FAQ | This is a LIVE service | Changelog

Skip to content

fix(deps): update all non-major dependencies - autoclosed

uis-devops-renovatebotrequested to merge
renovate/all-minor-patch into main

This MR contains the following updates:

Package Type Update Change Age Confidence
pre-commit/mirrors-mypy repository minor v1.11.0 -> v1.17.0 age confidence
psf/black repository minor 24.4.2 -> 24.10.0 age confidence
pycqa/flake8 repository minor 7.1.0 -> 7.3.0 age confidence
python-dotenv dependencies minor 1.0.1 -> 1.1.1 age confidence
python-gitlab (changelog) dependencies minor 5.0.0 -> 5.6.0 age confidence
python-poetry/poetry repository patch 1.8.0 -> 1.8.5 age confidence
registry.gitlab.developers.cam.ac.uk/uis/devops/infra/dockerimages/python final minor 3.11-slim -> 3.13-slim age confidence
typer (changelog) dependencies minor ^0.12.3 -> ^0.16.0 age confidence
uis/devops/continuous-delivery/ci-templates repository minor v6.5.0 -> v6.15.0 age confidence

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

v1.17.0

Compare Source

v1.16.1

Compare Source

v1.16.0

Compare Source

v1.15.0

Compare Source

v1.14.1

Compare Source

v1.14.0

Compare Source

v1.13.0

Compare Source

v1.12.1

Compare Source

v1.12.0

Compare Source

v1.11.2

Compare Source

v1.11.1

Compare Source

psf/black (psf/black)

v24.10.0

Compare Source

Highlights
  • Black is now officially tested with Python 3.13 and provides Python 3.13 mypyc-compiled wheels. (#​4436) (#​4449)
  • Black will issue an error when used with Python 3.12.5, due to an upstream memory safety issue in Python 3.12.5 that can cause Black's AST safety checks to fail. Please use Python 3.12.6 or Python 3.12.4 instead. (#​4447)
  • Black no longer supports running with Python 3.8 (#​4452)
Stable style
  • Fix crashes involving comments in parenthesised return types or X | Y style unions. (#​4453)
  • Fix skipping Jupyter cells with unknown %% magic (#​4462)
Preview style
  • Fix type annotation spacing between * and more complex type variable tuple (i.e. def fn(*args: *tuple[*Ts, T]) -> None: pass) (#​4440)
Caching
  • Fix bug where the cache was shared between runs with and without --unstable (#​4466)
Packaging
  • Upgrade version of mypyc used to 1.12 beta (#​4450) (#​4449)
  • blackd now requires a newer version of aiohttp. (#​4451)
Output
  • Added Python target version information on parse error (#​4378)
  • Add information about Black version to internal error messages (#​4457)

v24.8.0

Compare Source

Stable style
  • Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#​4363)
Packaging
  • Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. (#​4345)
Parser
  • Fix regression where Black failed to parse a multiline f-string containing another multiline string (#​4339)
  • Fix regression where Black failed to parse an escaped single quote inside an f-string (#​4401)
  • Fix bug with Black incorrectly parsing empty lines with a backslash (#​4343)
  • Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#​4422)
  • Fix incorrect line numbers in the tokenizer for certain tokens within f-strings (#​4423)
Performance
  • Improve performance when a large directory is listed in .gitignore (#​4415)
Blackd
  • Fix blackd (and all extras installs) for docker container (#​4357)
pycqa/flake8 (pycqa/flake8)

v7.3.0

Compare Source

v7.2.0

Compare Source

v7.1.2

Compare Source

v7.1.1

Compare Source

theskumar/python-dotenv (python-dotenv)

v1.1.1

Compare Source

Fixed

v1.1.0

Compare Source

Feature

  • Add support for python 3.13
  • Enhance dotenv run, switch to execvpe for better resource management and signal handling ([#​523]) by [@​eekstunt]

Fixed

  • find_dotenv and load_dotenv now correctly looks up at the current directory when running in debugger or pdb ([#​553] by [@​randomseed42])

