelli dev@pawamoy.fr

mkdocstrings/python (mkdocstrings-python)

`v1.18.2`

Compare Source

Compare with 1.18.1

Bug Fixes

Normalize spaces to underscores when passing object to rendering context using its kind as key (6f79be0 by Timothée Mazzucotelli). Issue-mkdocstrings-791

`v1.18.1`

Compare Source

Compare with 1.18.0

Bug Fixes

Don't show implementation signature of __init__ method when overloads_only is true and it is merged into the class (9ef620f by Timothée Mazzucotelli). Issue-308

`v1.18.0`

Compare Source

Compare with 1.17.0

Features

Support PEP 695 generics (dc8c3ad by Victor Westerhuis). MR-221, Co-authored-by: Timothée Mazzucotelli dev@pawamoy.fr

Bug Fixes

Increase maximum recursion limit in case of deeply nested ASTs (rare occurrence) (6004ccf by Timothée Mazzucotelli). Issue-griffe-402

`v1.17.0`

Compare Source

Compare with 1.16.12

Features

Support new Griffe parsing options warn_missing_types and warnings (0e3bdb8 by Timothée Mazzucotelli). Issue-mkdocstrings-437
Add skip_local_inventory option to prevent objects from being registered in the local objects inventory (e82c24f by Bartosz Sławecki). Issue-296, Issue-mkdocstrings-671, MR-297
Support hiding attribute values (6cf34b9 by Bartosz Sławecki). Issue-292: #292, MR-293: #293
Support hiding implementation signature (showing overload only) (d3b35e1 by Bartosz Sławecki). Issue-213, MR-286

Code Refactoring

Deprecate locale option in favor of mkdocstrings' (17f71ba by Timothée Mazzucotelli). MR-288

`v1.16.12`

Compare Source

Compare with 1.16.11

Bug Fixes

Only replace CSS class in first highlighting span (d57740f by Timothée Mazzucotelli). Issue-281

`v1.16.11`

Compare Source

Compare with 1.16.10

Bug Fixes

Fix highlighting for signature with known special names like __init__ (7f95686 by Timothée Mazzucotelli). Issue-mkdocstrings-757
Use default font-size for parameter headings (0a35b20 by Timothée Mazzucotelli). Issue-mkdocstrings-697
Prevent uppercasing H5 titles (by Material for MkDocs) (ba66969 by Timothée Mazzucotelli). Issue-mkdocstrings-697, Issue-276
Use configured heading even when signature is not separated (096960a by Timothée Mazzucotelli). Issue-mkdocstrings-767, MR-278
Render attribute names without full path in ToC (d4e618a by David Lee). Issue-271, MR-272

oracle/python-oracledb (oracledb)

`v3.4.0`

Compare Source

python-oracledb 3.4.0 is now released. This release has the following highlights:

support for Direct Path Load in thin mode for fast data ingestion
support for data frames is no longer considered a pre-release
support for type mapping when querying with data frames
support for ingesting more Apache Arrow data types
support for ingesting Apache Arrow data frames containing multiple chunks
support for cursor.executemany() operating on large input data in batches
fine-grained control over LOB and number handling
new optional install dependencies for plugins

See the full release notes for all of the details.

`v3.3.0`

Compare Source

python-oracledb 3.3.0 is now released. This release has the following highlights:

support for sessionless transactions with Oracle Database 23ai
support for ingestion of dataframes
support for the ArrowArrayStream PyCapsule interface
pre-built binaries for Python 3.14 (this version is in the release candidate phase currently)

See the full release notes for all of the details.

`v3.2.0`

Compare Source

python-oracledb 3.2.0 is now released. This release adds a number of new features and corrects a number of issues. Highlights are as follows:

support for recipient lists in Oracle Advanced Queuing with thin mode
support for fetching VECTOR columns in data frames
support for Instance Principal authentication when using OCI Cloud Native Authentication
support for Oracle Database 23ai multi-pool DRCP

See the full release notes for all of the details.

`v3.1.1`

Compare Source

python-oracledb 3.1.1 is now released. This release addresses a number of reported issues. See the full release notes for all of the details.

python-poetry/poetry (poetry)

`v2.2.1`

Compare Source

Fixed

Fix an issue where poetry self show failed with a message about an invalid output format (#10560).

