fix(deps): update all non-major dependencies (!29) · Merge requests · Information Services / DevOps / Research Systems / Staff On-Costs Calculator / Staff On-Costs Calculator Webapp

This MR contains the following updates:

Package	Change	Type	Update	Pending
@fontsource/roboto (source)	`5.2.9` → `5.2.10`	dependencies	patch
@mui/icons-material (source)	`7.3.7` → `7.3.8`	dependencies	patch
@mui/material (source)	`7.3.7` → `7.3.8`	dependencies	patch
@tanstack/react-query (source)	`5.90.16` → `5.90.21`	dependencies	patch
@testing-library/react	`16.3.1` → `16.3.2`	devDependencies	patch
@types/node (source)	`24.10.7` → `24.10.14`	devDependencies	patch	`24.11.0` (+1)
@types/react (source)	`19.2.8` → `19.2.14`	devDependencies	patch
@vitejs/plugin-react (source)	`5.1.2` → `5.1.4`	devDependencies	patch
DavidAnson/markdownlint-cli2	`v0.20.0` → `v0.21.0`	repository	minor
coverage	`7.13.1` → `7.13.4`	dev	patch
cypress (source)	`15.8.2` → `15.11.0`	devDependencies	minor
debugpy (source)	`1.8.19` → `1.8.20`	dev	patch
django (changelog)	`5.2.10` → `5.2.11`	dependencies	patch
django-debug-toolbar (changelog)	`6.1.0` → `6.2.0`	dev	minor
externalsettings	`2.0.4` → `2.0.10`	dependencies	patch
faker (changelog)	`40.1.2` → `40.5.1`	dev	minor
ipython	`9.9.0` → `9.10.0`	dev	minor
mkdocs-material (changelog)	`9.7.1` → `9.7.3`	docs	patch
mkdocstrings (changelog)	`1.0.0` → `1.0.3`	docs	patch
mkdocstrings-python (changelog)	`2.0.1` → `2.0.3`	docs	patch
msw (source)	`2.12.7` → `2.12.10`	devDependencies	patch
poetry (changelog)	`2.2.1` → `2.3.2`		minor
psycopg (changelog)	`3.3.2` → `3.3.3`	dependencies	patch
pytest-django (changelog)	`4.11.1` → `4.12.0`	dev	minor
pytest-env	`1.2.0` → `1.5.0`	dev	minor
python-poetry/poetry	`2.2.1` → `2.3.2`	repository	minor
react (source)	`19.2.3` → `19.2.4`	dependencies	patch
react-dom (source)	`19.2.3` → `19.2.4`	dependencies	patch
salaries	`1.2.21` → `1.2.22`	dependencies	patch
tox (changelog)	`4.34.1` → `4.46.3`		minor
tox (changelog)	`4.34.1` → `4.46.3`	dev	minor
uis/devops/continuous-delivery/ci-templates	`v7.25.11` → `v7.28.4`	repository	minor
undici (source)	`7.18.2` → `7.22.0`	devDependencies	minor
vite-tsconfig-paths	`6.0.4` → `6.1.1`	dependencies	minor
whitenoise (changelog)	`6.11.0` → `6.12.0`	dependencies	minor

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

fontsource/font-files (@fontsource/roboto)

`v5.2.10`

Compare Source

mui/material-ui (@mui/icons-material)

`v7.3.8`

Compare Source

Feb 12, 2026

A big thanks to the 15 contributors who made this release possible. Here are some highlights ✨:

