fix(deps): update all non-major dependencies (!82) · Merge requests · Information Services / DevOps / Information Asset Register / Web Application

This MR contains the following updates:

Package	Change	Type	Update
@types/node (source)	`22.17.1` -> `22.18.12`	dependencies	minor
@types/react (source)	`18.3.23` -> `18.3.26`	dependencies	patch
alessandrojcm/commitlint-pre-commit-hook	`v9.22.0` -> `v9.23.0`	repository	minor
black (changelog)	`25.1.0` -> `25.9.0`	docs	minor
django (changelog)	`5.2.5` -> `5.2.7`	dependencies	patch
django-cors-headers (changelog)	`4.7.0` -> `4.9.0`	dependencies	minor
django-filter (changelog)	`25.1` -> `25.2`	dependencies	minor
drf-yasg (changelog)	`1.21.10` -> `1.21.11`	dependencies	patch
editorconfig-checker/editorconfig-checker.python	`3.2.1` -> `3.4.0`	repository	minor
mkdocs-material (changelog)	`9.6.16` -> `9.6.22`	docs	patch
mkdocstrings (changelog)	`0.30.0` -> `0.30.1`	docs	patch
mkdocstrings-python (changelog)	`1.16.12` -> `1.18.2`	docs	minor
poetry (changelog)	`2.1.4` -> `2.2.1`		minor
pre-commit/mirrors-mypy	`v1.17.1` -> `v1.18.2`	repository	minor
psf/black	`25.1.0` -> `25.9.0`	repository	minor
psycopg (source, changelog)	`3.2.9` -> `3.2.11`	dependencies	patch
python-poetry/poetry	`2.1.4` -> `2.2.1`	repository	minor
pyyaml (source)	`6.0.2` -> `6.0.3`	dependencies	patch
social-auth-app-django (changelog)	`5.5.1` -> `5.6.0`	dependencies	minor
timothycrosley/isort	`6.0.1` -> `6.1.0`	repository	minor
tox (changelog)	`4.27.0` -> `4.32.0`		minor
uis/devops/continuous-delivery/ci-templates	`v7.10.0` -> `v7.19.2`	repository	minor
vite (source)	`^6.3.5` -> `^6.4.1`	devDependencies	minor
whitenoise (changelog)	`6.9.0` -> `6.11.0`	dependencies	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

alessandrojcm/commitlint-pre-commit-hook (alessandrojcm/commitlint-pre-commit-hook)

`v9.23.0`

Compare Source

Features

bump the commitlint group with 2 updates (c395a79)
bump the commitlint group with 2 updates (2be08da)
bump the commitlint group with 2 updates (c3bd3f3)

psf/black (black)

`v25.9.0`

Compare Source

Highlights

Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

Fix crash while formatting a long del statement containing tuples (#4628)
Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
Handle # fmt: skip followed by a comment at the end of file (#4635)
Fix crash when a tuple appears in the as clause of a with statement (#4634)
Fix crash when tuple is used as a context manager inside a with statement (#4646)
Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
Fix crash on a \\r\n (#4673)
Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
Fix crash on parenthesized expression inside a type parameter bound (#4684)
Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
Improve multiline_string_handling with ternaries and dictionaries (#4657)
Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
Wrap the in clause of comprehensions across lines if necessary (#4699)
Remove parentheses around multiple exception types in except and except* without as. (#4720)
Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

Rewrite tokenizer to improve performance and compliance (#4536)
Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

Avoid using an extra process when running with only one worker (#4734)

Integrations

Fix the version check in the vim file to reject Python 3.8 (#4567)
Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
Build gallery docker image with python3-slim and reduce image size (#4686)

Documentation

Add FAQ entry for windows emoji not displaying (#4714)

django/django (django)

`v5.2.7`

Compare Source

`v5.2.6`

Compare Source

adamchainz/django-cors-headers (django-cors-headers)

`v4.9.0`

Compare Source

Support Django 6.0.