Misc

  • Drop support for Python 3.8
python-gitlab/python-gitlab (python-gitlab)

v5.6.0

Compare Source

Features
  • group: Add support for group level MR approval rules (304bdd0)

v5.5.0

Compare Source

Chores

  • Add deprecation warning for mirror_pull functions (7f6fd5c)

  • Relax typing constraints for response action (f430078)

  • tests: Catch deprecation warnings (0c1af08)

Documentation

  • Add usage of pull mirror (9b374b2)

  • Remove old pull mirror implementation (9e18672)

Features

  • functional: Add pull mirror test (3b31ade)

  • projects: Add pull mirror class (2411bff)

  • unit: Add pull mirror tests (5c11203)

v5.4.0

Compare Source

Bug Fixes
  • api: Make type ignores more specific where possible (e3cb806)

Instead of using absolute ignore # type: ignore use a more specific ignores like # type: ignore[override]. This might help in the future where a new bug might be introduced and get ignored by a general ignore comment but not a more specific one.

Signed-off-by: Igor Ponomarev igor.ponomarev@collabora.com

  • api: Return the new commit when calling cherry_pick (de29503)

  • files: Add optional ref parameter for cli project-file raw (#​3032) (22f03bd)

The ef parameter was removed in python-gitlab v4.8.0. This will add ef back as an optional parameter for the project-file raw cli command.

Chores

  • Fix missing space in deprecation message (ba75c31)

  • Fix pytest deprecation (95db680)

pytest has changed the function argument name to start_path

  • Fix warning being generated (0eb5eb0)

The CI shows a warning. Use get_all=False to resolve issue.

  • Resolve DeprecationWarning message in CI run (accd5aa)

Catch the DeprecationWarning in our test, as we expect it.

  • ci: Set a 30 minute timeout for 'functional' tests (e8d6953)

Currently the functional API test takes around 17 minutes to run. And the functional CLI test takes around 12 minutes to run.

Occasionally a job gets stuck and will sit until the default 360 minutes job timeout occurs.

Now have a 30 minute timeout for the 'functional' tests.

Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

  • deps: Update gitlab/gitlab-ee docker tag to v17.7.1-ee.0 (#​3082, 1e95944)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

  • deps: Update mypy to 1.14 and resolve issues (671e711)

mypy 1.14 has a change to Enum Membership Semantics: https://mypy.readthedocs.io/en/latest/changelog.html

Resolve the issues with Enum and typing, and update mypy to 1.14

  • test: Prevent 'job_with_artifact' fixture running forever (e4673d8)

Previously the 'job_with_artifact' fixture could run forever. Now give it up to 60 seconds to complete before failing.

Continuous Integration
  • Use gitlab-runner:v17.7.1 for the CI (2dda9dc)

The latest gitlab-runner image does not have the gitlab-runner user and it causes our tests to fail.

Closes: #​3091

Features
  • api: Add argument that appends extra HTTP headers to a request (fb07b5c)

Currently the only way to manipulate the headers for a request is to use Gitlab.headers attribute. However, this makes it very concurrently unsafe because the Gitlab object can be shared between multiple requests at the same time.

Instead add a new keyword argument extra_headers which will update the headers dictionary with new values just before the request is sent.

For example, this can be used to download a part of a artifacts file using the Range header: https://developer.mozilla.org/en-US/docs/Web/HTTP/Range\_requests

Signed-off-by: Igor Ponomarev igor.ponomarev@collabora.com

  • api: Add support for external status check (175b355)

  • api: Narrow down return type of download methods using typing.overload (44fd9dc)

Currently the download methods such as ProjectJob.artifacts have return type set to Optional[Union[bytes, Iterator[Any]]] which means they return either None or bytes or Iterator[Any].

However, the actual return type is determined by the passed streamed and iterator arguments. Using @typing.overload decorator it is possible to return a single type based on the passed arguments.

Add overloads in the following order to all download methods:

  1. If streamed=False and iterator=False return bytes. This is the default argument values therefore it should be first as it will be used to lookup default arguments. 2. If iterator=True return Iterator[Any]. This can be combined with both streamed=True and streamed=False. 3. If streamed=True and iterator=False return None. In this case action argument can be set to a callable that accepts bytes.

