chore(deps): update all non-major dependencies (!21) · Merge requests · Information Services / DevOps / Infrastructure / Terraform Modules / GCP Alert Snooze

This MR contains the following updates:

Package	Change	Type	Update
certifi	`==2025.6.15` -> `==2025.8.3`		minor
charset-normalizer (changelog)	`==3.4.2` -> `==3.4.3`		patch
flask (changelog)	`==3.1.1` -> `==3.1.2`		patch
gitlab.developers.cam.ac.uk/uis/gcp-function/devops	`2.3.1` -> `2.3.3`	module	patch
registry.gitlab.developers.cam.ac.uk/uis/devops/infra/dockerimages/logan-terraform	`1.12` -> `1.13`		minor
requests (source, changelog)	`==2.32.4` -> `==2.32.5`		patch
uis/devops/continuous-delivery/ci-templates	`v7.6.0` -> `v7.14.1`	repository	minor
urllib3 (changelog)	`==2.4.0` -> `==2.5.0`		minor

Release Notes

certifi/python-certifi (certifi)

jawah/charset_normalizer (charset-normalizer)

`v3.4.3`

Compare Source

Changed

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
Support for Python 3.14

Fixed

sdist archive contained useless directories.
automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

pallets/flask (flask)

`v3.1.2`

Compare Source

Released 2025-08-19

stream_with_context does not fail inside async views. :issue:5774
When using follow_redirects in the test client, the final state of session is correct. :issue:5786
Relax type hint for passing bytes IO to send_file. :issue:5776

uis/devops/infra/terraform/gcp-function (gitlab.developers.cam.ac.uk/uis/gcp-function/devops)

`v2.3.3`

Compare Source

`v2.3.2`

Compare Source

psf/requests (requests)

`v2.32.5`

Compare Source

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.
Dropped support for Python 3.8 following its end of support.

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.14.1`: 7.14.1

Compare Source

7.14.1 (2025-09-04)

Bug Fixes

maven.gitlab-ci.yml: move services section under maven job (a2c5dca)

`v7.14.0`: 7.14.0

Compare Source

7.14.0 (2025-09-02)

Features

mark SAST jobs as needing no build artefacts (29054df), closes #150 #150

`v7.13.1`: 7.13.1

Compare Source

7.13.1 (2025-09-01)

Bug Fixes

rename detect-non-utf8-files job and make it work with spaces in filenames (4d7ec69)

`v7.13.0`: 7.13.0

Compare Source

7.13.0 (2025-08-27)

Features

add detect-non-utf-files job (f629243)

`v7.12.0`: 7.12.0

Compare Source

7.12.0 (2025-08-27)

Features

terraform-pipeline: remove duplicate kics job (354c3cc)

`v7.11.1`: 7.11.1

Compare Source

7.11.1 (2025-08-21)

`v7.11.0`: 7.11.0

Compare Source

7.11.0 (2025-08-21)

Features

trivy job now to use logan-terrafrom image and run terraform init in before_script (b03b3e4)

`v7.10.4`: 7.10.4

Compare Source

7.10.4 (2025-08-14)

`v7.10.3`: 7.10.3

Compare Source

7.10.3 (2025-08-14)

`v7.10.2`: 7.10.2

Compare Source

7.10.2 (2025-08-14)

`v7.10.1`: 7.10.1

Compare Source

7.10.1 (2025-08-14)

`v7.10.0`: 7.10.0

Compare Source

7.10.0 (2025-08-14)

Features

auto-devops: remove mandatory jobs from auto-devops template (5f7de9c)

`v7.9.1`: 7.9.1

Compare Source

7.9.1 (2025-08-13)

`v7.9.0`: 7.9.0

Compare Source

7.9.0 (2025-08-13)

Features

mandatory-jobs: provide AST-related CI/CD variable defaults (3421a2e)

`v7.8.0`: 7.8.0

Compare Source

7.8.0 (2025-08-13)

Features

add mandatory jobs template (975f4aa)

`v7.7.0`: 7.7.0

Compare Source

7.7.0 (2025-08-07)

Features

add dind support to terraform-test (a17505d)

`v7.6.4`: 7.6.4

Compare Source

7.6.4 (2025-08-07)

