chore(deps): update all non-major dependencies (!21) · Merge requests · Information Services / DevOps / Infrastructure / Terraform Modules / GCP Alert Snooze

This MR contains the following updates:

Package	Change	Type	Update
certifi	`==2025.6.15` -> `==2025.8.3`		minor
charset-normalizer (changelog)	`==3.4.2` -> `==3.4.3`		patch
click (changelog)	`==8.2.1` -> `==8.3.0`		minor
flask (changelog)	`==3.1.1` -> `==3.1.2`		patch
gitlab.developers.cam.ac.uk/uis/gcp-function/devops	`2.3.1` -> `2.3.3`	module	patch
psf/black	`25.1.0` -> `25.9.0`	repository	minor
registry.gitlab.developers.cam.ac.uk/uis/devops/infra/dockerimages/logan-terraform	`1.12` -> `1.13`		minor
requests (source, changelog)	`==2.32.4` -> `==2.32.5`		patch
uis/devops/continuous-delivery/ci-templates	`v7.7.0` -> `v7.17.2`	repository	minor
urllib3 (changelog)	`==2.4.0` -> `==2.5.0`		minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

certifi/python-certifi (certifi)

jawah/charset_normalizer (charset-normalizer)

`v3.4.3`

Compare Source

Changed

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
Support for Python 3.14

Fixed

sdist archive contained useless directories.
automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

pallets/click (click)

`v8.3.0`

Compare Source

Released 2025-09-17

Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:
- The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)
- Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value
- The default parameter can now be any type (bool, None, etc.)
- Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610 :issue:3024 🇵🇷3030
Allow default to be set on Argument for nargs = -1. :issue:2164 🇵🇷3030
Show correct auto complete value for nargs option in combination with flag option :issue:2813
Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 🇵🇷3013
Lazily import shutil. 🇵🇷3023
Properly forward exception information to resources registered with click.core.Context.with_resource(). :issue:2447 🇵🇷3058
Fix regression related to EOF handling in CliRunner. :issue:2939 🇵🇷2940

`v8.2.2`

Compare Source

Released 2025-07-31

Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables. :issue:2952 🇵🇷2956
Fix typing issue in BadParameter and MissingParameter exceptions for the parameter param_hint that did not allow for a sequence of string where the underlying function _join_param_hints allows for it. :issue:2777 🇵🇷2990
Use the value of Enum choices to render their default value in help screen. Refs :issue:2911 🇵🇷3004
Fix completion for the Z shell (zsh) for completion items containing colons. :issue:2703 🇵🇷2846
Don't include envvar in error hint when not configured. :issue:2971 🇵🇷2972
Fix a rare race in click.testing.StreamMixer's finalization that manifested as a ValueError on close in a multi-threaded test session. :issue:2993 🇵🇷2991

pallets/flask (flask)

`v3.1.2`

Compare Source

Released 2025-08-19

stream_with_context does not fail inside async views. :issue:5774
When using follow_redirects in the test client, the final state of session is correct. :issue:5786
Relax type hint for passing bytes IO to send_file. :issue:5776

uis/devops/infra/terraform/gcp-function (gitlab.developers.cam.ac.uk/uis/gcp-function/devops)

`v2.3.3`

Compare Source

`v2.3.2`

Compare Source

psf/black (psf/black)

`v25.9.0`

Compare Source

Highlights

Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

Fix crash while formatting a long del statement containing tuples (#4628)
Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
Handle # fmt: skip followed by a comment at the end of file (#4635)
Fix crash when a tuple appears in the as clause of a with statement (#4634)
Fix crash when tuple is used as a context manager inside a with statement (#4646)
Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
Fix crash on a \\r\n (#4673)
Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
Fix crash on parenthesized expression inside a type parameter bound (#4684)
Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
Improve multiline_string_handling with ternaries and dictionaries (#4657)
Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
Wrap the in clause of comprehensions across lines if necessary (#4699)
Remove parentheses around multiple exception types in except and except* without as. (#4720)
Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

Rewrite tokenizer to improve performance and compliance (#4536)
Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

Avoid using an extra process when running with only one worker (#4734)

Integrations

Fix the version check in the vim file to reject Python 3.8 (#4567)
Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
Build gallery docker image with python3-slim and reduce image size (#4686)

Documentation

Add FAQ entry for windows emoji not displaying (#4714)

psf/requests (requests)

`v2.32.5`

Compare Source

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.
Dropped support for Python 3.8 following its end of support.

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.17.2`: 7.17.2

Compare Source

7.17.2 (2025-09-25)

Bug Fixes

mandatory-jobs: reduce cpu and memory requests for SAST jobs (9d3526a)

`v7.17.1`: 7.17.1

Compare Source

7.17.1 (2025-09-25)

Bug Fixes

pre-commit: certdir variable must be an empty string (d608c55)

`v7.17.0`: 7.17.0

Compare Source

7.17.0 (2025-09-24)

Features

mandatory-jobs: increase runner resources for failing SAST jobs (cfb7fd5)

`v7.16.0`: 7.16.0

Compare Source

7.16.0 (2025-09-19)

Features

🎸 Move standard job to Generic GKE Runner (59d2a0e)

`v7.15.2`: 7.15.2

Compare Source

7.15.2 (2025-09-17)

`v7.15.1`: 7.15.1

Compare Source

7.15.1 (2025-09-11)

Bug Fixes

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)

`v7.15.0`: 7.15.0

Compare Source

7.15.0 (2025-09-08)

Features

add custom configuration for secrets (ef86a30)

`v7.14.1`: 7.14.1

Compare Source

7.14.1 (2025-09-04)

Bug Fixes

maven.gitlab-ci.yml: move services section under maven job (a2c5dca)

