fix(deps): update all non-major dependencies (!18) · Merge requests · Information Services / DevOps / Libraries / Protobuf Testing Library

This MR contains the following updates:

Package	Change	Type	Update
mypy (changelog)	`1.15.0` → `1.19.1`	typecheck	minor
pre-commit/mirrors-mypy	`v1.15.0` → `v1.19.1`	repository	minor
pre-commit/pre-commit-hooks	`v4.4.0` → `v4.6.0`	repository	minor
psf/black	`23.3.0` → `23.12.1`	repository	minor
pycqa/flake8	`7.0.0` → `7.3.0`	repository	minor
python-poetry/poetry	`2.1.1` → `2.3.2`	repository	minor
timothycrosley/isort	`5.12.0` → `5.13.2`	repository	minor
uis/devops/continuous-delivery/ci-templates	`v6.8.0` → `v6.15.0`	repository	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

python/mypy (mypy)

`v1.19.1`

Compare Source

Fix noncommutative joins with bounded TypeVars (Shantanu, MR 20345)
Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, MR 20372)
Allow types.NoneType in match cases (A5rocks, MR 20383)
Fix mypyc generator regression with empty tuple (BobTheBuidler, MR 20371)
Fix crash involving Unpack-ed TypeVarTuple (Shantanu, MR 20323)
Fix crash on star import of redefinition (Ivan Levkivskyi, MR 20333)
Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, MR 20334)
Fail with an explicit error on PyPy (Ivan Levkivskyi, MR 20389)

`v1.19.0`

Compare Source

`v1.18.2`

Compare Source

Fix crash on recursive alias (Ivan Levkivskyi, MR 19845)
Add additional guidance for stubtest errors when runtime is object.__init__ (Stephen Morton, MR 19733)
Fix handling of None values in f-string expressions in mypyc (BobTheBuidler, MR 19846)

`v1.18.1`

Compare Source

`v1.17.1`

Compare Source

Retain None as constraints bottom if no bottoms were provided (Stanislav Terliakov, MR 19485)
Fix "ignored exception in hasattr" in dmypy (Stanislav Terliakov, MR 19428)
Prevent a crash when InitVar is redefined with a method in a subclass (Stanislav Terliakov, MR 19453)

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

`v1.19.1`

Compare Source

`v1.19.0`

Compare Source

`v1.18.2`

Compare Source

`v1.18.1`

Compare Source

`v1.17.1`

Compare Source

`v1.17.0`

Compare Source

`v1.16.1`

Compare Source

`v1.16.0`

Compare Source

pre-commit/pre-commit-hooks (pre-commit/pre-commit-hooks)

`v4.6.0`: pre-commit-hooks v4.6.0

Compare Source

Features

requirements-txt-fixer: remove duplicate packages.
- #1014 MR by @vhoulbreque-withings.
- #960 issue @csibe17.

Migrating

fix-encoding-pragma: deprecated -- will be removed in 5.0.0. use pyupgrade or some other tool.
- #1033 MR by @mxr.
- #1032 issue by @mxr.

`v4.5.0`: pre-commit-hooks v4.5.0

Compare Source

Features

requirements-txt-fixer: also sort constraints.txt by default.
- #857 MR by @lev-blit.
- #830 issue by @PLPeeters.
debug-statements: add bpdb debugger.
- #942 MR by @mwip.
- #941 issue by @mwip.

Fixes

file-contents-sorter: fix sorting an empty file.
- #944 MR by @RoelAdriaans.
- #935 issue by @paduszyk.
double-quote-string-fixer: don't rewrite inside f-strings in 3.12+.
- #973 MR by @asottile.
- #971 issue by @XuehaiPan.

Migrating

now requires python >= 3.8.
- #926 MR by @asottile.
- #927 MR by @asottile.

psf/black (psf/black)

`v23.12.1`

Compare Source

Packaging

Fixed a bug that included dependencies from the d extra by default (#4108)

`v23.12.0`

Compare Source

Highlights

It's almost 2024, which means it's time for a new edition of Black's stable style! Together with this release, we'll put out an alpha release 24.1a1 showcasing the draft 2024 stable style, which we'll finalize in the January release. Please try it out and share your feedback.