Docs

Remove outdated statements about dependency groups (#10561).

poetry-core (`2.2.1`)

Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#888).

`v2.2.0`

Compare Source

Added

Add support for nesting dependency groups (#10166).
Add support for PEP 735 dependency groups (#10130).
Add support for PEP 639 license clarity (#10413).
Add a --format option to poetry show to alternatively output json format (#10487).
Add official support for Python 3.14 (#10514).

Changed

Normalize dependency group names (#10387).
Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#10278).
Improve log output during poetry install when a wheel is built from source (#10404).
Improve error message in case a file lock could not be acquired while cloning a git repository (#10535).
Require dulwich>=0.24.0 (#10492).
Allow virtualenv>=20.33 again (#10506).
Allow findpython>=0.7 (#10510).
Allow importlib-metadata>=8.7 (#10511).

Fixed

Fix an issue where poetry new did not create the project structure in an existing empty directory (#10431).
Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#10516).

poetry-core (`2.2.0`)

Deprecate table values and values that are not valid SPDX expressions for [project.license] (#870).
Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#874).
Fix an issue where marker operations could result in invalid markers (#875).

`v2.1.4`

Compare Source

Changed

Require virtualenv<20.33 to work around an issue where Poetry uses the wrong Python version (#10491).
Improve the error messages for the validation of the pyproject.toml file (#10471).

Fixed

Fix an issue where project plugins were installed even though poetry install was called with --no-plugins (#10405).
Fix an issue where dependency resolution failed for self-referential extras with duplicate dependencies (#10488).

Docs

Clarify how to include files that were automatically excluded via VCS ignore settings (#10442).
Clarify the behavior of poetry add if no version constraint is explicitly specified (#10445).

`v2.1.3`

Compare Source

Changed

Require importlib-metadata<8.7 for Python 3.9 because of a breaking change in importlib-metadata 8.7 (#10374).

Fixed

Fix an issue where re-locking failed for incomplete multiple-constraints dependencies with explicit sources (#10324).
Fix an issue where the --directory option did not work if a plugin, which accesses the poetry instance during its activation, was installed (#10352).
Fix an issue where poetry env activate -v printed additional information to stdout instead of stderr so that the output could not be used as designed (#10353).
Fix an issue where the original error was not printed if building a git dependency failed (#10366).
Fix an issue where wheels for the wrong platform were installed in rare cases. (#10361).

poetry-core (`2.1.3`)

Fix an issue where the union of specific inverse or partially inverse markers was not simplified (#858).
Fix an issue where optional dependencies defined in the project section were treated as non-optional when a source was defined for them in the tool.poetry section (#857).
Fix an issue where markers with === were not parsed correctly (#860).
Fix an issue where local versions with upper case letters caused an error (#859).
Fix an issue where extra markers with a value starting with "in" were not validated correctly (#862).

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

`v1.18.2`

Compare Source

`v1.18.1`

Compare Source

`v1.17.1`

Compare Source

`v1.17.0`

Compare Source

`v1.16.1`

Compare Source

`v1.16.0`

Compare Source

`v1.15.0`

Compare Source

`v1.14.1`

Compare Source

`v1.14.0`

Compare Source

`v1.13.0`

Compare Source

`v1.12.1`

Compare Source

`v1.12.0`

Compare Source

`v1.11.2`

Compare Source

`v1.11.1`

Compare Source

`v1.11.0`

Compare Source

`v1.10.1`

Compare Source

`v1.10.0`

Compare Source

`v1.9.0`

Compare Source

`v1.8.0`

Compare Source

`v1.7.1`

Compare Source

`v1.7.0`

Compare Source

`v1.6.1`

Compare Source

`v1.6.0`

Compare Source

`v1.5.1`

Compare Source

`v1.5.0`

Compare Source

pre-commit/pre-commit-hooks (pre-commit/pre-commit-hooks)

`v4.6.0`: pre-commit-hooks v4.6.0

Compare Source

Features

requirements-txt-fixer: remove duplicate packages.
- #1014 MR by @vhoulbreque-withings.
- #960 issue @csibe17.