`v4.8.0`

Compare Source

Support Python 3.14.

carltongibson/django-filter (django-filter)

`v25.2`

Compare Source

Added testing for Django 6.0.
Dropped support for Django <5.2 LTS
Dropped support for Python 3.9.

axnsan12/drf-yasg (drf-yasg)

`v1.21.11`

Compare Source

FIXED: Fix list views with parameters in last path segment not named "list" views (#917) ADDED: Allow overriding produces/consumes with @swagger_auto_schema decorator (#916) FIXED: Fix filter parameters not appearing in swagger with django-filter>=25 (#926) IMPROVED: Update Python, Django, and DRF versions and packaging configuration (#922) IMPROVED: Remove usage of pkg_resources (#928) FIXED: Fix call_view_method warning to include the method name again (#923) ADDED: Add a hide download button option (#848) ADDED: Add ruff linters (#903)

editorconfig-checker/editorconfig-checker.python (editorconfig-checker/editorconfig-checker.python)

`v3.4.0`

Compare Source

`v3.3.0`

Compare Source

squidfunk/mkdocs-material (mkdocs-material)

`v9.6.22`: mkdocs-material-9.6.22

Compare Source

Updated Georgian translation

`v9.6.21`: mkdocs-material-9.6.21

Compare Source

Updated Serbian translations
Fixed #8458: Temporary pin of click dependency

`v9.6.20`: mkdocs-material-9.6.20

Compare Source

Fixed #8446: Deprecation warning as of Python 3.14 in Emoji extension
Fixed #8440: & character not escaped in search highlighting
Fixed #8439: FontAwesome icons color not set in social cards (regression)

`v9.6.19`: mkdocs-material-9.6.19

Compare Source

Added support for Python 3.14
Updated Bahasa Malaysia translations

`v9.6.18`: mkdocs-material-9.6.18

Compare Source

Updated Azerbaijani translations
Fixed last compat issues with minijinja, now 100% compatible

`v9.6.17`: mkdocs-material-9.6.17

Compare Source

Fixed #8396: Videos do not autoplay when inside a content tab
Fixed #8394: Stroke width not effective in Mermaid.js diagrams
Fixed disappearing version selector when hiding page title

mkdocstrings/mkdocstrings (mkdocstrings)

`v0.30.1`

Compare Source

Compare with 0.30.0

Bug Fixes

Create default SSL context in main thread before downloading inventories (eec7fb4 by Çağlar Kutlu). Issue-796, MR-797

mkdocstrings/python (mkdocstrings-python)

`v1.18.2`

Compare Source

Compare with 1.18.1

Bug Fixes

Normalize spaces to underscores when passing object to rendering context using its kind as key (6f79be0 by Timothée Mazzucotelli). Issue-mkdocstrings-791

`v1.18.1`

Compare Source

Compare with 1.18.0

Bug Fixes

Don't show implementation signature of __init__ method when overloads_only is true and it is merged into the class (9ef620f by Timothée Mazzucotelli). Issue-308

`v1.18.0`

Compare Source

Compare with 1.17.0

Features

Support PEP 695 generics (dc8c3ad by Victor Westerhuis). MR-221, Co-authored-by: Timothée Mazzucotelli dev@pawamoy.fr

Bug Fixes

Increase maximum recursion limit in case of deeply nested ASTs (rare occurrence) (6004ccf by Timothée Mazzucotelli). Issue-griffe-402

`v1.17.0`

Compare Source

Compare with 1.16.12

Features

Support new Griffe parsing options warn_missing_types and warnings (0e3bdb8 by Timothée Mazzucotelli). Issue-mkdocstrings-437
Add skip_local_inventory option to prevent objects from being registered in the local objects inventory (e82c24f by Bartosz Sławecki). Issue-296, Issue-mkdocstrings-671, MR-297
Support hiding attribute values (6cf34b9 by Bartosz Sławecki). Issue-292: #292, MR-293: #293
Support hiding implementation signature (showing overload only) (d3b35e1 by Bartosz Sławecki). Issue-213, MR-286

Code Refactoring

Deprecate locale option in favor of mkdocstrings' (17f71ba by Timothée Mazzucotelli). MR-288

python-poetry/poetry (poetry)

`v2.2.1`

Compare Source

Fixed

Fix an issue where poetry self show failed with a message about an invalid output format (#10560).

Docs

Remove outdated statements about dependency groups (#10561).

poetry-core (`2.2.1`)

Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#888).