This release (23.12.0) will still produce the 2023 style. Most but not all of the changes in --preview mode will be in the 2024 stable style.

Stable style

Fix bug where # fmt: off automatically dedents when used with the --line-ranges option, even when it is not within the specified line range. (#4084)
Fix feature detection for parenthesized context managers (#4104)

Preview style

Prefer more equal signs before a break when splitting chained assignments (#4010)
Standalone form feed characters at the module level are no longer removed (#4021)
Additional cases of immediately nested tuples, lists, and dictionaries are now indented less (#4012)
Allow empty lines at the beginning of all blocks, except immediately before a docstring (#4060)
Fix crash in preview mode when using a short --line-length (#4086)
Keep suites consisting of only an ellipsis on their own lines if they are not functions or class definitions (#4066) (#4103)

Configuration

--line-ranges now skips Black's internal stability check in --safe mode. This avoids a crash on rare inputs that have many unformatted same-content lines. (#4034)

Packaging

Upgrade to mypy 1.7.1 (#4049) (#4069)
Faster compiled wheels are now available for CPython 3.12 (#4070)

Integrations

Enable 3.12 CI (#4035)
Build docker images in parallel (#4054)
Build docker images with 3.12 (#4055)

`v23.11.0`

Compare Source

Highlights

Support formatting ranges of lines with the new --line-ranges command-line option (#4020)

Stable style

Fix crash on formatting bytes strings that look like docstrings (#4003)
Fix crash when whitespace followed a backslash before newline in a docstring (#4008)
Fix standalone comments inside complex blocks crashing Black (#4016)
Fix crash on formatting code like await (a ** b) (#3994)
No longer treat leading f-strings as docstrings. This matches Python's behaviour and fixes a crash (#4019)

Preview style

Multiline dicts and lists that are the sole argument to a function are now indented less (#3964)
Multiline unpacked dicts and lists as the sole argument to a function are now also indented less (#3992)
In f-string debug expressions, quote types that are visible in the final string are now preserved (#4005)
Fix a bug where long case blocks were not split into multiple lines. Also enable general trailing comma rules on case blocks (#4024)
Keep requiring two empty lines between module-level docstring and first function or class definition (#4028)
Add support for single-line format skip with other comments on the same line (#3959)

Configuration

Consistently apply force exclusion logic before resolving symlinks (#4015)
Fix a bug in the matching of absolute path names in --include (#3976)

Performance

Fix mypyc builds on arm64 on macOS (#4017)

Integrations

Black's pre-commit integration will now run only on git hooks appropriate for a code formatter (#3940)

`v23.10.1`

Compare Source

Highlights

Maintenance release to get a fix out for GitHub Action edge case (#3957)

Preview style

Fix merging implicit multiline strings that have inline comments (#3956)
Allow empty first line after block open before a comment or compound statement (#3967)

Packaging

Change Dockerfile to hatch + compile black (#3965)

Integrations

The summary output for GitHub workflows is now suppressible using the summary parameter. (#3958)
Fix the action failing when Black check doesn't pass (#3957)

Documentation

It is known Windows documentation CI is broken https://github.com/psf/black/issues/3968

`v23.10.0`

Compare Source

Stable style

Fix comments getting removed from inside parenthesized strings (#3909)

Preview style

Fix long lines with power operators getting split before the line length (#3942)
Long type hints are now wrapped in parentheses and properly indented when split across multiple lines (#3899)
Magic trailing commas are now respected in return types. (#3916)
Require one empty line after module-level docstrings. (#3932)
Treat raw triple-quoted strings as docstrings (#3947)

Configuration

Fix cache versioning logic when BLACK_CACHE_DIR is set (#3937)

Parser

Fix bug where attributes named type were not accepted inside match statements (#3950)
Add support for PEP 695 type aliases containing lambdas and other unusual expressions (#3949)

Output

Black no longer attempts to provide special errors for attempting to format Python 2 code (#3933)
Black will more consistently print stacktraces on internal errors in verbose mode (#3938)

Integrations

The action output displayed in the job summary is now wrapped in Markdown (#3914)

`v23.9.1`

Compare Source

Due to various issues, the previous release (23.9.0) did not include compiled mypyc wheels, which make Black significantly faster. These issues have now been fixed, and this release should come with compiled wheels once again.