Migrating

fix-encoding-pragma: deprecated -- will be removed in 5.0.0. use pyupgrade or some other tool.
- #1033 MR by @mxr.
- #1032 issue by @mxr.

`v4.5.0`: pre-commit-hooks v4.5.0

Compare Source

Features

requirements-txt-fixer: also sort constraints.txt by default.
- #857 MR by @lev-blit.
- #830 issue by @PLPeeters.
debug-statements: add bpdb debugger.
- #942 MR by @mwip.
- #941 issue by @mwip.

Fixes

file-contents-sorter: fix sorting an empty file.
- #944 MR by @RoelAdriaans.
- #935 issue by @paduszyk.
double-quote-string-fixer: don't rewrite inside f-strings in 3.12+.
- #973 MR by @asottile.
- #971 issue by @XuehaiPan.

Migrating

now requires python >= 3.8.
- #926 MR by @asottile.
- #927 MR by @asottile.

psycopg/psycopg (psycopg)

`v3.2.10`

Compare Source

`v3.2.9`

Compare Source

`v3.2.8`

Compare Source

`v3.2.7`

Compare Source

yaml/pyyaml (pyyaml)

`v6.0.3`

Compare Source

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3

facebook/react (react)

`v18.3.1`

Compare Source

Export act from react f1338f

`v18.3.0`

Compare Source

This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.

Read the React 19 Upgrade Guide for more info.

React

Allow writing to this.refs to support string ref codemod 909071
Warn for deprecated findDOMNode outside StrictMode c3b283
Warn for deprecated test-utils methods d4ea75
Warn for deprecated Legacy Context outside StrictMode 415ee0
Warn for deprecated string refs outside StrictMode #25383
Warn for deprecated defaultProps for function components #25699
Warn when spreading key #25697
Warn when using act from test-utils d4ea75

React DOM

Warn for deprecated unmountComponentAtNode 8a015b
Warn for deprecated renderToStaticNodeStream #28874

python-social-auth/social-app-django (social-auth-app-django)

`v5.6.0`

Compare Source

Changed

Fixed possibly unsafe account association (CVE-2025-61783)
Storage now filters for active users

Added

Django 6.0 and Python 3.14 compatibility
Type annotations
LoginRequiredMiddleware compatibility
RAISE_EXCEPTIONS and LOGIN_ERROR_URL can be configured per backend

`v5.5.1`

Compare Source

Changed

Fixed authentication with OpenID based services

`v5.5.0`

Compare Source

Changed

Dropped support for older Django versions.
Added non-empty constraind on uid.
Added support for session restore with stricter SameSite cookie policy.

timothycrosley/isort (timothycrosley/isort)

`v5.13.2`

Compare Source

Apply the bracket fix from issue #471 only for use_parentheses=True (#2184) @bp72
- Confine pre-commit to stages (#2213) @davidculley
- Fixed colors extras (#2212) @staticdev

`v5.13.1`

Compare Source

Fixed integration tests (#2208) @bp72
- Fixed normalizing imports from more than one level of parent modules (issue/2152) (#2191) @bp72
- Remove optional dependencies without extras (#2207) @staticdev

`v5.13.0`

Compare Source

Cleanup deprecated extras (#2089) @staticdev
- Fixed #1989: settings lookup when working in stream based mode
- Fixed 80 line length for wemake linter (#2183) @skatromb
- Add support for Python 3.12 (#2175) @hugovk
- Fixed: add newest version to pre-commit docs (#2190) @AzulGarza
- Fixed assertions in test_git_hook (#2196) @mgorny
- Removed check for include_trailing_comma for the Hanging Indent wrap mode (#2192) @bp72
- Use the standard library tomllib on sufficiently new python (#2202) @eli-schwartz
- Update pre-commit.md version number (#2197) @nicobako
- doc: Update black_compatibility.md (#2177) @JSS95
- Fixed safety sept 2023 (#2178) @staticdev
- docs: fix black profile documentation (#2163) @nijel
- Fixed typo: indended -> indented (#2161) @vadimkerr
- Docs(configuration/options.md): fix missing trailing spaces for hard linebreak (#2157) @JoeyTeng
- Update pre-commit.md (#2148) @godiard
- chore: move configurations to pyproject.toml (#2115) @SauravMaheshkar
- Fixed typo in README (#2112) @stefmolin
- Update version in pre-commit setup to avoid installation issue with poetry (#2103) @stefmolin
- Skip .pytype directory by default. (#2098) @manueljacob
- Fixed a tip block styling in the Config Files section (#2097) @Klavionik
- Do not cache configuration files (#1995) @kaste
- Derive settings_path from --filename (#1992) @kaste
- Fixed year of version 5.12.0 in CHANGELOG.md (#2082) @DjLegolas

