fix(deps): update all non-major dependencies (!82) · Merge requests · Information Services / DevOps / Information Asset Register / Web Application

This MR contains the following updates:

Package	Change	Type	Update	Pending
@types/node (source)	`22.17.1` → `22.19.8`	dependencies	minor	`22.19.9`
@types/react (source)	`18.3.23` → `18.3.27`	dependencies	patch	`18.3.28`
DavidAnson/markdownlint-cli2	`v0.18.1` → `v0.20.0`	repository	minor
alessandrojcm/commitlint-pre-commit-hook	`v9.22.0` → `v9.24.0`	repository	minor
black (changelog)	`25.1.0` → `25.12.0`	docs	minor
django (changelog)	`5.2.5` → `5.2.11`	dependencies	patch
django-cors-headers (changelog)	`4.7.0` → `4.9.0`	dependencies	minor
django-crispy-forms (changelog)	`2.4` → `2.5`	dependencies	minor
django-filter (changelog)	`25.1` → `25.2`	dependencies	minor
drf-yasg (changelog)	`1.21.10` → `1.21.14`	dependencies	patch
editorconfig-checker/editorconfig-checker.python	`3.2.1` → `3.6.0`	repository	minor
externalsettings	`2.0.4` → `2.0.10`	dependencies	patch
mkdocs-material (changelog)	`9.6.16` → `9.7.1`	docs	minor
mkdocstrings-python (changelog)	`1.16.12` → `1.19.0`	docs	minor
poetry (changelog)	`2.1.4` → `2.3.2`		minor
pre-commit/mirrors-mypy	`v1.17.1` → `v1.19.1`	repository	minor
psf/black	`25.1.0` → `25.12.0`	repository	minor
psycopg (changelog)	`3.2.9` → `3.3.2`	dependencies	minor
python-poetry/poetry	`2.1.4` → `2.3.2`	repository	minor
pyyaml (source)	`6.0.2` → `6.0.3`	dependencies	patch
social-auth-app-django (changelog)	`5.5.1` → `5.7.0`	dependencies	minor
timothycrosley/isort	`6.0.1` → `6.1.0`	repository	minor
tox (changelog)	`4.27.0` → `4.34.1`		minor
uis/devops/continuous-delivery/ci-templates	`v7.10.0` → `v7.27.8`	repository	minor
vite (source)	`^6.3.5` → `^6.4.1`	devDependencies	minor
whitenoise (changelog)	`6.9.0` → `6.11.0`	dependencies	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

DavidAnson/markdownlint-cli2 (DavidAnson/markdownlint-cli2)

alessandrojcm/commitlint-pre-commit-hook (alessandrojcm/commitlint-pre-commit-hook)

`v9.24.0`

Compare Source

Features

bump the commitlint group with 2 updates (f275344)
bump the commitlint group with 2 updates (d68a0ba)
bump the commitlint group with 2 updates (9a3ee85)

`v9.23.0`

Compare Source

Features

bump the commitlint group with 2 updates (c395a79)
bump the commitlint group with 2 updates (2be08da)
bump the commitlint group with 2 updates (c3bd3f3)

psf/black (black)

`v25.12.0`

Compare Source

Highlights

Black no longer supports running with Python 3.9 (#4842)

Stable style

Fix bug where comments preceding # fmt: off/# fmt: on blocks were incorrectly removed, particularly affecting Jupytext's # %% [markdown] comments (#4845)
Fix crash when multiple # fmt: skip comments are used in a multi-part if-clause, on string literals, or on dictionary entries with long lines (#4872)
Fix possible crash when fmt: directives aren't on the top level (#4856)

Preview style

Fix fmt: skip skipping the line after instead of the line it's on (#4855)
Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)
Fix fix_fmt_skip_in_one_liners crashing on with statements (#4853)
Fix fix_fmt_skip_in_one_liners crashing on annotated parameters (#4854)
Fix new lines being added after imports with # fmt: skip on them (#4894)

Packaging

Releases now include arm64 Windows binaries and wheels (#4814)

Integrations

Add output-file input to GitHub Action psf/black to write formatter output to a file for artifact capture and log cleanliness (#4824)

`v25.11.0`

Compare Source

Highlights

Enable base 3.14 support (#4804)
Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