There will be no wheels for Python 3.12 due to a bug in mypyc. We will provide 3.12 wheels in a future release as soon as the mypyc bug is fixed.

Packaging

Upgrade to mypy 1.5.1 (#3864)

Performance

Store raw tuples instead of NamedTuples in Black's cache, improving performance and decreasing the size of the cache (#3877)

`v23.9.0`

Compare Source

Preview style

More concise formatting for dummy implementations (#3796)
In stub files, add a blank line between a statement with a body (e.g an if sys.version_info > (3, x):) and a function definition on the same level (#3862)
Fix a bug whereby spaces were removed from walrus operators within subscript(#3823)

Configuration

Black now applies exclusion and ignore logic before resolving symlinks (#3846)

Performance

Avoid importing IPython if notebook cells do not contain magics (#3782)
Improve caching by comparing file hashes as fallback for mtime and size (#3821)

Blackd

Fix an issue in blackd with single character input (#3558)

Integrations

Black now has an official pre-commit mirror. Swapping https://github.com/psf/black to https://github.com/psf/black-pre-commit-mirror in your .pre-commit-config.yaml will make Black about 2x faster (#3828)
The .black.env folder specified by ENV_PATH will now be removed on the completion of the GitHub Action (#3759)

`v23.7.0`

Compare Source

Highlights

Runtime support for Python 3.7 has been removed. Formatting 3.7 code will still be supported until further notice (#3765)

Stable style

Fix a bug where an illegal trailing comma was added to return type annotations using PEP 604 unions (#3735)
Fix several bugs and crashes where comments in stub files were removed or mishandled under some circumstances (#3745)
Fix a crash with multi-line magic comments like type: ignore within parentheses (#3740)
Fix error in AST validation when Black removes trailing whitespace in a type comment (#3773)

Preview style

Implicitly concatenated strings used as function args are no longer wrapped inside parentheses (#3640)
Remove blank lines between a class definition and its docstring (#3692)

Configuration

The --workers argument to Black can now be specified via the BLACK_NUM_WORKERS environment variable (#3743)
.pytest_cache, .ruff_cache and .vscode are now excluded by default (#3691)
Fix Black not honouring pyproject.toml settings when running --stdin-filename and the pyproject.toml found isn't in the current working directory (#3719)
Black will now error if exclude and extend-exclude have invalid data types in pyproject.toml, instead of silently doing the wrong thing (#3764)

Packaging

Upgrade mypyc from 0.991 to 1.3 (#3697)
Remove patching of Click that mitigated errors on Python 3.6 with LANG=C (#3768)

Parser

Add support for the new PEP 695 syntax in Python 3.12 (#3703)

Performance

Speed up Black significantly when the cache is full (#3751)
Avoid importing IPython in a case where we wouldn't need it (#3748)

Output

Use aware UTC datetimes internally, avoids deprecation warning on Python 3.12 (#3728)
Change verbose logging to exactly mirror Black's logic for source discovery (#3749)

Blackd

The blackd argument parser now shows the default values for options in their help text (#3712)

Integrations

Black is now tested with PYTHONWARNDEFAULTENCODING = 1 (#3763)
Update GitHub Action to display black output in the job summary (#3688)

Documentation

Add a CITATION.cff file to the root of the repository, containing metadata on how to cite this software (#3723)
Update the classes and exceptions documentation in Developer reference to match the latest code base (#3755)

pycqa/flake8 (pycqa/flake8)

Changed

Allow dulwich>=1.0 (#10701).

poetry-core (`2.3.1`)

Fix an issue where platform_release could not be parsed on Windows Server (#911).

`v2.3.1`

Compare Source

Fixed

Fix an issue where cached information about each package was always considered outdated (#10699).