tox-dev/tox (tox)

`v4.31.0`

Compare Source

What's Changed

Address a type-conversion noted during doc builds by @kurtmckee in #3623
Add 3.14, drop 3.9 and support | union style by @gaborbernat in #3624

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.3...4.31.0

`v4.30.3`

Compare Source

What's Changed

Isolate the test suite from any existing DEFAULT_CONFIG_FILE file by @kurtmckee in #3612
Fix none config file issue 3611 by @kurtmckee in #3613
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3608
Fix incorrect type annotations in PythonPathPackageWithDeps (fixes #3607) by @PreistlyPython in #3616
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3615

New Contributors

@PreistlyPython made their first contribution in #3616

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.2...4.30.3

`v4.30.2`

Compare Source

What's Changed

Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 by @dependabot[bot] in #3603
Ensure automatically provisioned environment is torn down by @vytas7 in #3601
Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in /.github/workflows by @dependabot[bot] in #3604

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.1...4.30.2

`v4.30.1`

Compare Source

What's Changed

Prevent Tox from hanging with --installpkg sdist due to orphaned build backend by @vytas7 in #3530

New Contributors

@vytas7 made their first contribution in #3530

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.0...4.30.1

`v4.30.0`

Compare Source

What's Changed

Pass through CI as __TOX_ENVIRONMENT_VARIABLE_ORIGINAL_CI by @Liam-DeVoe in #3592
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3596
Fix the built docs HTML path hint in tox.toml by @webknjaz in #3594
Add a "version added" note for tox_extend_envs by @webknjaz in #3595
fix: provide clear messaging about config file loading by @ssbarnea in #3578
Ensure tox_extend_envs list can be read twice by @webknjaz in #3598

New Contributors

@Liam-DeVoe made their first contribution in #3592

Full Changelog: https://github.com/tox-dev/tox/compare/4.29.0...4.30.0

`v4.29.0`

Compare Source

What's Changed

Docs: environment variables contain strings by @hroncok in #3575
🐍 Fix sys_platform Fixture Leakage breaking the CI by @gaborbernat in #3589
Expose a new tox_extend_envs hook in plugins API by @webknjaz in #3591

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.4...4.29.0

`v4.28.4`

Compare Source

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3570
Pass ssh-agent variables by default by @daniilgankov in #3572

New Contributors

@daniilgankov made their first contribution in #3572

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.3...4.28.4

`v4.28.3`

Compare Source

What's Changed

Fix typo on cmd_build filter check expression by @gaborbernat in #3569

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.2...4.28.3

`v4.28.2`

Compare Source

What's Changed

Don't pass in the filter argument to tar.extractall on old Python versions by @gaborbernat in #3568

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.1...4.28.2

`v4.28.1`

Compare Source

What's Changed

Fix an issue number typo in changelog by @hroncok in #3563
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3564
Only use tarfile.data_filter when it's available by @gaborbernat in #3566

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.0...4.28.1

`v4.28.0`

Compare Source

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3548
[docs] Document how to require a plugin by @stephenfin in #3552
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3554
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3558
Add [testenv] constraints option by @stephenfin in #3556
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3562
Allow disabling plugins on a one-off by @gaborbernat in #3560

Full Changelog: https://github.com/tox-dev/tox/compare/4.27.0...4.28.0

`v4.27.0`

Compare Source

What's Changed

Feat: include free_threaded flag in result-json by @robsdedude in #3534
Add security policy by @jugmac00 in #3535
Fix dependency-group name normalization by @robsdedude in #3540
Log environment variables sorted by key while redacting values of unsafe ones by @ssbarnea in #3543

