fix(deps): update all non-major dependencies (!18) · Merge requests · Information Services / DevOps / Identity and Access Management / Institutional Structure / Institutional Structure

This MR contains the following updates:

Package	Type	Update	Change
DavidAnson/markdownlint-cli2	repository	minor	`v0.20.0` → `v0.21.0`
black (changelog)	docs	minor	`26.1.0` → `26.3.0`
django (changelog)	dependencies	patch	`5.2.11` → `5.2.12`
django-crispy-forms (changelog)	dependencies	minor	`2.5` → `2.6`
editorconfig-checker/editorconfig-checker.python	repository	patch	`3.6.0` → `3.6.1`
mkdocs-material (changelog)	docs	patch	`9.7.2` → `9.7.4`
mkdocstrings-python (changelog)	docs	patch	`2.0.2` → `2.0.3`
psf/black	repository	minor	`26.1.0` → `26.3.0`
tox (changelog)		minor	`4.34.1` → `4.49.1`
tox (changelog)	dev	minor	`<4.35.0` → `<4.49.2`
uis/devops/continuous-delivery/ci-templates	repository	patch	`v7.30.1` → `v7.30.3`
whitenoise (changelog)	dependencies	minor	`6.11.0` → `6.12.0`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

DavidAnson/markdownlint-cli2 (DavidAnson/markdownlint-cli2)

`v0.21.0`

Compare Source

psf/black (black)

`v26.3.0`

Compare Source

Stable style

Don't double-decode input, causing non-UTF-8 files to be corrupted (#4964)
Fix crash on standalone comment in lambda default arguments (#4993)
Preserve parentheses when # type: ignore comments would be merged with other comments on the same line, preventing AST equivalence failures (#4888)

Preview style

Fix bug where if guards in case blocks were incorrectly split when the pattern had a trailing comma (#4884)
Fix string_processing crashing on unassigned long string literals with trailing commas (one-item tuples) (#4929)
Simplify implementation of the power operator "hugging" logic (#4918)

Packaging

Fix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in frozen environments (#4930)

Performance

Introduce winloop for windows as an alternative to uvloop (#4996)
Remove deprecated function uvloop.install() in favor of uvloop.new_event_loop() (#4996)
Rename maybe_install_uvloop function to maybe_use_uvloop to simplify loop installation and creation of either a uvloop/winloop evenloop or default eventloop (#4996)

Output

Emit a clear warning when the target Python version is newer than the running Python version, since AST safety checks cannot parse newer syntax. Also replace the misleading "INTERNAL ERROR" message with an actionable error explaining the version mismatch (#4983)

Blackd

Introduce winloop to be used when windows in use which enables blackd to run faster on windows when winloop is installed. (#4996)

Integrations

Remove unused gallery script (#5030)
Harden parsing of black requirements in the GitHub Action when use_pyproject is enabled so that only version specifiers are accepted and direct references such as black @ https://... are rejected. Users should upgrade to the latest version of the action as soon as possible. This update is received automatically when using psf/black@stable, and is independent of the version of Black installed by the action. (#5031)

Documentation

Expand preview style documentation with detailed examples for wrap_comprehension_in, simplify_power_operator_hugging, and wrap_long_dict_values_in_parens features (#4987)
Add detailed documentation for formatting Jupyter Notebooks (#5009)

django/django (django)

`v5.2.12`

Compare Source

django-crispy-forms/django-crispy-forms (django-crispy-forms)

`v2.6`

Compare Source

Dropped support for Django 4.2, 5.0 and 5.1.

editorconfig-checker/editorconfig-checker.python (editorconfig-checker/editorconfig-checker.python)

`v3.6.1`

Compare Source

squidfunk/mkdocs-material (mkdocs-material)

`v9.7.4`: mkdocs-material-9.7.4

Compare Source

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

Hardened social cards plugin by switching to sandboxed environment (recommended by @caveeroo)
Updated MkDocs 2.0 incompatibility warning

`v9.7.3`: mkdocs-material-9.7.3

Compare Source

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocstrings/python (mkdocstrings-python)

`v2.0.3`

Compare Source

Compare with 2.0.2

Build

Depend on griffelib instead of griffe (770a5f6 by Timothée Mazzucotelli).

tox-dev/tox (tox)

`v4.49.1`

Compare Source

What's Changed

Update maintainers by @rahuldevikar in #3868
🐛 fix(run): break deadlock in execution interrupt chain by @gaborbernat in #3869