Docs

Document SHELL_VERBOSITY environment variable (#10678).

`v2.3.0`

Compare Source

Added

Add support for exporting pylock.toml files with poetry-plugin-export (#10677).
Add support for specifying build constraints for dependencies (#10388).
Add support for publishing artifacts whose version is determined dynamically by the build-backend (#10644).
Add support for editable project plugins (#10661).
Check requires-poetry before any other validation (#10593).
Validate the content of project.readme when running poetry check (#10604).
Add the option to clear all caches by making the cache name in poetry cache clear optional (#10627).
Automatically update the cache for packages where the locked files differ from cached files (#10657).
Suggest to clear the cache if running a command with --no-cache solves an issue (#10585).
Propose poetry init when trying poetry new for an existing directory (#10563).
Add support for poetry publish --skip-existing for new Nexus OSS versions (#10603).
Show Poetry's own Python's path in poetry debug info (#10588).

Changed

Drop support for Python 3.9 (#10634).
Change the default of installer.re-resolve from true to false (#10622).
PEP 735 dependency groups are considered in the lock file hash (#10621).
Deprecate poetry.utils._compat.metadata, which is sometimes used in plugins, in favor of importlib.metadata (#10634).
Improve managing free-threaded Python versions with poetry python (#10606).
Prefer JSON API to HTML API in legacy repositories (#10672).
When running poetry init, only add the readme field in the pyproject.toml if the readme file exists (#10679).
Raise an error if no hash can be determined for any distribution link of a package (#10673).
Require dulwich>=0.25.0 (#10674).

Fixed

Fix an issue where poetry remove did not work for PEP 735 dependency groups with include-group items (#10587).
Fix an issue where poetry remove caused dangling include-group references in PEP 735 dependency groups (#10590).
Fix an issue where poetry add did not work for PEP 735 dependency groups with include-group items (#10636).
Fix an issue where PEP 735 dependency groups were not considered in the lock file hash (#10621).
Fix an issue where wrong markers were locked for a dependency that was required by several groups with different markers (#10613).
Fix an issue where non-deterministic markers were created in a method used by poetry-plugin-export (#10667).
Fix an issue where wrong wheels were chosen for installation in free-threaded Python environments if Poetry itself was not installed with free-threaded Python (#10614).
Fix an issue where poetry publish used the metadata of the project instead of the metadata of the build artifact (#10624).
Fix an issue where poetry env use just used another Python version instead of failing when the requested version was not supported by the project (#10685).
Fix an issue where poetry env activate returned the wrong command for dash (#10696).
Fix an issue where data-dir and python.installation-dir could not be set (#10595).
Fix an issue where Python and pip executables were not correctly detected on Windows (#10645).
Fix an issue where invalid template variables in virtualenvs.prompt caused an incomprehensible error message (#10648).

Docs

Add a warning about ~/.netrc for Poetry credential configuration (#10630).
Clarify that the local configuration takes precedence over the global configuration (#10676).
Add an explanation in which cases packages are automatically detected (#10680).

poetry-core (`2.3.0`)

Normalize versions (#893).
Fix an issue where unsatisfiable requirements did not raise an error (#891).
Fix an issue where the implicit main group did not exist if it was explicitly declared as not having any dependencies (#892).
Fix an issue where python_full_version markers with pre-release versions were parsed incorrectly (#893).

`v2.2.1`

Compare Source

Fixed

Fix an issue where poetry self show failed with a message about an invalid output format (#10560).

Docs

Remove outdated statements about dependency groups (#10561).

poetry-core (`2.2.1`)

Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#888).

`v2.2.0`

Compare Source

Added

Add support for nesting dependency groups (#10166).
Add support for PEP 735 dependency groups (#10130).
Add support for PEP 639 license clarity (#10413).
Add a --format option to poetry show to alternatively output json format (#10487).
Add official support for Python 3.14 (#10514).