Full Changelog: https://github.com/tox-dev/tox/compare/4.26.0...4.27.0

`v4.26.0`

Compare Source

What's Changed

Add a missing quote in a TOML example @ config.rst by @webknjaz in #3509
Add colour to GitHub Actions CI logs by @hugovk in #3525
Fix using deprecated virtualenv option --wheel by @robsdedude in #3528
Fix custom HelpFormatter for Python 3.14 by @The-Compiler in #3524
Drop support for EOL Python 3.8 by @hugovk in #3527
Test with Python 3.14 by @edgarrmondragon in #3533
Fix for tox4 regression issue with setenv file and substitutions (#2435) by @realitycheck in #3521
Feat: free-threaded python support by @robsdedude in #3526

New Contributors

@edgarrmondragon made their first contribution in #3533
@realitycheck made their first contribution in #3521

Full Changelog: https://github.com/tox-dev/tox/compare/4.25.0...4.26.0

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v6.15.0`

Compare Source

Changed

terraform-module.yml: Add support for Terraform testing with additional cleanup scripts.

Fixed

terraform-module.yml: Override the tflint job so that the terraform_standard_module_structure rule is applied.
terraform-module.yml: Override the pre-commit job to avoid duplication of our terraform-fmt, tflint, and trivy jobs.

Fixed

terraform-module: override .test-job-rules from terraform-lint.yml as the terraform-module.yml template needs to support Auto-DevOps.

Changed

terraform-lint: use custom tflint docker image for the tflint job. This image includes the UIS DevOps custom tflint ruleset.
terraform-lint: move default tflint arguments to a $TFLINT_ARGS variable to allow repositories to override if required.
terraform-module: enable tflint in our Terraform reusable module pipeline.

`v6.10.0`

Compare Source

Fixed

terraform-pipeline: Partially revert changes made in v5.1.0.
- Plan jobs for branch push pipelines will be reverted.
- Manual apply jobs for the development environment will remain in the merge request pipelines.

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Oct 12, 2025 by uis-devops-renovatebot

fix(deps): update all non-major dependencies

Release Notes

Highlights

Stable style

Preview style

Parser

Performance

Integrations

Documentation

Minor changes

Bug fixes

Translations

Documentation

Internal changes

New Contributors

v9.6.21: mkdocs-material-9.6.21

v9.6.20: mkdocs-material-9.6.20

v9.6.19: mkdocs-material-9.6.19

v9.6.18: mkdocs-material-9.6.18

v9.6.17: mkdocs-material-9.6.17

v9.6.16: mkdocs-material-9.6.16

v9.6.15: mkdocs-material-9.6.15

v9.6.14: mkdocs-material-9.6.14

v9.6.13: mkdocs-material-9.6.13

v9.6.12: mkdocs-material-9.6.12

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Code Refactoring

Bug Fixes

Bug Fixes

Fixed

Docs

poetry-core (2.2.1)

Added

Changed

Fixed

poetry-core (2.2.0)

Changed

Fixed

Docs

Changed

Fixed

poetry-core (2.1.3)

v4.6.0: pre-commit-hooks v4.6.0

Features

Migrating

v4.5.0: pre-commit-hooks v4.5.0

Features

Fixes

Migrating

What's Changed

React

React DOM

Changed

Added

Changed

Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

`v9.6.21`: mkdocs-material-9.6.21

`v9.6.20`: mkdocs-material-9.6.20

`v9.6.19`: mkdocs-material-9.6.19

`v9.6.18`: mkdocs-material-9.6.18

`v9.6.17`: mkdocs-material-9.6.17

`v9.6.16`: mkdocs-material-9.6.16

`v9.6.15`: mkdocs-material-9.6.15

`v9.6.14`: mkdocs-material-9.6.14

`v9.6.13`: mkdocs-material-9.6.13

`v9.6.12`: mkdocs-material-9.6.12

poetry-core (`2.2.1`)

poetry-core (`2.2.0`)

poetry-core (`2.1.3`)

`v4.6.0`: pre-commit-hooks v4.6.0

`v4.5.0`: pre-commit-hooks v4.5.0