Signed-off-by: Igor Ponomarev igor.ponomarev@collabora.com

  • api: Narrow down return type of ProjectFileManager.raw using typing.overload (36d9b24)

This is equivalent to the changes in 44fd9dc but for ProjectFileManager.raw method that I must have missed in the original commit.

Signed-off-by: Igor Ponomarev igor.ponomarev@collabora.com

v5.3.1

Compare Source

Bug Fixes

  • api: Allow configuration of keep_base_url from file (f4f7d7a)

  • registry-protection: Fix api url (8c1aaa3)

See: https://docs.gitlab.com/ee/api/container\_repository\_protection\_rules.html#list-container-repository-protection-rules

Chores

  • Bump to 5.3.1 (912e1a0)

  • deps: Update dependency jinja2 to v3.1.5 [security] (01d4194)

v5.3.0

Compare Source

Chores
  • deps: Update gitlab/gitlab-ee docker tag to v17.7.0-ee.0 (#​3070, 62b7eb7)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

  • renovate: Update httpx and respx again (aa07449)
Features
  • api: Support the new registry protection rule endpoint (40af1c8)

v5.2.0

Compare Source

Chores

  • deps: Update all non-major dependencies (1e02f23)

  • deps: Update all non-major dependencies (6532e8c)

  • deps: Update all non-major dependencies (8046387)

  • deps: Update codecov/codecov-action action to v5 (735efff)

  • deps: Update dependency commitizen to v4 (9306362)

  • deps: Update gitlab/gitlab-ee docker tag to v17.6.1-ee.0 (#​3053, f2992ae)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

  • deps: Update gitlab/gitlab-ee docker tag to v17.6.2-ee.0 (#​3065, db0db26)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

  • deps: Update pre-commit hook commitizen-tools/commitizen to v4 (a8518f1)

  • docs: Fix CHANGELOG tracebacks codeblocks (9fe372a)

With v5.1.0 CHANGELOG.md was updated that mangled v1.10.0 triple backtick codeblock Traceback output that made sphinx fail [1] with a non-zero return code.

The resulting docs appears to be processes as text after the failing line [2]. While reviewing other backtick codeblocks fix v1.8.0 [3] to the original traceback.

[1] https://github.com/python-gitlab/python-gitlab/actions/runs/12060608158/job/33631303063#step:5:204 [2] https://python-gitlab.readthedocs.io/en/v5.1.0/changelog.html#v1-10-0-2019-07-22 [3] https://python-gitlab.readthedocs.io/en/v5.0.0/changelog.html#id258

  • renovate: Pin httpx until respx is fixed (b70830d)
Documentation
  • api-usage: Fix link to Gitlab REST API Authentication Docs (#​3059, f460d95)
Features
  • feat(api): Added project template classes to templates.py * feat(api): Added project template managers to Project in project.py * docs(merge_requests): Add example of creating mr with description template * test(templates): Added unit tests for templates * docs(templates): added section for project templates
  • graphql: Add async client (288f39c)

v5.1.0

Compare Source

Chores

  • deps: Update all non-major dependencies (1e02f23)

  • deps: Update all non-major dependencies (6532e8c)

  • deps: Update all non-major dependencies (8046387)

  • deps: Update codecov/codecov-action action to v5 (735efff)

  • deps: Update dependency commitizen to v4 (9306362)

  • deps: Update gitlab/gitlab-ee docker tag to v17.6.1-ee.0 (#​3053, f2992ae)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

  • deps: Update gitlab/gitlab-ee docker tag to v17.6.2-ee.0 (#​3065, db0db26)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

  • deps: Update pre-commit hook commitizen-tools/commitizen to v4 (a8518f1)

  • docs: Fix CHANGELOG tracebacks codeblocks (9fe372a)

With v5.1.0 CHANGELOG.md was updated that mangled v1.10.0 triple backtick codeblock Traceback output that made sphinx fail [1] with a non-zero return code.