`@mui/material@7.3.8`

[alert] Revert removing default icon mapping fallback (#47629) @ZeeshanTamboli
[app-bar] Fix optional chaining in joinVars function (#47739) @sai6855
[autocomplete] Fix scroll position resetting on reopen with disableCloseOnSelect (#47248) @ZeeshanTamboli
[autocomplete] Pass fullWidth prop to input, with default as true (#47663) @silviuaavram
[badge] Refactor variant styles generation (#47742) @sai6855
[chip] Remove unnecessary onDelete check (#47753) @ZeeshanTamboli
[switch][checkbox][radio] Remove aria-disabled from root span (#46318) @KirankumarAmbati
[collapse] Remove unnecessary string concatenation (#47745) @sai6855
[drawer] persistent and permanent variant Drawers should not override the styles via theme using modal class (#47581) @ZeeshanTamboli
[tabs] Add ability to extend Tabs variant (#47590) @aditya1906
[useAutocomplete] Add aria-multiselectable to listbox props when multiple is true (#47632) @silviuaavram
[useAutocomplete] Use React.Key instead of any for key prop (#47619) @sonixx02

Core

Revert "[docs-infra] Add Cookie Banner and Analytics Provider (#47445)" (868d23e) @dav-is
Revert "[docs-infra] Update Cookie Consent Dialog styling and content (#47718)" (ae29d03) @dav-is
[api-docs-builder] Validate slots prop and Slots interface export consistency (#47623) @Janpot
[code-infra] Remove window.muiDocConfig (#47737) @Janpot
[code-infra] Fix flaky Select test on Webkit (#47728) @Janpot
[code-infra] Remove usage of NODE_ENV=test (#47692) @Janpot
[code-infra] Prepare eslint rule rename (#47702) @Janpot
[code-infra] Next.js 15.5.11 (security update) (#47697) @Janpot
[code-infra] Fix Tooltip tests flakyness (#47669) @Janpot
[code-infra] Improve instructions for error messages (#47668) @Janpot
[code-infra] Add initial agent instructions (#47655) @Janpot
[code-infra] Update broken links checker (#47633) @Janpot
[code-infra] Improve Tooltip leaveDelay test (#47624) @Janpot
[code-infra] Fix internal broken links (#47607) @Janpot
[docs-infra] Resolve a few 301s in our docs (#47746) @Janpot
[docs-infra] Update Cookie Consent Dialog styling and content (#47718) @dav-is
[docs-infra] Add Cookie Banner and Analytics Provider (#47445) @dav-is
[docs-infra] Make sure /customers page has a h1 (#47615) @Janpot
[docs-infra] Fix privacy link (#47614) @Janpot
[docs-infra] Resolve a few 301s (#47579) @Janpot
[internal] Remove unused sponsor files (#47741) @oliviertassinari
[markdown] Fix some broken hash links (#47609) @Janpot
[test] Cleanup Table tests TODOs (#47656) @Ocheretovich

Docs

[website] unclickable banner in the pricing page (#47634) @aemartos
[blog] Company Update: What we've been working on (and why) (#47626) @alelthomas
[docs] Remove outdated notifications (#47743) @bernardobelchior
[docs] Make Demo component product-agnostic (#47635) @Janpot
[docs] Copyedit the Number Field doc (#47469) @mapache-salvaje
[docs] Fix Roboto font not loading in iframe demos (#47660) @Janpot
[docs] Replace Checkbox with Icons in Combobox examples (#47654) @silviuaavram
[docs] Fix punctuation in TypeScript guide description (#47617) @nodirbekprogrammer

All contributors of this release in alphabetical order: @aditya1906, @aemartos, @alelthomas, @bernardobelchior, @dav-is, @Janpot, @KirankumarAmbati, @mapache-salvaje, @nodirbekprogrammer, @Ocheretovich, @oliviertassinari, @sai6855, @silviuaavram, @sonixx02, @ZeeshanTamboli

TanStack/query (@tanstack/react-query)

`v5.90.21`

Compare Source

Patch Changes

refactor(react-query/useQueries): remove unreachable 'willFetch' branch in suspense promise collection (#10082)