Move multiline_string_handling from --unstable to --preview (#4760)
Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)
Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
Standardize type comments to form # type: <value> (#4645)
Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

Add no_cache option to control caching behavior. (#4803)

Packaging

Releases now include arm64 Linux binaries (#4773)
Releases now include arm64 Windows binaries and wheels (#4814)

Output

Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

Enable 3.14 base CI (#4804)
Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)
Improve error message for vim plugin users. It now handles independently vim version
Vim: Warn on unsupported Vim and Python versions independently (#4772)
Vim: Print the import paths when importing black fails (#4675)
Vim: Fix handling of virtualenvs that have a different Python version (#4675)

`v25.9.0`

Compare Source

Highlights

Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

Fix crash while formatting a long del statement containing tuples (#4628)
Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
Handle # fmt: skip followed by a comment at the end of file (#4635)
Fix crash when a tuple appears in the as clause of a with statement (#4634)
Fix crash when tuple is used as a context manager inside a with statement (#4646)
Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
Fix crash on a \\r\n (#4673)
Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
Fix crash on parenthesized expression inside a type parameter bound (#4684)
Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
Improve multiline_string_handling with ternaries and dictionaries (#4657)
Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
Wrap the in clause of comprehensions across lines if necessary (#4699)
Remove parentheses around multiple exception types in except and except* without as. (#4720)
Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

Rewrite tokenizer to improve performance and compliance (#4536)
Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

Avoid using an extra process when running with only one worker (#4734)

Integrations

Fix the version check in the vim file to reject Python 3.8 (#4567)
Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
Build gallery docker image with python3-slim and reduce image size (#4686)

Documentation

Add FAQ entry for windows emoji not displaying (#4714)

django/django (django)

`v5.2.11`

Compare Source

`v5.2.10`

Compare Source

`v5.2.9`

Compare Source

`v5.2.8`

Compare Source

`v5.2.7`

Compare Source

`v5.2.6`

Compare Source

adamchainz/django-cors-headers (django-cors-headers)

`v4.9.0`

Compare Source

Support Django 6.0.

`v4.8.0`

Compare Source

Support Python 3.14.

django-crispy-forms/django-crispy-forms (django-crispy-forms)

`v2.5`

Compare Source

Confirmed support for Python 3.14.
Confirmed support for Django 6.0.
Dropped support for Python 3.8.

carltongibson/django-filter (django-filter)

`v25.2`

Compare Source

Added testing for Django 6.0.
Dropped support for Django <5.2 LTS
Dropped support for Python 3.9.

axnsan12/drf-yasg (drf-yasg)

`v1.21.14`

Compare Source

FIXED: Fix missing swagger-ui sourcemaps (#950)

`v1.21.13`

Compare Source

`v1.21.12`

Compare Source

FIXED: Bring the bundled swagger ui up to date (#944) IMPROVED: Update the logout button to use a POST request. (#945) ADDED: Add a live demo domain (#946) ADDED: Handle annotations that are not available at runtime (#941)

`v1.21.11`

Compare Source

FIXED: Fix list views with parameters in last path segment not named "list" views (#917) ADDED: Allow overriding produces/consumes with @swagger_auto_schema decorator (#916) FIXED: Fix filter parameters not appearing in swagger with django-filter>=25 (#926) IMPROVED: Update Python, Django, and DRF versions and packaging configuration (#922) IMPROVED: Remove usage of pkg_resources (#928) FIXED: Fix call_view_method warning to include the method name again (#923) ADDED: Add a hide download button option (#848) ADDED: Add ruff linters (#903)

editorconfig-checker/editorconfig-checker.python (editorconfig-checker/editorconfig-checker.python)

`v3.6.0`

Compare Source

`v3.5.0`

Compare Source

`v3.4.1`

Compare Source

`v3.4.0`

Compare Source

`v3.3.0`

Compare Source

squidfunk/mkdocs-material (mkdocs-material)

`v9.7.1`: mkdocs-material-9.7.1

Compare Source

Updated requests to 2.30+ to mitigate CVE in urllib
Fixed privacy plugin not picking up protocol-relative URLs
Fixed #8542: false positives and negatives captured in privacy plugin

`v9.7.0`: mkdocs-material-9.7.0

Compare Source

[!WARNING]

Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

→ Read the full announcement on our blog

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved unsustainable to maintain and represent architectural dead ends. They are provided as-is without ongoing support.