The resulting docs appears to be processes as text after the failing line [2]. While reviewing other backtick codeblocks fix v1.8.0 [3] to the original traceback.

[1] https://github.com/python-gitlab/python-gitlab/actions/runs/12060608158/job/33631303063#step:5:204 [2] https://python-gitlab.readthedocs.io/en/v5.1.0/changelog.html#v1-10-0-2019-07-22 [3] https://python-gitlab.readthedocs.io/en/v5.0.0/changelog.html#id258

  • renovate: Pin httpx until respx is fixed (b70830d)
Documentation
  • api-usage: Fix link to Gitlab REST API Authentication Docs (#​3059, f460d95)
Features
  • feat(api): Added project template classes to templates.py * feat(api): Added project template managers to Project in project.py * docs(merge_requests): Add example of creating mr with description template * test(templates): Added unit tests for templates * docs(templates): added section for project templates
  • graphql: Add async client (288f39c)
python-poetry/poetry (python-poetry/poetry)

v1.8.5

Compare Source

Changed
  • Require pkginfo>=1.12 to fix an issue with an unknown metadata version 2.4 (#​9888).
  • Do not fail if the unknown metadata version is only a minor version update (#​9888).

v1.8.4

Compare Source

Added
  • Add official support for Python 3.13 (#​9523).
Changed
  • Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#​9757).
poetry-core (1.9.1)
  • Add 3.13 to the list of available Python versions (#​747).

v1.8.3

Compare Source

Added
  • Add support for untagged CPython builds with versions ending with a + (#​9207).
Changed
  • Require pkginfo>=1.10 to ensure support for packages with metadata version 2.3 (#​9130).
  • Improve locking on FIPS systems (#​9152).
Fixed
  • Fix an issue where unrecognized package metadata versions silently resulted in empty dependencies (#​9203, #​9226).
  • Fix an issue where trailing slashes in git URLs where not handled correctly (#​9205).
  • Fix an issue where poetry self commands printed a warning that the current project cannot be installed (#​9302).
  • Fix an issue where poetry install sporadically failed with a KeyError due to a race condition (#​9335).
Docs
  • Fix incorrect information about poetry shell (#​9060).
  • Add a git subdirectory example to poetry add (#​9080).
  • Mention interactive credential configuration (#​9074).
  • Add notes for optional advanced installation steps (#​9098).
  • Add reference to configuration credentials in documentation of poetry publish (#​9110).
  • Improve documentation for configuring credentials via environment variables (#​9121).
  • Remove misleading wording around virtual environments (#​9213).
  • Remove outdated advice regarding seeding keyring backends (#​9164).
  • Add a pyproject.toml example for a dependency with multiple extras (#​9138).
  • Clarify help of poetry add (#​9230).
  • Add a note how to configure credentials for TestPyPI for poetry publish (#​9255).
  • Fix information about the --readme option in poetry new (#​9260).
  • Clarify what is special about the Python constraint in dependencies (#​9256).
  • Update how to uninstall plugins via pipx (#​9320).

v1.8.2

Compare Source

Fixed
  • Harden lazy-wheel error handling if the index server is behaving badly in an unexpected way (#​9051).
  • Improve lazy-wheel error handling if the index server does not handle HTTP range requests correctly (#​9082).
  • Improve lazy-wheel error handling if the index server pretends to support HTTP range requests but does not respect them (#​9084).
  • Improve lazy-wheel to allow redirects for HEAD requests (#​9087).
  • Improve debug logging for lazy-wheel errors (#​9059).
  • Fix an issue where the hash of a metadata file could not be calculated correctly due to an encoding issue (#​9049).
  • Fix an issue where poetry add failed in non-package mode if no project name was set (#​9046).
  • Fix an issue where a hint to non-package mode was not compliant with the final name of the setting (#​9073).

v1.8.1

Compare Source

Fixed
  • Update the minimum required version of packaging (#​9031).
  • Handle unexpected responses from servers that do not support HTTP range requests with negative offsets more robust (#​9030).
Docs
  • Rename master branch to main (#​9022).
fastapi/typer (typer)

v0.16.0

Compare Source

Upgrades

When using the CliRunner with Click < 8.2, to be able to access the stderr output, you needed to set the mix_stderr parameter to True. Since Click 8.2 (and Typer 0.160 this release supporting it) this is no longer necessary, so this parameter has been removed.