Full Changelog: https://github.com/tox-dev/tox/compare/4.49.0...4.49.1

`v4.49.0`

Compare Source

What's Changed

✨ feat(config): add {factor:label} substitution for TOML by @gaborbernat in #3865
🐛 fix(legacy): initialize config_format and output_file for --showconfig by @rares985 in #3867

New Contributors

@rares985 made their first contribution in #3867

Full Changelog: https://github.com/tox-dev/tox/compare/4.48.1...4.49.0

`v4.48.1`

Compare Source

What's Changed

Replace archived 31z4/tox Docker image with build-your-own guide by @rahuldevikar in #3864
🐛 fix(toml): extract args from Command in ref replacement by @gaborbernat in #3863

Full Changelog: https://github.com/tox-dev/tox/compare/4.48.0...4.48.1

`v4.48.0`

Compare Source

What's Changed

Add fail_fast to config reference docs by @rahuldevikar in #3853
✨ feat(config): add --format json/toml and -o to config command by @gaborbernat in #3857

Full Changelog: https://github.com/tox-dev/tox/compare/4.47.3...4.48.0

`v4.47.3`

Compare Source

What's Changed

Fix SchemaStore workflow creating empty MRs by @gaborbernat in #3848
Add .mailmap to consolidate author identities by @yarikoptic in #3849
🐛 fix(config): honor ignore_base_python_conflict for factor conflicts by @gaborbernat in #3851

Full Changelog: https://github.com/tox-dev/tox/compare/4.47.2...4.47.3

`v4.47.2`

Compare Source

What's Changed

fix: handle OSError in pos_args path existence check by @yarikoptic in #3847

New Contributors

@yarikoptic made their first contribution in #3847

Full Changelog: https://github.com/tox-dev/tox/compare/4.47.1...4.47.2

`v4.47.1`

Compare Source

What's Changed

🐛 fix(config): resolve base_python from new-style version factors by @gaborbernat in #3846

Full Changelog: https://github.com/tox-dev/tox/compare/4.47.0...4.47.1

`v4.47.0`

Compare Source

What's Changed

Move SECURITY.md to .github/SECURITY.md by @gaborbernat in #3835
Standardize .github files to .yaml suffix by @gaborbernat in #3836
🐛 fix(ci): resolve ty type-check failures by @gaborbernat in #3837
✨ feat(config): show clean errors for type mismatches by @gaborbernat in #3838
🧪 test(config): assert full error messages for all config fields by @gaborbernat in #3840
🐛 fix(exec): pass stdin through to executed command by @gaborbernat in #3842
🐛 fix(config): accept string for base_python in TOML by @gaborbernat in #3843

Full Changelog: https://github.com/tox-dev/tox/compare/4.46.3...4.47.0

`v4.46.3`

Compare Source

What's Changed

👷 ci(schemastore): branch from upstream master by @gaborbernat in #3828
Fix outdated min version of virtualenv by @kajinamit in #3829

New Contributors

@kajinamit made their first contribution in #3829

Full Changelog: https://github.com/tox-dev/tox/compare/4.46.2...4.46.3

`v4.46.2`

Compare Source

What's Changed

👷 ci(schemastore): fix MR creation for fork by @gaborbernat in #3827

Full Changelog: https://github.com/tox-dev/tox/compare/4.46.1...4.46.2

`v4.46.1`

Compare Source

What's Changed

🐛 fix(config): allow glob patterns in ini depends by @gaborbernat in #3825
👷 ci(schemastore): fix git push auth in update workflow by @gaborbernat in #3826
🐛 fix(schema): add additionalProperties to partial-tox.json by @gaborbernat in #3824

Full Changelog: https://github.com/tox-dev/tox/compare/4.46.0...4.46.1

`v4.46.0`

Compare Source

What's Changed

Add architecture (ISA) awareness to Python discovery by @rahuldevikar in #3815
✨ feat(config): add env_base templates for TOML by @gaborbernat in #3817
🐛 fix(deps): drop chardet for req file decoding by @gaborbernat in #3820
🐛 fix(cli): allow --help with invalid config by @gaborbernat in #3821