Changes:

Added support for projects plugin (for compat, now deprecated)
Added support for typeset plugin (for compat, now deprecated)
Added support for pinned blog posts and author profiles
Added support for customizing pagination for blog index pages
Added support for customizing blog category sort order
Added support for staying on page when switching languages
Added support for disabling tags in table of contents
Added support for nested tags and shadow tags
Added support for footnote tooltips
Added support for instant previews
Added support for instant prefetching
Added support for custom social card layouts
Added support for custom social card background images
Added support for selectable rangs in code blocks
Added support for custom selectors for code annotations
Added support for configurable log level in privacy plugin
Added support for processing of external links in privacy plugin
Added support for automatic image optimization via optimize plugin
Added support for navigation paths (breadcrumbs)
Fixed #8519: Vector accents do not render when using KaTeX

`v9.6.23`: mkdocs-material-9.6.23

Compare Source

Updated Burmese translation

`v9.6.22`: mkdocs-material-9.6.22

Compare Source

Updated Georgian translation

`v9.6.21`: mkdocs-material-9.6.21

Compare Source

Updated Serbian translations
Fixed #8458: Temporary pin of click dependency

`v9.6.20`: mkdocs-material-9.6.20

Compare Source

Fixed #8446: Deprecation warning as of Python 3.14 in Emoji extension
Fixed #8440: & character not escaped in search highlighting
Fixed #8439: FontAwesome icons color not set in social cards (regression)

`v9.6.19`: mkdocs-material-9.6.19

Compare Source

Added support for Python 3.14
Updated Bahasa Malaysia translations

`v9.6.18`: mkdocs-material-9.6.18

Compare Source

Updated Azerbaijani translations
Fixed last compat issues with minijinja, now 100% compatible

`v9.6.17`: mkdocs-material-9.6.17

Compare Source

Fixed #8396: Videos do not autoplay when inside a content tab
Fixed #8394: Stroke width not effective in Mermaid.js diagrams
Fixed disappearing version selector when hiding page title

mkdocstrings/python (mkdocstrings-python)

`v1.19.0`

Compare Source

Compare with 1.18.2

Features

Release scoped and relative cross-references (872afc5 by Timothée Mazzucotelli).
Release __all__ ordering feature (84aaebc by Timothée Mazzucotelli).
Release public filter feature (3be14cc by Timothée Mazzucotelli).
Release backlinks feature (ae7cc2d by Timothée Mazzucotelli).
Release expression modernization feature (dbadd1e by Timothée Mazzucotelli).
Release visually-lighter admonitions for source code blocks (fdaeb48 by Timothée Mazzucotelli).
Release inheritance diagram features (669b42e by Timothée Mazzucotelli).

Code Refactoring

Update code base for Python 3.10 (b696ed2 by Timothée Mazzucotelli).

`v1.18.2`

Compare Source

Compare with 1.18.1

Bug Fixes

Normalize spaces to underscores when passing object to rendering context using its kind as key (6f79be0 by Timothée Mazzucotelli). Issue-mkdocstrings-791

`v1.18.1`

Compare Source

Compare with 1.18.0

Bug Fixes

Don't show implementation signature of __init__ method when overloads_only is true and it is merged into the class (9ef620f by Timothée Mazzucotelli). Issue-308

`v1.18.0`

Compare Source

Compare with 1.17.0

Features

Support PEP 695 generics (dc8c3ad by Victor Westerhuis). MR-221, Co-authored-by: Timothée Mazzucotelli dev@pawamoy.fr

Bug Fixes

Increase maximum recursion limit in case of deeply nested ASTs (rare occurrence) (6004ccf by Timothée Mazzucotelli). Issue-griffe-402

`v1.17.0`

Compare Source

Compare with 1.16.12

Features

Support new Griffe parsing options warn_missing_types and warnings (0e3bdb8 by Timothée Mazzucotelli). Issue-mkdocstrings-437
Add skip_local_inventory option to prevent objects from being registered in the local objects inventory (e82c24f by Bartosz Sławecki). Issue-296, Issue-mkdocstrings-671, MR-297
Support hiding attribute values (6cf34b9 by Bartosz Sławecki). Issue-292: #292, MR-293: #293
Support hiding implementation signature (showing overload only) (d3b35e1 by Bartosz Sławecki). Issue-213, MR-286

Code Refactoring

Deprecate locale option in favor of mkdocstrings' (17f71ba by Timothée Mazzucotelli). MR-288

python-poetry/poetry (poetry)

`v2.3.2`

Compare Source

Changed

Allow dulwich>=1.0 (#10701).

poetry-core (`2.3.1`)

Fix an issue where platform_release could not be parsed on Windows Server (#911).