`v7.14.0`: 7.14.0

Compare Source

7.14.0 (2025-09-02)

Features

mark SAST jobs as needing no build artefacts (29054df), closes #150 #150

`v7.13.1`: 7.13.1

Compare Source

7.13.1 (2025-09-01)

Bug Fixes

rename detect-non-utf8-files job and make it work with spaces in filenames (4d7ec69)

`v7.13.0`: 7.13.0

Compare Source

7.13.0 (2025-08-27)

Features

add detect-non-utf-files job (f629243)

`v7.12.0`: 7.12.0

Compare Source

7.12.0 (2025-08-27)

Features

terraform-pipeline: remove duplicate kics job (354c3cc)

`v7.11.1`: 7.11.1

Compare Source

7.11.1 (2025-08-21)

`v7.11.0`: 7.11.0

Compare Source

7.11.0 (2025-08-21)

Features

trivy job now to use logan-terrafrom image and run terraform init in before_script (b03b3e4)

`v7.10.4`: 7.10.4

Compare Source

7.10.4 (2025-08-14)

`v7.10.3`: 7.10.3

Compare Source

7.10.3 (2025-08-14)

`v7.10.2`: 7.10.2

Compare Source

7.10.2 (2025-08-14)

`v7.10.1`: 7.10.1

Compare Source

7.10.1 (2025-08-14)

`v7.10.0`: 7.10.0

Compare Source

7.10.0 (2025-08-14)

Features

auto-devops: remove mandatory jobs from auto-devops template (5f7de9c)

`v7.9.1`: 7.9.1

Compare Source

7.9.1 (2025-08-13)

`v7.9.0`: 7.9.0

Compare Source

7.9.0 (2025-08-13)

Features

mandatory-jobs: provide AST-related CI/CD variable defaults (3421a2e)

`v7.8.0`: 7.8.0

Compare Source

7.8.0 (2025-08-13)

Features

add mandatory jobs template (975f4aa)

urllib3/urllib3 (urllib3)

`v2.5.0`

Compare Source

==================

Features

Added support for the compression.zstd module that is new in Python 3.14. See PEP 784 <https://peps.python.org/pep-0784/>_ for more information. (#3610 <https://github.com/urllib3/urllib3/issues/3610>__)
Added support for version 0.5 of hatch-vcs (#3612 <https://github.com/urllib3/urllib3/issues/3612>__)

Bugfixes

Fixed a security issue where restricting the maximum number of followed redirects at the urllib3.PoolManager level via the retries parameter did not work.
Made the Node.js runtime respect redirect parameters such as retries and redirects.
Raised exception for HTTPResponse.shutdown on a connection already released to the pool. (#3581 <https://github.com/urllib3/urllib3/issues/3581>__)
Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. (#3615 <https://github.com/urllib3/urllib3/issues/3615>__)

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Sep 25, 2025 by uis-devops-renovatebot

chore(deps): update all non-major dependencies

Release Notes

Changed

Added

Fixed

Misc

Highlights

Stable style

Preview style

Parser

Performance

Integrations

Documentation

v7.17.2: 7.17.2

7.17.2 (2025-09-25)

Bug Fixes

v7.17.1: 7.17.1

7.17.1 (2025-09-25)

Bug Fixes

v7.17.0: 7.17.0

7.17.0 (2025-09-24)

Features

v7.16.0: 7.16.0

7.16.0 (2025-09-19)

Features

v7.15.2: 7.15.2

7.15.2 (2025-09-17)

v7.15.1: 7.15.1

7.15.1 (2025-09-11)

Bug Fixes

v7.15.0: 7.15.0

7.15.0 (2025-09-08)

Features

v7.14.1: 7.14.1

7.14.1 (2025-09-04)

Bug Fixes

v7.14.0: 7.14.0

7.14.0 (2025-09-02)

Features

v7.13.1: 7.13.1

7.13.1 (2025-09-01)

Bug Fixes

v7.13.0: 7.13.0

7.13.0 (2025-08-27)

Features

v7.12.0: 7.12.0

7.12.0 (2025-08-27)

Features

v7.11.1: 7.11.1

7.11.1 (2025-08-21)

v7.11.0: 7.11.0

7.11.0 (2025-08-21)

Features

v7.10.4: 7.10.4

7.10.4 (2025-08-14)

v7.10.3: 7.10.3

7.10.3 (2025-08-14)

v7.10.2: 7.10.2

7.10.2 (2025-08-14)

v7.10.1: 7.10.1

7.10.1 (2025-08-14)

v7.10.0: 7.10.0

7.10.0 (2025-08-14)

Features

v7.9.1: 7.9.1

7.9.1 (2025-08-13)

v7.9.0: 7.9.0

7.9.0 (2025-08-13)

Features

v7.8.0: 7.8.0

7.8.0 (2025-08-13)

Features

Features

Bugfixes

Configuration

Merge request reports

`v7.17.2`: 7.17.2

`v7.17.1`: 7.17.1

`v7.17.0`: 7.17.0

`v7.16.0`: 7.16.0

`v7.15.2`: 7.15.2

`v7.15.1`: 7.15.1

`v7.15.0`: 7.15.0

`v7.14.1`: 7.14.1

`v7.14.0`: 7.14.0

`v7.13.1`: 7.13.1

`v7.13.0`: 7.13.0

`v7.12.0`: 7.12.0

`v7.11.1`: 7.11.1

`v7.11.0`: 7.11.0

`v7.10.4`: 7.10.4

`v7.10.3`: 7.10.3

`v7.10.2`: 7.10.2

`v7.10.1`: 7.10.1

`v7.10.0`: 7.10.0

`v7.9.1`: 7.9.1

`v7.9.0`: 7.9.0

`v7.8.0`: 7.8.0