Refactors
Internal

v0.15.4

Compare Source

Upgrades
  • 📌 Pin Click to < 8.2, compatibility for Click >= 8.2 will be added in a future version. MR #​1225 by @​tiangolo.

v0.15.3

Compare Source

Fixes
  • 🐛 Ensure that autocompletion works for Path arguments/options. MR #​1138 by @​svlandeg.
  • 🐛 Fix newline after header in help text, and add more tests for the behaviour of rich_markup_mode . MR #​964 by @​svlandeg.
Internal

v0.15.2

Compare Source

Features
Fixes
Refactors
Docs
Internal

v0.15.1

Compare Source

Features
  • 🗑️ Deprecate shell_complete and continue to use autocompletion for CLI parameters. MR #​974 by @​svlandeg.
Docs
Internal

v0.15.0

Compare Source

Features
Internal

v0.14.0

Compare Source

Breaking Changes
  • 🔥 Remove auto naming of groups added via add_typer based on the group's callback function name. MR #​1052 by @​patrick91.

Before, it was supported to infer the name of a command group from the callback function name in the sub-app, so, in this code:

import typer

app = typer.Typer()
users_app = typer.Typer()

app.add_typer(users_app)

@&#8203;users_app.callback()
def users():  # <-- This was the inferred command group name
    """
    Manage users in the app.
    """

@&#8203;users_app.command()
def create(name: str):
    print(f"Creating user: {name}")

...the command group would be named users, based on the name of the function def users().

Now you need to set it explicitly:

import typer

app = typer.Typer()
users_app = typer.Typer()

app.add_typer(users_app, name="users")  # <-- Explicitly set the command group name

@&#8203;users_app.callback()
def users():
    """
    Manage users in the app.
    """

@&#8203;users_app.command()
def create(name: str):
    print(f"Creating user: {name}")

Updated docs SubCommand Name and Help.

Note: this change will enable important features in the next release. 🤩

Internal

v0.13.1

Compare Source

Features
Refactors
Docs
Internal

v0.13.0

Compare Source

Features
Fixes
Refactors
Internal
uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

v6.15.0

Compare Source

Changed
  • terraform-module.yml: Add support for Terraform testing with additional cleanup scripts.
Fixed
  • terraform-module.yml: Override the tflint job so that the terraform_standard_module_structure rule is applied.
  • terraform-module.yml: Override the pre-commit job to avoid duplication of our terraform-fmt, tflint, and trivy jobs.

v6.14.2

Compare Source

v6.14.1

Compare Source

v6.14.0

Compare Source

v6.13.0

Compare Source

v6.12.3

Compare Source

v6.12.2

Compare Source

Fixed
  • terraform-module: override .test-job-rules from terraform-lint.yml as the terraform-module.yml template needs to support Auto-DevOps.

v6.12.1

Compare Source

v6.12.0

Compare Source

v6.11.0

Compare Source

Changed
  • terraform-lint: use custom tflint docker image for the tflint job. This image includes the UIS DevOps custom tflint ruleset.
  • terraform-lint: move default tflint arguments to a $TFLINT_ARGS variable to allow repositories to override if required.
  • terraform-module: enable tflint in our Terraform reusable module pipeline.

v6.10.0

Compare Source

Fixed
  • terraform-pipeline: Partially revert changes made in v5.1.0.
    • Plan jobs for branch push pipelines will be reverted.
    • Manual apply jobs for the development environment will remain in the merge request pipelines.

v6.9.0

Compare Source

v6.8.1

Compare Source

v6.8.0

Compare Source

v6.7.3

Compare Source

v6.7.2

Compare Source

v6.7.1

Compare Source

v6.7.0

Compare Source

v6.6.1

Compare Source

v6.6.0

Compare Source

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by uis-devops-renovatebot

Merge request reports