`v2.3.1`

Compare Source

Fixed

Fix an issue where cached information about each package was always considered outdated (#10699).

Docs

Document SHELL_VERBOSITY environment variable (#10678).

`v2.3.0`

Compare Source

Added

Add support for exporting pylock.toml files with poetry-plugin-export (#10677).
Add support for specifying build constraints for dependencies (#10388).
Add support for publishing artifacts whose version is determined dynamically by the build-backend (#10644).
Add support for editable project plugins (#10661).
Check requires-poetry before any other validation (#10593).
Validate the content of project.readme when running poetry check (#10604).
Add the option to clear all caches by making the cache name in poetry cache clear optional (#10627).
Automatically update the cache for packages where the locked files differ from cached files (#10657).
Suggest to clear the cache if running a command with --no-cache solves an issue (#10585).
Propose poetry init when trying poetry new for an existing directory (#10563).
Add support for poetry publish --skip-existing for new Nexus OSS versions (#10603).
Show Poetry's own Python's path in poetry debug info (#10588).

Changed

Drop support for Python 3.9 (#10634).
Change the default of installer.re-resolve from true to false (#10622).
PEP 735 dependency groups are considered in the lock file hash (#10621).
Deprecate poetry.utils._compat.metadata, which is sometimes used in plugins, in favor of importlib.metadata (#10634).
Improve managing free-threaded Python versions with poetry python (#10606).
Prefer JSON API to HTML API in legacy repositories (#10672).
When running poetry init, only add the readme field in the pyproject.toml if the readme file exists (#10679).
Raise an error if no hash can be determined for any distribution link of a package (#10673).
Require dulwich>=0.25.0 (#10674).

Fixed

Fix an issue where poetry remove did not work for PEP 735 dependency groups with include-group items (#10587).
Fix an issue where poetry remove caused dangling include-group references in PEP 735 dependency groups (#10590).
Fix an issue where poetry add did not work for PEP 735 dependency groups with include-group items (#10636).
Fix an issue where PEP 735 dependency groups were not considered in the lock file hash (#10621).
Fix an issue where wrong markers were locked for a dependency that was required by several groups with different markers (#10613).
Fix an issue where non-deterministic markers were created in a method used by poetry-plugin-export (#10667).
Fix an issue where wrong wheels were chosen for installation in free-threaded Python environments if Poetry itself was not installed with free-threaded Python (#10614).
Fix an issue where poetry publish used the metadata of the project instead of the metadata of the build artifact (#10624).
Fix an issue where poetry env use just used another Python version instead of failing when the requested version was not supported by the project (#10685).
Fix an issue where poetry env activate returned the wrong command for dash (#10696).
Fix an issue where data-dir and python.installation-dir could not be set (#10595).
Fix an issue where Python and pip executables were not correctly detected on Windows (#10645).
Fix an issue where invalid template variables in virtualenvs.prompt caused an incomprehensible error message (#10648).

Docs

Add a warning about ~/.netrc for Poetry credential configuration (#10630).
Clarify that the local configuration takes precedence over the global configuration (#10676).
Add an explanation in which cases packages are automatically detected (#10680).

poetry-core (`2.3.0`)

Normalize versions (#893).
Fix an issue where unsatisfiable requirements did not raise an error (#891).
Fix an issue where the implicit main group did not exist if it was explicitly declared as not having any dependencies (#892).
Fix an issue where python_full_version markers with pre-release versions were parsed incorrectly (#893).

`v2.2.1`

Compare Source

Fixed

Fix an issue where poetry self show failed with a message about an invalid output format (#10560).

Docs

Remove outdated statements about dependency groups (#10561).

poetry-core (`2.2.1`)

Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#888).

`v2.2.0`

Compare Source

Added

Add support for nesting dependency groups (#10166).
Add support for PEP 735 dependency groups (#10130).
Add support for PEP 639 license clarity (#10413).
Add a --format option to poetry show to alternatively output json format (#10487).
Add official support for Python 3.14 (#10514).