`v5.90.20`

Compare Source

Patch Changes

Updated dependencies [e7258c5]:
- @tanstack/query-core@5.90.20

`v5.90.19`

Compare Source

Patch Changes

Updated dependencies [53fc74e]:
- @tanstack/query-core@5.90.19

`v5.90.18`

Compare Source

Patch Changes

Updated dependencies [dea1614]:
- @tanstack/query-core@5.90.18

`v5.90.17`

Compare Source

Patch Changes

Updated dependencies [269351b]:
- @tanstack/query-core@5.90.17

testing-library/react-testing-library (@testing-library/react)

`v16.3.2`

Compare Source

Bug Fixes

Update 'onCaughtError' type inference in 'RenderOptions' to work with React v19 (#1438) (f32bd1b)

vitejs/vite-plugin-react (@vitejs/plugin-react)

`v5.1.4`

Compare Source

Fix `canSkipBabel` not accounting for `babel.overrides` (#1098)

When configuring babel.overrides without top-level plugins or presets, Babel was incorrectly skipped. The canSkipBabel function now checks for overrides.length to ensure override configurations are processed.

`v5.1.3`

Compare Source

DavidAnson/markdownlint-cli2 (DavidAnson/markdownlint-cli2)

`v0.21.0`

Compare Source

coveragepy/coveragepy (coverage)

`v7.13.4`

Compare Source

Fix: the third-party code fix in 7.13.3 required examining the parent directories where coverage was run. In the unusual situation that one of the parent directories is unreadable, a PermissionError would occur, as described in issue 2129_. This is now fixed.
Fix: in test suites that change sys.path, coverage.py could fail with "RuntimeError: Set changed size during iteration" as described and fixed in pull 2130_. Thanks, Noah Fatsi.
We now publish ppc64le wheels, thanks to Pankhudi Jain <pull 2121_>_.

.. _pull 2121: #2121 .. _issue 2129: #2129 .. _pull 2130: #2130

.. _changes_7-13-3:

`v7.13.3`

Compare Source

Fix: in some situations, third-party code was measured when it shouldn't have been, slowing down test execution. This happened with layered virtual environments such as uv sometimes makes. The problem is fixed, closing issue 2082_. Now any directory on sys.path that is inside a virtualenv is considered third-party code.

.. _issue 2082: #2082

.. _changes_7-13-2:

`v7.13.2`

Compare Source

Fix: when Python is installed via symlinks, for example with Homebrew, the standard library files could be incorrectly included in coverage reports. This is now fixed, closing issue 2115_.
Fix: if a data file is created with no read permissions, the combine step would fail completely. Now a warning is issued and the file is skipped. Closes issue 2117_.

.. _issue 2115: #2115 .. _issue 2117: #2117

.. _changes_7-13-1:

cypress-io/cypress (cypress)

microsoft/debugpy (debugpy)

`v1.8.20`: debugpy v1.8.20

Compare Source

Fixes for:

annotate in 3.14 causing exceptions: #1971

Enhancements:

Use remote_exec if available: c7e86a1
Support more architectures: 1bbecdf

Infrastructure work:

Support devcontainers for development: 7dbc229

Thanks to @rameshvarun, @Xeonacid, and @pdepetro for the commits

django/django (django)

`v5.2.11`

Compare Source

django-commons/django-debug-toolbar (django-debug-toolbar)