Changed

Normalize dependency group names (#10387).
Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#10278).
Improve log output during poetry install when a wheel is built from source (#10404).
Improve error message in case a file lock could not be acquired while cloning a git repository (#10535).
Require dulwich>=0.24.0 (#10492).
Allow virtualenv>=20.33 again (#10506).
Allow findpython>=0.7 (#10510).
Allow importlib-metadata>=8.7 (#10511).

Fixed

Fix an issue where poetry new did not create the project structure in an existing empty directory (#10431).
Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#10516).

poetry-core (`2.2.0`)

Deprecate table values and values that are not valid SPDX expressions for [project.license] (#870).
Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#874).
Fix an issue where marker operations could result in invalid markers (#875).

`v2.1.4`

Compare Source

Changed

Require virtualenv<20.33 to work around an issue where Poetry uses the wrong Python version (#10491).
Improve the error messages for the validation of the pyproject.toml file (#10471).

Fixed

Fix an issue where project plugins were installed even though poetry install was called with --no-plugins (#10405).
Fix an issue where dependency resolution failed for self-referential extras with duplicate dependencies (#10488).

Docs

Clarify how to include files that were automatically excluded via VCS ignore settings (#10442).
Clarify the behavior of poetry add if no version constraint is explicitly specified (#10445).

`v2.1.3`

Compare Source

Changed

Require importlib-metadata<8.7 for Python 3.9 because of a breaking change in importlib-metadata 8.7 (#10374).

Fixed

Fix an issue where re-locking failed for incomplete multiple-constraints dependencies with explicit sources (#10324).
Fix an issue where the --directory option did not work if a plugin, which accesses the poetry instance during its activation, was installed (#10352).
Fix an issue where poetry env activate -v printed additional information to stdout instead of stderr so that the output could not be used as designed (#10353).
Fix an issue where the original error was not printed if building a git dependency failed (#10366).
Fix an issue where wheels for the wrong platform were installed in rare cases. (#10361).

poetry-core (`2.1.3`)

Fix an issue where the union of specific inverse or partially inverse markers was not simplified (#858).
Fix an issue where optional dependencies defined in the project section were treated as non-optional when a source was defined for them in the tool.poetry section (#857).
Fix an issue where markers with === were not parsed correctly (#860).
Fix an issue where local versions with upper case letters caused an error (#859).
Fix an issue where extra markers with a value starting with "in" were not validated correctly (#862).

`v2.1.2`

Compare Source

Changed

Improve performance of locking dependencies (#10275).

Fixed

Fix an issue where markers were not locked correctly (#10240).
Fix an issue where the result of poetry lock was not deterministic (#10276).
Fix an issue where poetry env activate returned the wrong command for tcsh (#10243).
Fix an issue where poetry env activate returned the wrong command for pwsh on Linux (#10256).

Docs

Update basic usage section to reflect new default layout (#10203).

poetry-core (`2.1.2`)

Improve performance of marker operations (#851).
Fix an issue where incorrect markers were calculated when removing parts covered by the project's Python constraint (#841, #846).
Fix an issue where extra markers were not simplified (#842, #845, #847).
Fix an issue where the intersection and union of markers was not deterministic (#843).
Fix an issue where the intersection of python_version markers was not recognized as empty (#849).
Fix an issue where python_version markers were not simplified (#848, #851).
Fix an issue where Python constraints on a package were converted into invalid markers (#853).

timothycrosley/isort (timothycrosley/isort)

`v5.13.2`

Compare Source

Apply the bracket fix from issue #471 only for use_parentheses=True (#2184) @bp72
- Confine pre-commit to stages (#2213) @davidculley
- Fixed colors extras (#2212) @staticdev

`v5.13.1`

Compare Source

Fixed integration tests (#2208) @bp72
- Fixed normalizing imports from more than one level of parent modules (issue/2152) (#2191) @bp72
- Remove optional dependencies without extras (#2207) @staticdev