Changed

Normalize dependency group names (#10387).
Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#10278).
Improve log output during poetry install when a wheel is built from source (#10404).
Improve error message in case a file lock could not be acquired while cloning a git repository (#10535).
Require dulwich>=0.24.0 (#10492).
Allow virtualenv>=20.33 again (#10506).
Allow findpython>=0.7 (#10510).
Allow importlib-metadata>=8.7 (#10511).

Fixed

Fix an issue where poetry new did not create the project structure in an existing empty directory (#10431).
Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#10516).

poetry-core (`2.2.0`)

Deprecate table values and values that are not valid SPDX expressions for [project.license] (#870).
Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#874).
Fix an issue where marker operations could result in invalid markers (#875).

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3

python-social-auth/social-app-django (social-auth-app-django)

`v5.7.0`

Compare Source

Changed

Integrated with social_core using registry instead of monkey patching it

`v5.6.0`

Compare Source

Changed

Fixed possibly unsafe account association (CVE-2025-61783)
Storage now filters for active users

Added

Django 6.0 and Python 3.14 compatibility
Type annotations
LoginRequiredMiddleware compatibility
RAISE_EXCEPTIONS and LOGIN_ERROR_URL can be configured per backend

timothycrosley/isort (timothycrosley/isort)

`v6.1.0`

Compare Source

Add python 3.14 classifier and badge (#2409) @staticdev
- Drop use of non-standard pkg_resources API (#2405) @dvarrazzo

tox-dev/tox (tox)

`v4.34.1`

Compare Source

What's Changed

fix: wheel corruption when running parallel tox processes by @gaborbernat in #3667

Full Changelog: https://github.com/tox-dev/tox/compare/4.34.0...4.34.1

`v4.34.0`

Compare Source

What's Changed

feat: Support depenedcy groups with self references by @Czaki in #3666

Full Changelog: https://github.com/tox-dev/tox/compare/4.33.0...4.34.0

`v4.33.0`

Compare Source

What's Changed

Pass LOCALAPPDATA by default on Windows (#3639) by @clint-lawrence in #3640
Docs: Add caution about ranges like py{39-314} by @ferdnyc in #3652
CLI Parser: Drop epilog message for Sphinx help by @ferdnyc in #3653
📚 Integrate sphinx-issues extension by @webknjaz in #3655
Fix sphinx doc build by @gaborbernat in #3662
feat: add conditional set_env support via PEP-496 markers by @gaborbernat in #3663

New Contributors

@clint-lawrence made their first contribution in #3640
@ferdnyc made their first contribution in #3652

Full Changelog: https://github.com/tox-dev/tox/compare/4.32.0...4.33.0

`v4.32.0`

Compare Source

What's Changed

docs: Add Python 3.14 and 3.14t to config examples by @cclauss in #3626
Fix broken log message (in that branch it did not match the arguments). by @ionelmc in #3634
Allow braced range syntax in internal sections of tox.ini file by @marcosboger in #3631
fix: ensure log folder is created before writing the execution logs by @ssbarnea in #3633
TST: add weekly compatibility checks for CPython 3.15 by @neutrinoceros in #3629

New Contributors

@ionelmc made their first contribution in #3634
@marcosboger made their first contribution in #3631
@neutrinoceros made their first contribution in #3629

Full Changelog: https://github.com/tox-dev/tox/compare/4.31.0...4.32.0

`v4.31.0`

Compare Source

What's Changed

Address a type-conversion noted during doc builds by @kurtmckee in #3623
Add 3.14, drop 3.9 and support | union style by @gaborbernat in #3624

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.3...4.31.0

`v4.30.3`

Compare Source

What's Changed

Isolate the test suite from any existing DEFAULT_CONFIG_FILE file by @kurtmckee in #3612
Fix none config file issue 3611 by @kurtmckee in #3613
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3608
Fix incorrect type annotations in PythonPathPackageWithDeps (fixes #3607) by @PreistlyPython in #3616
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3615

New Contributors

@PreistlyPython made their first contribution in #3616

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.2...4.30.3

`v4.30.2`

Compare Source

What's Changed

Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 by @dependabot[bot] in #3603
Ensure automatically provisioned environment is torn down by @vytas7 in #3601
Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in /.github/workflows by @dependabot[bot] in #3604