`v6.2.0`

Compare Source

What's Changed

Deprecate RedirectsPanel in favor of the HistoryPanel by @JohananOppongAmoateng in #2223
Add cache view to example app by @federicobond in #2243
Add zizmor for GHA security analysis by @tim-schilling in #2201
Add indent size of 2 for yml files. by @tim-schilling in #2244
Reduce the number of test runs in CI. by @tim-schilling in #2248
Store the code coverage files on each test run for CI. by @tim-schilling in #2245
Use double-quotes for GITHUB_REF_NAME shell variable. by @tim-schilling in #2250
Add Django 6.0 to testing matrix by @adamchainz in #2249
Add Django 6.0 to testing matrix by @adamchainz in #2251
Persist the credentials because coverage_comment needs them. by @tim-schilling in #2252
Show cache alias instead of backend repr in calls table by @federicobond in #2219
Remove Django 5.0 to save some CI resources by @matthiask in #2253
Bye Python 39 by @matthiask in #2254
Add support for enabling/disabling SQLPanel tracking of toolbar model queries by @theShinigami in #2211
Enforce toolbar vs panel organization of configs. by @tim-schilling in #2257
Restore monospace font for templates and stacktraces by @federicobond in #2261
Added test to confirm assertNumQueries by @tim-schilling in #2259
Add Django built-in CSP nonce support by @ahumeau in #2267
Set a dependabot cooldown. by @tim-schilling in #2270
Update the hash and version of python-coverage-comment-action by @tim-schilling in #2269
Fix string representation of values in settings panel by @federicobond in #2263
Declare support for Django 6.0 by @ulgens in #2272
Exclude dependabot and pre-commit bot commits from GitHub release notes by @tim-schilling in #2278
Remove comment for clarity in DebugToolbarMiddleware call method by @rnazali in #2283
Add type hints for History Panel by @JohananOppongAmoateng in #2247
Optimize CI with concurrency by @p-r-a-v-i-n in #2287
Add LLM usage checkbox to MR template by @yeongbin05 in #2294
Version 6.2.0 by @tim-schilling in #2298

New Contributors

@theShinigami made their first contribution in #2211
@ahumeau made their first contribution in #2267
@rnazali made their first contribution in #2283
@p-r-a-v-i-n made their first contribution in #2287
@yeongbin05 made their first contribution in #2294

Full Changelog: https://github.com/django-commons/django-debug-toolbar/compare/6.1.0...6.2.0

joke2k/faker (faker)

`v40.5.1`

Compare Source

Fix _get_local_timezone() missing return statement. Thanks @bysiber.

`v40.5.0`

Compare Source

Add missing formats and remove duplicates in user_name_formats. Thanks @WannaFight.

`v40.4.0`

Compare Source

Add passport and cie for it_IT. Thanks @ElektroDuck.

`v40.3.0`

Compare Source

Add major Greek banks to el_GR bank provider. Thanks @bon12-gr.

`v40.2.0`

Compare Source

Update internet pt_bR provider (domains, tlds, slugify). Thanks @MorganaSilva.

`v40.1.3`

Compare Source

fix pyfloat TypeError when combining positive=True with max_value. Thanks @odrigobnogueira.

ipython/ipython (ipython)

`v9.10.0`

Compare Source

squidfunk/mkdocs-material (mkdocs-material)

`v9.7.3`: mkdocs-material-9.7.3

Compare Source

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

`v9.7.2`: mkdocs-material-9.7.2

Compare Source

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

Opened up version ranges of optional dependencies for forward-compatibility
Added warning to mkdocs build about impending MkDocs 2.0 incompatibility (doesn't affect strict mode)

mkdocstrings/mkdocstrings (mkdocstrings)

`v1.0.3`

Compare Source

Compare with 1.0.2

Bug Fixes

Forward extension instances directly passed from Zensical (65b27ec by Timothée Mazzucotelli).
Propagate Zensical's zrelpath processor (dbf263d by Timothée Mazzucotelli).

`v1.0.2`

Compare Source

Compare with 1.0.2

Bug Fixes

Forward extension instances directly passed from Zensical (65b27ec by Timothée Mazzucotelli).
Propagate Zensical's zrelpath processor (dbf263d by Timothée Mazzucotelli).

`v1.0.1`

Compare Source

Compare with 1.0.1

Code Refactoring

Use global instances for handlers and autorefs (9f79141 by Timothée Mazzucotelli).

mkdocstrings/python (mkdocstrings-python)

`v2.0.3`

Compare Source

Compare with 2.0.2

Build

Depend on griffelib instead of griffe (770a5f6 by Timothée Mazzucotelli).