`v2.2.0`

Compare Source

Added

Add support for nesting dependency groups (#10166).
Add support for PEP 735 dependency groups (#10130).
Add support for PEP 639 license clarity (#10413).
Add a --format option to poetry show to alternatively output json format (#10487).
Add official support for Python 3.14 (#10514).

Changed

Normalize dependency group names (#10387).
Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#10278).
Improve log output during poetry install when a wheel is built from source (#10404).
Improve error message in case a file lock could not be acquired while cloning a git repository (#10535).
Require dulwich>=0.24.0 (#10492).
Allow virtualenv>=20.33 again (#10506).
Allow findpython>=0.7 (#10510).
Allow importlib-metadata>=8.7 (#10511).

Fixed

Fix an issue where poetry new did not create the project structure in an existing empty directory (#10431).
Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#10516).

poetry-core (`2.2.0`)

Deprecate table values and values that are not valid SPDX expressions for [project.license] (#870).
Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#874).
Fix an issue where marker operations could result in invalid markers (#875).

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3

python-social-auth/social-app-django (social-auth-app-django)

`v5.6.0`

Compare Source

Changed

Fixed possibly unsafe account association (CVE-2025-61783)
Storage now filters for active users

Added

Django 6.0 and Python 3.14 compatibility
Type annotations
LoginRequiredMiddleware compatibility
RAISE_EXCEPTIONS and LOGIN_ERROR_URL can be configured per backend

timothycrosley/isort (timothycrosley/isort)

`v6.1.0`

Compare Source

Add python 3.14 classifier and badge (#2409) @staticdev
- Drop use of non-standard pkg_resources API (#2405) @dvarrazzo

tox-dev/tox (tox)

`v4.32.0`

Compare Source

What's Changed

docs: Add Python 3.14 and 3.14t to config examples by @cclauss in #3626
Fix broken log message (in that branch it did not match the arguments). by @ionelmc in #3634
Allow braced range syntax in internal sections of tox.ini file by @marcosboger in #3631
fix: ensure log folder is created before writing the execution logs by @ssbarnea in #3633
TST: add weekly compatibility checks for CPython 3.15 by @neutrinoceros in #3629

New Contributors

@ionelmc made their first contribution in #3634
@marcosboger made their first contribution in #3631
@neutrinoceros made their first contribution in #3629

Full Changelog: https://github.com/tox-dev/tox/compare/4.31.0...4.32.0

`v4.31.0`

Compare Source

What's Changed

Address a type-conversion noted during doc builds by @kurtmckee in #3623
Add 3.14, drop 3.9 and support | union style by @gaborbernat in #3624

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.3...4.31.0

`v4.30.3`

Compare Source

What's Changed

Isolate the test suite from any existing DEFAULT_CONFIG_FILE file by @kurtmckee in #3612
Fix none config file issue 3611 by @kurtmckee in #3613
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3608
Fix incorrect type annotations in PythonPathPackageWithDeps (fixes #3607) by @PreistlyPython in #3616
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3615

New Contributors

@PreistlyPython made their first contribution in #3616

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.2...4.30.3

`v4.30.2`

Compare Source

What's Changed

Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 by @dependabot[bot] in #3603
Ensure automatically provisioned environment is torn down by @vytas7 in #3601
Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in /.github/workflows by @dependabot[bot] in #3604

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.1...4.30.2

`v4.30.1`

Compare Source

What's Changed

Prevent Tox from hanging with --installpkg sdist due to orphaned build backend by @vytas7 in #3530

New Contributors

@vytas7 made their first contribution in #3530

Full Changelog: https://github.com/tox-dev/tox/compare/4.30.0...4.30.1

`v4.30.0`

Compare Source

What's Changed

Pass through CI as __TOX_ENVIRONMENT_VARIABLE_ORIGINAL_CI by @Liam-DeVoe in #3592
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3596
Fix the built docs HTML path hint in tox.toml by @webknjaz in #3594
Add a "version added" note for tox_extend_envs by @webknjaz in #3595
fix: provide clear messaging about config file loading by @ssbarnea in #3578
Ensure tox_extend_envs list can be read twice by @webknjaz in #3598