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.1...4.30.2

`v4.30.1`

Compare Source

What's Changed

Prevent Tox from hanging with --installpkg sdist due to orphaned build backend by @vytas7 in #3530

New Contributors

@vytas7 made their first contribution in #3530

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.0...4.30.1

`v4.30.0`

Compare Source

What's Changed

Pass through CI as __TOX_ENVIRONMENT_VARIABLE_ORIGINAL_CI by @Liam-DeVoe in #3592
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3596
Fix the built docs HTML path hint in tox.toml by @webknjaz in #3594
Add a "version added" note for tox_extend_envs by @webknjaz in #3595
fix: provide clear messaging about config file loading by @ssbarnea in #3578
Ensure tox_extend_envs list can be read twice by @webknjaz in #3598

New Contributors

@Liam-DeVoe made their first contribution in #3592

Full Changelog: https://github.com/tox-dev/tox/compare/4.29.0...4.30.0

`v4.29.0`

Compare Source

What's Changed

Docs: environment variables contain strings by @hroncok in #3575
🐍 Fix sys_platform Fixture Leakage breaking the CI by @gaborbernat in #3589
Expose a new tox_extend_envs hook in plugins API by @webknjaz in #3591

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.4...4.29.0

`v4.28.4`

Compare Source

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3570
Pass ssh-agent variables by default by @daniilgankov in #3572

New Contributors

@daniilgankov made their first contribution in #3572

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.3...4.28.4

`v4.28.3`

Compare Source

What's Changed

Fix typo on cmd_build filter check expression by @gaborbernat in #3569

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.2...4.28.3

`v4.28.2`

Compare Source

What's Changed

Don't pass in the filter argument to tar.extractall on old Python versions by @gaborbernat in #3568

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.1...4.28.2

`v4.28.1`

Compare Source

What's Changed

Fix an issue number typo in changelog by @hroncok in #3563
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3564
Only use tarfile.data_filter when it's available by @gaborbernat in #3566

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.0...4.28.1

`v4.28.0`

Compare Source

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3548
[docs] Document how to require a plugin by @stephenfin in #3552
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3554
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3558
Add [testenv] constraints option by @stephenfin in #3556
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3562
Allow disabling plugins on a one-off by @gaborbernat in #3560

Full Changelog: https://github.com/tox-dev/tox/compare/4.27.0...4.28.0

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.27.8`: 7.27.8

Compare Source

7.27.8 (2026-02-05)

`v7.27.7`: 7.27.7

Compare Source

7.27.7 (2026-02-05)

`v7.27.6`: 7.27.6

Compare Source

7.27.6 (2026-02-05)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to bc4c7bc (d7ce92f)
deps: update python:3 docker digest to 1c4c033 (856a122)
deps: update python:3.14 docker digest to 1c4c033 (0182a8c)

`v7.27.5`: 7.27.5

Compare Source

7.27.5 (2026-02-04)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 1f8c9cd (60f854e)

`v7.27.4`: 7.27.4

Compare Source

7.27.4 (2026-02-04)

`v7.27.3`: 7.27.3

Compare Source

7.27.3 (2026-02-04)

Bug Fixes

deps: update docker:dind docker digest to 8bcbad4 (4ccc9c3)
deps: update python:3 docker digest to fbf695a (134b929)
deps: update python:3.14 docker digest to fbf695a (da47b1e)

`v7.27.2`: 7.27.2

Compare Source

7.27.2 (2026-02-03)

`v7.27.1`: 7.27.1

Compare Source

7.27.1 (2026-02-03)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to bf0a912 (2fe852d)

`v7.27.0`: 7.27.0

Compare Source

7.27.0 (2026-02-02)

Features

gitlab-ci: include mandatory jobs (2342bab), closes #192

`v7.26.3`: 7.26.3

Compare Source

7.26.3 (2026-02-02)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to e8b8b9e (2bb77ff)

`v7.26.2`: 7.26.2

Compare Source

7.26.2 (2026-01-29)

`v7.26.1`: 7.26.1

Compare Source

7.26.1 (2026-01-29)

Bug Fixes

deps: update docker:dind docker digest to a284d31 (ab440ee)

`v7.26.0`: 7.26.0

Compare Source

7.26.0 (2026-01-28)