Full Changelog: https://github.com/tox-dev/tox/compare/4.45.0...4.46.0

`v4.45.0`

Compare Source

What's Changed

Fix user guide link in README.md by @cpburnz in #3805
🐛 fix(type): resolve ty 0.0.17 compatibility by @gaborbernat in #3807
📝 docs: add redirects for old URLs (#3806) by @gaborbernat in #3808
Bump dependency requirements by @gaborbernat in #3812
fix: cross-section substitution resolves to empty when no factors match by @worksbyfriday in #3810
✨ feat(schema): enhance schema command with IDE integration by @gaborbernat in #3813
🐛 fix(env): break circular dependency in environment_variables resolution by @gaborbernat in #3816

New Contributors

@cpburnz made their first contribution in #3805

Full Changelog: https://github.com/tox-dev/tox/compare/4.44.0...4.45.0

`v4.44.0`

Compare Source

What's Changed

🐛 fix(config): keep unfactored continuation lines after filtered factors (#3802) by @gaborbernat in #3804
✨ feat(config): add PEP 751 pylock.toml support by @gaborbernat in #3803

Full Changelog: https://github.com/tox-dev/tox/compare/4.43.0...4.44.0

`v4.43.0`

Compare Source

What's Changed

📝 docs(infra): integrate sphinxcontrib-towncrier by @gaborbernat in #3798
✨ feat(toml): add generative env_list via product dict by @gaborbernat in #3797
🐛 fix(config): restore factor conditional continuations by @gaborbernat in #3799
🐛 fix(pip): pass config_settings to pip for sdist install by @gaborbernat in #3800

Full Changelog: https://github.com/tox-dev/tox/compare/4.42.0...4.43.0

`v4.42.0`

Compare Source

What's Changed

🐛 fix(interrupt): suppress BrokenPipeError during teardown by @gaborbernat in #3778
✨ feat(cli): add --no-capture flag for interactive programs by @gaborbernat in #3777
✨ feat(config): add platform-dependent factor support by @gaborbernat in #3779
✨ feat(env): gracefully skip environments with unavailable runners by @gaborbernat in #3781
🐛 fix(env): restore compound factor conditionals by @gaborbernat in #3782
✨ feat(config): add default_base_python config key by @gaborbernat in #3783
✨ feat(config): add env_site_packages_dir_plat substitution by @gaborbernat in #3784
🐛 fix(parallel): show --list-dependencies output by @gaborbernat in #3786
✨ feat(config): add open-ended generative ranges by @gaborbernat in #3788
🐛 fix(config): collapse continuation lines before factor filtering by @gaborbernat in #3787
✨ feat(pkg): cache external packaging env build across envs by @gaborbernat in #3790
✨ feat(changelog): add granular towncrier categories by @gaborbernat in #3785
✨ feat(cli): accept plugin CLI options during provisioning by @gaborbernat in #3791
✨ feat(env): add recreate_commands config key by @gaborbernat in #3793
📝 docs(faq): document Debian python3-venv limitation by @gaborbernat in #3789
✨ feat(config): warn on unused config keys with -v by @gaborbernat in #3795
✨ feat(cli): add --skip-env-install flag for offline env reuse by @gaborbernat in #3792
✨ feat(env): add virtualenv_spec for per-env version pinning by @gaborbernat in #3794

Full Changelog: https://github.com/tox-dev/tox/compare/4.41.0...4.42.0

`v4.41.0`

Compare Source

What's Changed

Prefer TOML-native config over legacy_tox_ini in pyproject.toml by @rahuldevikar in #3776
✨ feat(config): add package = "deps-only" mode by @gaborbernat in #3774

Full Changelog: https://github.com/tox-dev/tox/compare/4.40.0...4.41.0

`v4.40.0`

Compare Source

What's Changed

Use positive exit code for multi-env failures by @rahuldevikar in #3768
✨ feat(config): add {glob:PATTERN} substitution by @gaborbernat in #3769
Add package=sdist-wheel package type by @rahuldevikar in #3741
✨ feat(config): add conditional replace for TOML by @gaborbernat in #3771
Create .gitignore in work_dir and info file directories by @rahuldevikar in #3770
✨ feat(run): add commands_retry config option by @gaborbernat in #3772
🐛 fix(config): set_env override lost after load by @gaborbernat in #3775