`v2.0.2`

Compare Source

Compare with 2.0.1

Bug Fixes

Fix aliases for parameters (0ae77a3 by Timothée Mazzucotelli). Issue-mkdocstrings-813

mswjs/msw (msw)

`v2.12.10`

Compare Source

v2.12.10 (2026-02-10)

Bug Fixes

export AnyHandler type (#2663) (90f9be4) @kettanaito

`v2.12.9`

Compare Source

v2.12.9 (2026-02-06)

Bug Fixes

ws: support relative urls in ws.link (#2661) (2f1d23c) @kettanaito

`v2.12.8`

Compare Source

v2.12.8 (2026-02-03)

Bug Fixes

update @mswjs/interceptors to fix a memory leak (#2659) (e5e905f) @kettanaito
update rettime (#2657) (3a7b451) @kettanaito

python-poetry/poetry (poetry)

`v2.3.2`

Compare Source

Changed

Allow dulwich>=1.0 (#10701).

poetry-core (`2.3.1`)

Fix an issue where platform_release could not be parsed on Windows Server (#911).

`v2.3.1`

Compare Source

Changed

Allow dulwich>=1.0 (#10701).

poetry-core (`2.3.1`)

Fix an issue where platform_release could not be parsed on Windows Server (#911).

`v2.3.0`

Compare Source

Added

Add support for exporting pylock.toml files with poetry-plugin-export (#10677).
Add support for specifying build constraints for dependencies (#10388).
Add support for publishing artifacts whose version is determined dynamically by the build-backend (#10644).
Add support for editable project plugins (#10661).
Check requires-poetry before any other validation (#10593).
Validate the content of project.readme when running poetry check (#10604).
Add the option to clear all caches by making the cache name in poetry cache clear optional (#10627).
Automatically update the cache for packages where the locked files differ from cached files (#10657).
Suggest to clear the cache if running a command with --no-cache solves an issue (#10585).
Propose poetry init when trying poetry new for an existing directory (#10563).
Add support for poetry publish --skip-existing for new Nexus OSS versions (#10603).
Show Poetry's own Python's path in poetry debug info (#10588).

Changed

Drop support for Python 3.9 (#10634).
Change the default of installer.re-resolve from true to false (#10622).
PEP 735 dependency groups are considered in the lock file hash (#10621).
Deprecate poetry.utils._compat.metadata, which is sometimes used in plugins, in favor of importlib.metadata (#10634).
Improve managing free-threaded Python versions with poetry python (#10606).
Prefer JSON API to HTML API in legacy repositories (#10672).
When running poetry init, only add the readme field in the pyproject.toml if the readme file exists (#10679).
Raise an error if no hash can be determined for any distribution link of a package (#10673).
Require dulwich>=0.25.0 (#10674).

Fixed

Fix an issue where poetry remove did not work for PEP 735 dependency groups with include-group items (#10587).
Fix an issue where poetry remove caused dangling include-group references in PEP 735 dependency groups (#10590).
Fix an issue where poetry add did not work for PEP 735 dependency groups with include-group items (#10636).
Fix an issue where PEP 735 dependency groups were not considered in the lock file hash (#10621).
Fix an issue where wrong markers were locked for a dependency that was required by several groups with different markers (#10613).
Fix an issue where non-deterministic markers were created in a method used by poetry-plugin-export (#10667).
Fix an issue where wrong wheels were chosen for installation in free-threaded Python environments if Poetry itself was not installed with free-threaded Python (#10614).
Fix an issue where poetry publish used the metadata of the project instead of the metadata of the build artifact (#10624).
Fix an issue where poetry env use just used another Python version instead of failing when the requested version was not supported by the project (#10685).
Fix an issue where poetry env activate returned the wrong command for dash (#10696).
Fix an issue where data-dir and python.installation-dir could not be set (#10595).
Fix an issue where Python and pip executables were not correctly detected on Windows (#10645).
Fix an issue where invalid template variables in virtualenvs.prompt caused an incomprehensible error message (#10648).