Features

use gitlab runner cache for pre-commit jobs (fe53b0d)

`v7.25.17`: 7.25.17

Compare Source

7.25.17 (2026-01-28)

Bug Fixes

deps: update docker:dind docker digest to 6a58fe0 (123bec6)

`v7.25.16`: 7.25.16

Compare Source

7.25.16 (2026-01-26)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to d3265ad (929aa91)

`v7.25.15`: 7.25.15

Compare Source

7.25.15 (2026-01-22)

`v7.25.14`: 7.25.14

Compare Source

7.25.14 (2026-01-22)

Bug Fixes

deps: update python:3 docker digest to 17bc9f1 (9106fe0)
deps: update python:3.14 docker digest to 17bc9f1 (9ae614e)

`v7.25.13`: 7.25.13

Compare Source

7.25.13 (2026-01-19)

`v7.25.12`: 7.25.12

Compare Source

7.25.12 (2026-01-19)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to de3d0ab (8fcb386)
deps: update docker:dind docker digest to 3a33fc8 (4d1f0cb)

`v7.25.11`: 7.25.11

Compare Source

7.25.11 (2026-01-15)

Bug Fixes

pick up only the first value for the version from the openapi.yaml (857b1dd)

`v7.25.10`: 7.25.10

Compare Source

7.25.10 (2026-01-14)

Bug Fixes

deps: update python:3 docker digest to 37cba11 (f8bd952)
deps: update python:3.14 docker digest to 37cba11 (c0cd872)

`v7.25.9`: 7.25.9

Compare Source

7.25.9 (2026-01-12)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 51c2543 (26f1d48)

`v7.25.8`: 7.25.8

Compare Source

7.25.8 (2026-01-12)

Bug Fixes

deps: update docker:dind docker digest to d954272 (a5f62f1)

`v7.25.7`: 7.25.7

Compare Source

7.25.7 (2026-01-06)

Bug Fixes

deps: pin dependencies (7e5e93a)

`v7.25.6`: 7.25.6

Compare Source

7.25.6 (2026-01-05)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 26adc0a (e0ed213)
deps: update python:3.14 docker digest to 6d58c1a (a892e63)

`v7.25.5`: 7.25.5

Compare Source

7.25.5 (2025-12-31)

Bug Fixes

deps: update python:3.14 docker digest to f05033a (4028511)

`v7.25.4`: 7.25.4

Compare Source

7.25.4 (2025-12-30)

Bug Fixes

deps: update python:3.14 docker digest to 8797f8e (e2c0097)

`v7.25.3`: 7.25.3

Compare Source

7.25.3 (2025-12-29)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 7fe4ff7 (bfed258)

`v7.25.2`: 7.25.2

Compare Source

7.25.2 (2025-12-22)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 7feb224 (d5237fc)

`v7.25.1`: 7.25.1

Compare Source

7.25.1 (2025-12-18)

Bug Fixes

deps: update python:3.14 docker digest to 492b292 (db790a4)

`v7.25.0`: 7.25.0

Compare Source

7.25.0 (2025-12-18)

Features

move remaining dind job to use dind fragment (8d344ce)

`v7.24.0`: 7.24.0

Compare Source

7.24.0 (2025-12-18)

Features

add timeout when waiting for docker in .docker-in-docker fragment (b172f4c)

`v7.23.7`: 7.23.7

Compare Source

7.23.7 (2025-12-10)

Bug Fixes

dind in poe-tests-base fragment (d777a42)

`v7.23.6`: 7.23.6

Compare Source

7.23.6 (2025-12-10)

Bug Fixes

deps: update python:3.14 docker digest to 2febcd1 (b030909)

`v7.23.5`: 7.23.5

Compare Source

7.23.5 (2025-12-09)

Bug Fixes

remove container_scanning override for multi target docker images (085386c), closes #182 #182

`v7.23.4`: 7.23.4

Compare Source

7.23.4 (2025-12-09)

Bug Fixes

deps: update python:3.14 docker digest to c1684c8 (87ab2f7)

`v7.23.3`: 7.23.3

Compare Source

7.23.3 (2025-12-08)

Bug Fixes

deps: update docker:28-dind docker digest to 2a232a4 (71efda9)

`v7.23.2`: 7.23.2

Compare Source

7.23.2 (2025-12-08)