Full Changelog: https://github.com/tox-dev/tox/compare/4.39.0...4.40.0

`v4.39.0`

Compare Source

What's Changed

🐛 fix(ci): suppress Pygments DeprecationWarning on Python 3.15 by @gaborbernat in #3733
🐛 fix(deps): apply --force-dep to package metadata dependencies by @gaborbernat in #3734
fix(ci): drop module scope from commonprefix warning filter by @gaborbernat in #3735
🐛 fix(config): resolve overrides with alias config keys by @gaborbernat in #3736
🐛 fix(config): set_env cross-section substitution loses values by @gaborbernat in #3737
🐛 fix(legacy): --parallel-no-spinner no longer suppresses output by @gaborbernat in #3738
🐛 fix(config): set_env cross-section substitution precedence by @gaborbernat in #3739
🐛 fix(config): set_env file| no longer overrides later values by @gaborbernat in #3740
🐛 fix(config): setup.cfg without [tox:tox] no longer blocks discovery by @gaborbernat in #3742
🐛 fix(env): posargs with colon no longer crash inactive envs by @gaborbernat in #3744
🐛 fix(provision): skip requires with false environment markers by @gaborbernat in #3745
🐛 fix(config): env variable substitution in package envs by @gaborbernat in #3746
🐛 fix(config): set_env substitution honors skip_missing_interpreters by @gaborbernat in #3747
🐛 fix(config): resolve cross-section refs in caller context by @gaborbernat in #3748
🐛 fix(config): break changedir/posargs circular dependency by @gaborbernat in #3749
🐛 fix(cli): support brace expansion in -e flag by @gaborbernat in #3750
🐛 fix(config): factor filter fallback to default value by @gaborbernat in #3751
🐛 fix(env): preserve shared pkg env on recreate by @gaborbernat in #3752
🐛 fix(env): reject partial testenv section matches by @gaborbernat in #3753
🐛 fix(config): support base inherit in TOML format by @gaborbernat in #3754
🐛 fix(cli): make multiple -e flags additive by @gaborbernat in #3755
🐛 fix(provision): serialize concurrent provisioning by @gaborbernat in #3756
📝 docs: document interactive terminal programs limitation by @gaborbernat in #3757
🐛 fix(config): defer TOML set_env string substitution by @gaborbernat in #3759
🐛 fix(config): handle cross-drive posargs on Windows by @gaborbernat in #3760
🐛 fix(plugin): skip toxfile.py with unknown hooks by @gaborbernat in #3762
🐛 fix(config): skip non-tox sections in env discovery by @gaborbernat in #3761
🐛 fix(config): treat backslash-space as path separator on Windows by @gaborbernat in #3764
🐛 fix(config): preserve colors in provisioned tox on Windows by @gaborbernat in #3765
create a cachedir.tag file in the tox work directory by @rahuldevikar in #3763
🐛 fix(execute): render ANSI colors from subprocesses on Windows by @gaborbernat in #3766
🧪 test(config): verify unicode support in config files by @gaborbernat in #3767

Full Changelog: https://github.com/tox-dev/tox/compare/4.38.0...4.39.0

`v4.38.0`

Compare Source

What's Changed

🐛 fix(test): resolve Windows CI flake in provision integration tests by @gaborbernat in #3732
Scope deps rejection to pure PEP-517 build types by @rahuldevikar in #3730

Full Changelog: https://github.com/tox-dev/tox/compare/4.37.0...4.38.0

`v4.37.0`

Compare Source

What's Changed

✨ feat(config): add extra_setup_commands for --notest phase by @gaborbernat in #3716
🐛 fix(release): format changelog with pre-commit before committing by @gaborbernat in #3717
📝 docs: restructure documentation using Diátaxis framework by @gaborbernat in #3718
🐛 fix(pip): set PIP_USER=0 to prevent --user installs in virtualenvs by @gaborbernat in #3719
🐛 fix(config): prevent env_run_base deps from being clobbered by @gaborbernat in #3721
Fix env name with dot losing description in TOML config by @Fridayai700 in #3722
🐛 fix(ci): add completion extras to type checker environments by @gaborbernat in #3728
Fix factor selection via TOX_FACTORS environment variable by @Fridayai700 in #3725
Fix setenv PATH modifications being overwritten by @Fridayai700 in #3723
Fix extras with underscores not matching hyphenated metadata by @Fridayai700 in #3727
Fix install_command ignored from TOML config by @Fridayai700 in #3724
Fix deps with ~= version specifier treated as local paths by @Fridayai700 in #3726