Docs

Add a warning about ~/.netrc for Poetry credential configuration (#10630).
Clarify that the local configuration takes precedence over the global configuration (#10676).
Add an explanation in which cases packages are automatically detected (#10680).

poetry-core (`2.3.0`)

Normalize versions (#893).
Fix an issue where unsatisfiable requirements did not raise an error (#891).
Fix an issue where the implicit main group did not exist if it was explicitly declared as not having any dependencies (#892).
Fix an issue where python_full_version markers with pre-release versions were parsed incorrectly (#893).

psycopg/psycopg (psycopg)

`v3.3.3`

Compare Source

pytest-dev/pytest-django (pytest-django)

`v4.12.0`

Compare Source

pytest-dev/pytest-env (pytest-env)

`v1.5.0`

Compare Source

What's Changed

✨ feat(plugin): add --pytest-env-verbose for debugging env assignments by @gaborbernat in #199

Full Changelog: https://github.com/pytest-dev/pytest-env/compare/1.4.0...1.5.0

`v1.4.0`

Compare Source

What's Changed

✨ feat(cli): add --envfile option for runtime environment switching by @gaborbernat in #197

Full Changelog: https://github.com/pytest-dev/pytest-env/compare/1.3.2...1.4.0

`v1.3.2`

Compare Source

`v1.3.1`

Compare Source

What's Changed

🔧 build(type): migrate from mypy to ty by @gaborbernat in #192
♻️ refactor(plugin): consolidate TOML config parsing by @gaborbernat in #193
✅ test(plugin): verify env vars available during conftest imports by @gaborbernat in #194

Full Changelog: https://github.com/pytest-dev/pytest-env/compare/1.3.0...1.3.1

`v1.3.0`

Compare Source

What's Changed

Support pytest.toml and .pytest.toml by @mikicz in #180
✨ feat(config): support [tool.pytest] in pyproject.toml by @gaborbernat in #189
✨ feat(plugin): add U flag to unset env variables by @gaborbernat in #188
🐛 fix(config): use inipath for TOML file discovery by @gaborbernat in #190
✨ feat(plugin): add .env file loading support by @gaborbernat in #191

New Contributors

@mikicz made their first contribution in #180

Full Changelog: https://github.com/pytest-dev/pytest-env/compare/1.2.0...1.3.0

facebook/react (react)

`v19.2.4`: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

tox-dev/tox (tox)

`v4.46.3`

Compare Source

What's Changed

👷 ci(schemastore): branch from upstream master by @gaborbernat in #3828
Fix outdated min version of virtualenv by @kajinamit in #3829

New Contributors

@kajinamit made their first contribution in #3829

Full Changelog: https://github.com/tox-dev/tox/compare/4.46.2...4.46.3

`v4.46.2`

Compare Source

What's Changed

👷 ci(schemastore): fix MR creation for fork by @gaborbernat in #3827

Full Changelog: https://github.com/tox-dev/tox/compare/4.46.1...4.46.2

`v4.46.1`

Compare Source

What's Changed

🐛 fix(config): allow glob patterns in ini depends by @gaborbernat in #3825
👷 ci(schemastore): fix git push auth in update workflow by @gaborbernat in #3826
🐛 fix(schema): add additionalProperties to partial-tox.json by @gaborbernat in #3824

Full Changelog: https://github.com/tox-dev/tox/compare/4.46.0...4.46.1

`v4.46.0`

Compare Source

What's Changed

Add architecture (ISA) awareness to Python discovery by @rahuldevikar in #3815
✨ feat(config): add env_base templates for TOML by @gaborbernat in #3817
🐛 fix(deps): drop chardet for req file decoding by @gaborbernat in #3820
🐛 fix(cli): allow --help with invalid config by @gaborbernat in #3821