Reverts

Revert "fix(common-pipeline): pin secret detector image version" (b62bc91)

`v7.6.3`: 7.6.3

Compare Source

7.6.3 (2025-08-06)

Bug Fixes

common-pipeline: pin secret detector image version (8109734)

`v7.6.2`: 7.6.2

Compare Source

7.6.2 (2025-07-22)

Bug Fixes

handling having set CI_APPLICATION_REPOSITORY with multi target docker builds (1dc6987)

`v7.6.1`: 7.6.1

Compare Source

7.6.1 (2025-07-16)

Bug Fixes

pin trivy to 0.54.0 (c4368bc), closes #128

urllib3/urllib3 (urllib3)

`v2.5.0`

Compare Source

==================

Features

Added support for the compression.zstd module that is new in Python 3.14. See PEP 784 <https://peps.python.org/pep-0784/>_ for more information. (#3610 <https://github.com/urllib3/urllib3/issues/3610>__)
Added support for version 0.5 of hatch-vcs (#3612 <https://github.com/urllib3/urllib3/issues/3612>__)

Bugfixes

Fixed a security issue where restricting the maximum number of followed redirects at the urllib3.PoolManager level via the retries parameter did not work.
Made the Node.js runtime respect redirect parameters such as retries and redirects.
Raised exception for HTTPResponse.shutdown on a connection already released to the pool. (#3581 <https://github.com/urllib3/urllib3/issues/3581>__)
Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. (#3615 <https://github.com/urllib3/urllib3/issues/3615>__)

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Sep 04, 2025 by uis-devops-renovatebot

chore(deps): update all non-major dependencies

Release Notes

Changed

Added

Fixed

Misc

v7.14.1: 7.14.1

7.14.1 (2025-09-04)

Bug Fixes

v7.14.0: 7.14.0

7.14.0 (2025-09-02)

Features

v7.13.1: 7.13.1

7.13.1 (2025-09-01)

Bug Fixes

v7.13.0: 7.13.0

7.13.0 (2025-08-27)

Features

v7.12.0: 7.12.0

7.12.0 (2025-08-27)

Features

v7.11.1: 7.11.1

7.11.1 (2025-08-21)

v7.11.0: 7.11.0

7.11.0 (2025-08-21)

Features

v7.10.4: 7.10.4

7.10.4 (2025-08-14)

v7.10.3: 7.10.3

7.10.3 (2025-08-14)

v7.10.2: 7.10.2

7.10.2 (2025-08-14)

v7.10.1: 7.10.1

7.10.1 (2025-08-14)

v7.10.0: 7.10.0

7.10.0 (2025-08-14)

Features

v7.9.1: 7.9.1

7.9.1 (2025-08-13)

v7.9.0: 7.9.0

7.9.0 (2025-08-13)

Features

v7.8.0: 7.8.0

7.8.0 (2025-08-13)

Features

v7.7.0: 7.7.0

7.7.0 (2025-08-07)

Features

v7.6.4: 7.6.4

7.6.4 (2025-08-07)

Reverts

v7.6.3: 7.6.3

7.6.3 (2025-08-06)

Bug Fixes

v7.6.2: 7.6.2

7.6.2 (2025-07-22)

Bug Fixes

v7.6.1: 7.6.1

7.6.1 (2025-07-16)

Bug Fixes

Features

Bugfixes

Configuration

Merge request reports

`v7.14.1`: 7.14.1

`v7.14.0`: 7.14.0

`v7.13.1`: 7.13.1

`v7.13.0`: 7.13.0

`v7.12.0`: 7.12.0

`v7.11.1`: 7.11.1

`v7.11.0`: 7.11.0

`v7.10.4`: 7.10.4

`v7.10.3`: 7.10.3

`v7.10.2`: 7.10.2

`v7.10.1`: 7.10.1

`v7.10.0`: 7.10.0

`v7.9.1`: 7.9.1

`v7.9.0`: 7.9.0

`v7.8.0`: 7.8.0

`v7.7.0`: 7.7.0

`v7.6.4`: 7.6.4

`v7.6.3`: 7.6.3

`v7.6.2`: 7.6.2

`v7.6.1`: 7.6.1