New Contributors

@Liam-DeVoe made their first contribution in #3592

Full Changelog: https://github.com/tox-dev/tox/compare/4.29.0...4.30.0

`v4.29.0`

Compare Source

What's Changed

Docs: environment variables contain strings by @hroncok in #3575
🐍 Fix sys_platform Fixture Leakage breaking the CI by @gaborbernat in #3589
Expose a new tox_extend_envs hook in plugins API by @webknjaz in #3591

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.4...4.29.0

`v4.28.4`

Compare Source

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3570
Pass ssh-agent variables by default by @daniilgankov in #3572

New Contributors

@daniilgankov made their first contribution in #3572

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.3...4.28.4

`v4.28.3`

Compare Source

What's Changed

Fix typo on cmd_build filter check expression by @gaborbernat in #3569

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.2...4.28.3

`v4.28.2`

Compare Source

What's Changed

Don't pass in the filter argument to tar.extractall on old Python versions by @gaborbernat in #3568

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.1...4.28.2

`v4.28.1`

Compare Source

What's Changed

Fix an issue number typo in changelog by @hroncok in #3563
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3564
Only use tarfile.data_filter when it's available by @gaborbernat in #3566

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.0...4.28.1

`v4.28.0`

Compare Source

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3548
[docs] Document how to require a plugin by @stephenfin in #3552
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3554
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3558
Add [testenv] constraints option by @stephenfin in #3556
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3562
Allow disabling plugins on a one-off by @gaborbernat in #3560

Full Changelog: https://github.com/tox-dev/tox/compare/4.27.0...4.28.0

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.19.2`: 7.19.2

Compare Source

7.19.2 (2025-10-23)

Bug Fixes

maven.gitab-ci.yml: added missing GKE_RUNNER_TAG on build_artifact (470fc86)

`v7.19.1`: 7.19.1

Compare Source

7.19.1 (2025-10-23)

Bug Fixes

maven.gitlab-ci.yml: update publish to use CI_COMMIT_TAG for a release, or script for snapshot (e616bd4)

`v7.19.0`: 7.19.0

Compare Source

7.19.0 (2025-10-16)

Features

add poe-based test runner proof of concept (8e159c9)

`v7.18.0`: 7.18.0

Compare Source

7.18.0 (2025-10-02)

Features

python: remove Python 3.9 from default Python version list (6468459), closes #167

`v7.17.7`: 7.17.7

Compare Source

7.17.7 (2025-10-02)

Bug Fixes

python-tox: increase Kubernetes memory limit for python-tox jobs (461ab04)

`v7.17.6`: 7.17.6

Compare Source

7.17.6 (2025-10-01)

Bug Fixes

terraform: set kubernetes CPU requests for terraform jobs (5c75c2d)

`v7.17.5`: 7.17.5

Compare Source

7.17.5 (2025-09-30)

Bug Fixes

exclude modules example sub-dirs from trivy scan (3adf47a)

`v7.17.4`: 7.17.4

Compare Source

7.17.4 (2025-09-29)

Bug Fixes

yarn: bump k8s memory limit for yarn:pack jobs (739da6d), closes #158 #158

`v7.17.3`: 7.17.3

Compare Source

7.17.3 (2025-09-29)

`v7.17.2`: 7.17.2

Compare Source

7.17.2 (2025-09-25)

Bug Fixes

mandatory-jobs: reduce cpu and memory requests for SAST jobs (9d3526a)

`v7.17.1`: 7.17.1

Compare Source

7.17.1 (2025-09-25)

Bug Fixes

pre-commit: certdir variable must be an empty string (d608c55)

`v7.17.0`: 7.17.0

Compare Source

7.17.0 (2025-09-24)

Features

mandatory-jobs: increase runner resources for failing SAST jobs (cfb7fd5)

`v7.16.0`: 7.16.0

Compare Source

7.16.0 (2025-09-19)

Features

🎸 Move standard job to Generic GKE Runner (59d2a0e)

`v7.15.2`: 7.15.2

Compare Source

7.15.2 (2025-09-17)

`v7.15.1`: 7.15.1

Compare Source

7.15.1 (2025-09-11)

Bug Fixes

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)