New Contributors

@Fridayai700 made their first contribution in #3722

Full Changelog: https://github.com/tox-dev/tox/compare/4.36.1...4.37.0

`v4.36.1`

Compare Source

What's Changed

🔒 ci(workflows): add explicit permissions to workflows by @gaborbernat in #3714
Add architecture documentation by @rahuldevikar in #3708
📚 docs(man): add Unix man page and composable CLI argument inheritance by @gaborbernat in #3705
Add new logging section in documentation by @rahuldevikar in #3701
Report TOML parse errors during config discovery instead of silently ignoring them by @rahuldevikar in #3710
🐛 fix(execute): adopt CPython subprocess stream handling by @gaborbernat in #3715

Full Changelog: https://github.com/tox-dev/tox/compare/4.36.0...4.36.1

`v4.36.0`

Compare Source

What's Changed

✨ feat(config): allow skip_missing_interpreters per environment by @gaborbernat in #3684
Return non-zero exit code from tox config when exceptions occur by @veeceey in #3683
Update development.rst to reflect current standards by @rahuldevikar in #3685
Build dependencies should only come from build backend by @rahuldevikar in #3687
Add packaging environment docs to regular Configuration by @rahuldevikar in #3686
🔧 chore(type): migrate from mypy to ty by @gaborbernat in #3688
📝 docs(plugins): document CLI argument conventions by @gaborbernat in #3689
Exclude self-dependencies in run_order to prevent KeyError by @rahuldevikar in #3690
Drop setup.py mentions from the installation page by @rahuldevikar in #3693
🚀 perf(tests): prevent stale fixture state and fix flaky timing assertions by @gaborbernat in #3692
✨ feat(run): add fail-fast option to stop on first failure by @gaborbernat in #3691
📝 docs(plugins): document toxfile.py inline plugins by @gaborbernat in #3694
✨ feat(cli): add shell completion via argcomplete by @gaborbernat in #3695
✨ feat(package): validate extras against package metadata by @gaborbernat in #3696
✨ feat(depends): add glob pattern support for depends option by @gaborbernat in #3697
✨ feat(env): add disallow_pass_env to exclude env vars by @gaborbernat in #3698
📝 docs: restructure documentation following Diataxis framework by @gaborbernat in #3702
📝 docs: config enhancements, man page, version tracking by @gaborbernat in #3703
Added a _resolve_path() static method to InstallPackageAction by @rahuldevikar in #3699
Follow FORCE_COLOR. Any non-empty value now enables color by @rahuldevikar in #3700

New Contributors

@veeceey made their first contribution in #3683

Full Changelog: https://github.com/tox-dev/tox/compare/4.35.0...4.36.0

`v4.35.0`

Compare Source

What's Changed

docs: fix misleading ENVDIR reference in devenv description by @VedantMadane in #3670
Fix CI post packaging releese by @gaborbernat in #3673
Fix code block format in docs/plugins.rst by @mushitoriami in #3675
fix(docs): correct path for built documentation by @daniel7an in #3680
Document injected environment variables by @rahuldevikar in #3681
Show toxfile.py inline plugin in --version output by @rahuldevikar in #3682

New Contributors

@VedantMadane made their first contribution in #3670
@mushitoriami made their first contribution in #3675
@daniel7an made their first contribution in #3680
@rahuldevikar made their first contribution in #3681

Full Changelog: https://github.com/tox-dev/tox/compare/4.34.1...4.35.0

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.30.3`: 7.30.3

Compare Source

7.30.3 (2026-03-09)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 6143c70 (6a3c6d1)

`v7.30.2`: 7.30.2

Compare Source

7.30.2 (2026-03-06)

Bug Fixes

deps: update docker:dind docker digest to 1ba1844 (3c04d05)

evansd/whitenoise (whitenoise)

`v6.12.0`

Compare Source

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Mar 10, 2026 by uis-devops-renovatebot

fix(deps): update all non-major dependencies

Release Notes

Stable style

Preview style

Packaging

Performance

Output

Blackd

Integrations

Documentation

v9.7.4: mkdocs-material-9.7.4

Changes

v9.7.3: mkdocs-material-9.7.3

Changes

Build

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

v7.30.3: 7.30.3

7.30.3 (2026-03-09)

Bug Fixes

v7.30.2: 7.30.2

7.30.2 (2026-03-06)

Bug Fixes

Configuration

Merge request reports

`v9.7.4`: mkdocs-material-9.7.4

`v9.7.3`: mkdocs-material-9.7.3

`v7.30.3`: 7.30.3

`v7.30.2`: 7.30.2