Full Changelog: https://github.com/tox-dev/tox/compare/4.45.0...4.46.0

`v4.45.0`

Compare Source

What's Changed

Fix user guide link in README.md by @cpburnz in #3805
🐛 fix(type): resolve ty 0.0.17 compatibility by @gaborbernat in #3807
📝 docs: add redirects for old URLs (#3806) by @gaborbernat in #3808
Bump dependency requirements by @gaborbernat in #3812
fix: cross-section substitution resolves to empty when no factors match by @worksbyfriday in #3810
✨ feat(schema): enhance schema command with IDE integration by @gaborbernat in #3813
🐛 fix(env): break circular dependency in environment_variables resolution by @gaborbernat in #3816

New Contributors

@cpburnz made their first contribution in #3805

Full Changelog: https://github.com/tox-dev/tox/compare/4.44.0...4.45.0

`v4.44.0`

Compare Source

What's Changed

🐛 fix(config): keep unfactored continuation lines after filtered factors (#3802) by @gaborbernat in #3804
✨ feat(config): add PEP 751 pylock.toml support by @gaborbernat in #3803

Full Changelog: https://github.com/tox-dev/tox/compare/4.43.0...4.44.0

`v4.43.0`

Compare Source

What's Changed

📝 docs(infra): integrate sphinxcontrib-towncrier by @gaborbernat in #3798
✨ feat(toml): add generative env_list via product dict by @gaborbernat in #3797
🐛 fix(config): restore factor conditional continuations by @gaborbernat in #3799
🐛 fix(pip): pass config_settings to pip for sdist install by @gaborbernat in #3800

Full Changelog: https://github.com/tox-dev/tox/compare/4.42.0...4.43.0

`v4.42.0`

Compare Source

What's Changed

🐛 fix(interrupt): suppress BrokenPipeError during teardown by @gaborbernat in #3778
✨ feat(cli): add --no-capture flag for interactive programs by @gaborbernat in #3777
✨ feat(config): add platform-dependent factor support by @gaborbernat in #3779
✨ feat(env): gracefully skip environments with unavailable runners by @gaborbernat in #3781
🐛 fix(env): restore compound factor conditionals by @gaborbernat in #3782
✨ feat(config): add default_base_python config key by @gaborbernat in #3783
✨ feat(config): add env_site_packages_dir_plat substitution by @gaborbernat in #3784
🐛 fix(parallel): show --list-dependencies output by @gaborbernat in #3786
✨ feat(config): add open-ended generative ranges by @gaborbernat in #3788
🐛 fix(config): collapse continuation lines before factor filtering by @gaborbernat in #3787
✨ feat(pkg): cache external packaging env build across envs by @gaborbernat in #3790
✨ feat(changelog): add granular towncrier categories by @gaborbernat in #3785
✨ feat(cli): accept plugin CLI options during provisioning by @gaborbernat in #3791
✨ feat(env): add recreate_commands config key by @gaborbernat in #3793
📝 docs(faq): document Debian python3-venv limitation by @gaborbernat in #3789
✨ feat(config): warn on unused config keys with -v by @gaborbernat in #3795
✨ feat(cli): add --skip-env-install flag for offline env reuse by @gaborbernat in #3792
✨ feat(env): add virtualenv_spec for per-env version pinning by @gaborbernat in #3794

Full Changelog: https://github.com/tox-dev/tox/compare/4.41.0...4.42.0

`v4.41.0`

Compare Source

What's Changed

Prefer TOML-native config over legacy_tox_ini in pyproject.toml by @rahuldevikar in #3776
✨ feat(config): add package = "deps-only" mode by @gaborbernat in #3774