Bug Fixes

deps: update all non-major dependencies (b2a5bf1)
deps: update alpine/httpie:3.2.4 docker digest to 2b01527 (a0ce1f6)

`v7.23.1`: 7.23.1

Compare Source

7.23.1 (2025-12-05)

`v7.23.0`: 7.23.0

Compare Source

7.23.0 (2025-11-28)

Features

tox-tests to use dind config from fragments (c765400)

`v7.22.1`: 7.22.1

Compare Source

7.22.1 (2025-11-25)

Bug Fixes

add missing before_script reference to dind in .terraform-test-cleanup (2852ccd)

`v7.22.0`: 7.22.0

Compare Source

7.22.0 (2025-11-24)

Features

docker-in-docker: add waiting before_script to fragment (2b0924e), closes #178

`v7.21.0`: 7.21.0

Compare Source

7.21.0 (2025-11-19)

Features

re-work maven jobs rules (da9962b)
re-work maven jobs rules: try to re-name the job (4efa101)

`v7.20.3`: 7.20.3

Compare Source

7.20.3 (2025-11-03)

Bug Fixes

use only needed bits of Terraform-Module.gitlab-ci.yml to avoid duplicate jobs (ff646a0)

`v7.20.2`: 7.20.2

Compare Source

7.20.2 (2025-10-30)

Bug Fixes

check-latest-tag-in-changelog: skip job if tag is an alpha or beta release (210ffd5)

`v7.20.1`: 7.20.1

Compare Source

7.20.1 (2025-10-29)

Bug Fixes

allow no test coverage in maven (40db7bf)

`v7.20.0`: 7.20.0

Compare Source

7.20.0 (2025-10-28)

Features

add code coverage to maven jobs (53c1345)

`v7.19.2`: 7.19.2

Compare Source

7.19.2 (2025-10-23)

Bug Fixes

maven.gitab-ci.yml: added missing GKE_RUNNER_TAG on build_artifact (470fc86)

`v7.19.1`: 7.19.1

Compare Source

7.19.1 (2025-10-23)

Bug Fixes

maven.gitlab-ci.yml: update publish to use CI_COMMIT_TAG for a release, or script for snapshot (e616bd4)

`v7.19.0`: 7.19.0

Compare Source

7.19.0 (2025-10-16)

Features

add poe-based test runner proof of concept (8e159c9)

`v7.18.0`: 7.18.0

Compare Source

7.18.0 (2025-10-02)

Features

python: remove Python 3.9 from default Python version list (6468459), closes #167

`v7.17.7`: 7.17.7

Compare Source

7.17.7 (2025-10-02)

Bug Fixes

python-tox: increase Kubernetes memory limit for python-tox jobs (461ab04)

`v7.17.6`: 7.17.6

Compare Source

7.17.6 (2025-10-01)

Bug Fixes

terraform: set kubernetes CPU requests for terraform jobs (5c75c2d)

`v7.17.5`: 7.17.5

Compare Source

7.17.5 (2025-09-30)

Bug Fixes

exclude modules example sub-dirs from trivy scan (3adf47a)

`v7.17.4`: 7.17.4

Compare Source

7.17.4 (2025-09-29)

Bug Fixes

yarn: bump k8s memory limit for yarn:pack jobs (739da6d), closes #158 #158

`v7.17.3`: 7.17.3

Compare Source

7.17.3 (2025-09-29)

`v7.17.2`: 7.17.2

Compare Source

7.17.2 (2025-09-25)

Bug Fixes

mandatory-jobs: reduce cpu and memory requests for SAST jobs (9d3526a)

`v7.17.1`: 7.17.1

Compare Source

7.17.1 (2025-09-25)

Bug Fixes

pre-commit: certdir variable must be an empty string (d608c55)

`v7.17.0`: 7.17.0

Compare Source

7.17.0 (2025-09-24)

Features

mandatory-jobs: increase runner resources for failing SAST jobs (cfb7fd5)

`v7.16.0`: 7.16.0

Compare Source

7.16.0 (2025-09-19)

Features

🎸 Move standard job to Generic GKE Runner (59d2a0e)

`v7.15.2`: 7.15.2

Compare Source

7.15.2 (2025-09-17)

`v7.15.1`: 7.15.1

Compare Source

7.15.1 (2025-09-11)

Bug Fixes

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)