`v5.13.0`

Compare Source

Cleanup deprecated extras (#2089) @staticdev
- Fixed #1989: settings lookup when working in stream based mode
- Fixed 80 line length for wemake linter (#2183) @skatromb
- Add support for Python 3.12 (#2175) @hugovk
- Fixed: add newest version to pre-commit docs (#2190) @AzulGarza
- Fixed assertions in test_git_hook (#2196) @mgorny
- Removed check for include_trailing_comma for the Hanging Indent wrap mode (#2192) @bp72
- Use the standard library tomllib on sufficiently new python (#2202) @eli-schwartz
- Update pre-commit.md version number (#2197) @nicobako
- doc: Update black_compatibility.md (#2177) @JSS95
- Fixed safety sept 2023 (#2178) @staticdev
- docs: fix black profile documentation (#2163) @nijel
- Fixed typo: indended -> indented (#2161) @vadimkerr
- Docs(configuration/options.md): fix missing trailing spaces for hard linebreak (#2157) @JoeyTeng
- Update pre-commit.md (#2148) @godiard
- chore: move configurations to pyproject.toml (#2115) @SauravMaheshkar
- Fixed typo in README (#2112) @stefmolin
- Update version in pre-commit setup to avoid installation issue with poetry (#2103) @stefmolin
- Skip .pytype directory by default. (#2098) @manueljacob
- Fixed a tip block styling in the Config Files section (#2097) @Klavionik
- Do not cache configuration files (#1995) @kaste
- Derive settings_path from --filename (#1992) @kaste
- Fixed year of version 5.12.0 in CHANGELOG.md (#2082) @DjLegolas

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v6.15.0`

Compare Source

Changed

terraform-module.yml: Add support for Terraform testing with additional cleanup scripts.

Fixed

terraform-module.yml: Override the tflint job so that the terraform_standard_module_structure rule is applied.
terraform-module.yml: Override the pre-commit job to avoid duplication of our terraform-fmt, tflint, and trivy jobs.

Fixed

terraform-module: override .test-job-rules from terraform-lint.yml as the terraform-module.yml template needs to support Auto-DevOps.

Changed

terraform-lint: use custom tflint docker image for the tflint job. This image includes the UIS DevOps custom tflint ruleset.
terraform-lint: move default tflint arguments to a $TFLINT_ARGS variable to allow repositories to override if required.
terraform-module: enable tflint in our Terraform reusable module pipeline.

`v6.10.0`

Compare Source

Fixed

terraform-pipeline: Partially revert changes made in v5.1.0.
- Plan jobs for branch push pipelines will be reverted.
- Manual apply jobs for the development environment will remain in the merge request pipelines.

`v6.9.0`

Compare Source

`v6.8.1`

Compare Source

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Feb 01, 2026 by uis-devops-renovatebot

fix(deps): update all non-major dependencies

Release Notes

v4.6.0: pre-commit-hooks v4.6.0

Features

Migrating

v4.5.0: pre-commit-hooks v4.5.0

Features

Fixes

Migrating

Packaging

Highlights

Stable style

Preview style

Configuration

Packaging

Integrations

Highlights

Stable style

Preview style

Configuration

Performance

Integrations

Highlights

Preview style

Packaging

Integrations

Documentation

Stable style

Preview style

Configuration

Parser

Output

Integrations

Packaging

Performance

Preview style

Configuration

Performance

Blackd

Integrations

Highlights

Stable style

Preview style

Configuration

Packaging

Parser

Performance

Output

Blackd

Integrations

Documentation

Changed

poetry-core (2.3.1)

Fixed

Docs

Added

Changed

Fixed

Docs

poetry-core (2.3.0)

Fixed

Docs

poetry-core (2.2.1)

Added

Changed

Fixed

poetry-core (2.2.0)

Changed

Fixed

Docs

Changed

Fixed

poetry-core (2.1.3)

Changed

Fixed

Docs

poetry-core (2.1.2)

Changed

Fixed

Fixed

`v4.6.0`: pre-commit-hooks v4.6.0

`v4.5.0`: pre-commit-hooks v4.5.0

poetry-core (`2.3.1`)

poetry-core (`2.3.0`)

poetry-core (`2.2.1`)

poetry-core (`2.2.0`)

poetry-core (`2.1.3`)

poetry-core (`2.1.2`)