Full Changelog: https://github.com/tox-dev/tox/compare/4.40.0...4.41.0

`v4.40.0`

Compare Source

What's Changed

Use positive exit code for multi-env failures by @rahuldevikar in #3768
✨ feat(config): add {glob:PATTERN} substitution by @gaborbernat in #3769
Add package=sdist-wheel package type by @rahuldevikar in #3741
✨ feat(config): add conditional replace for TOML by @gaborbernat in #3771
Create .gitignore in work_dir and info file directories by @rahuldevikar in #3770
✨ feat(run): add commands_retry config option by @gaborbernat in #3772
🐛 fix(config): set_env override lost after load by @gaborbernat in #3775

Full Changelog: https://github.com/tox-dev/tox/compare/4.39.0...4.40.0

`v4.39.0`

Compare Source

What's Changed

🐛 fix(ci): suppress Pygments DeprecationWarning on Python 3.15 by @gaborbernat in #3733
🐛 fix(deps): apply --force-dep to package metadata dependencies by @gaborbernat in #3734
fix(ci): drop module scope from commonprefix warning filter by @gaborbernat in #3735
🐛 fix(config): resolve overrides with alias config keys by @gaborbernat in #3736
🐛 fix(config): set_env cross-section substitution loses values by @gaborbernat in #3737
🐛 fix(legacy): --parallel-no-spinner no longer suppresses output by @gaborbernat in #3738
🐛 fix(config): set_env cross-section substitution precedence by @gaborbernat in #3739
🐛 fix(config): set_env file| no longer overrides later values by @gaborbernat in #3740
🐛 fix(config): setup.cfg without [tox:tox] no longer blocks discovery by @gaborbernat in #3742
🐛 fix(env): posargs with colon no longer crash inactive envs by @gaborbernat in #3744
🐛 fix(provision): skip requires with false environment markers by @gaborbernat in #3745
🐛 fix(config): env variable substitution in package envs by @gaborbernat in #3746
🐛 fix(config): set_env substitution honors skip_missing_interpreters by @gaborbernat in #3747
🐛 fix(config): resolve cross-section refs in caller context by @gaborbernat in #3748
🐛 fix(config): break changedir/posargs circular dependency by @gaborbernat in #3749
🐛 fix(cli): support brace expansion in -e flag by @gaborbernat in #3750
🐛 fix(config): factor filter fallback to default value by @gaborbernat in #3751
🐛 fix(env): preserve shared pkg env on recreate by @gaborbernat in #3752
🐛 fix(env): reject partial testenv section matches by @gaborbernat in #3753
🐛 fix(config): support base inherit in TOML format by @gaborbernat in #3754
🐛 fix(cli): make multiple -e flags additive by @gaborbernat in #3755
🐛 fix(provision): serialize concurrent provisioning by @gaborbernat in #3756
📝 docs: document interactive terminal programs limitation by @gaborbernat in #3757
🐛 fix(config): defer TOML set_env string substitution by @gaborbernat in #3759
🐛 fix(config): handle cross-drive posargs on Windows by @gaborbernat in #3760
🐛 fix(plugin): skip toxfile.py with unknown hooks by @gaborbernat in #3762
🐛 fix(config): skip non-tox sections in env discovery by @gaborbernat in #3761
🐛 fix(config): treat backslash-space as path separator on Windows by @gaborbernat in #3764
🐛 fix(config): preserve colors in provisioned tox on Windows by @gaborbernat in #3765
create a cachedir.tag file in the tox work directory by @rahuldevikar in #3763
🐛 fix(execute): render ANSI colors from subprocesses on Windows by @gaborbernat in #3766
🧪 test(config): verify unicode support in config files by @gaborbernat in #3767

Full Changelog: https://github.com/tox-dev/tox/compare/4.38.0...4.39.0

`v4.38.0`

Compare Source

What's Changed

🐛 fix(test): resolve Windows CI flake in provision integration tests by @gaborbernat in #3732
Scope deps rejection to pure PEP-517 build types by @rahuldevikar in #3730

Full Changelog: https://github.com/tox-dev/tox/compare/4.37.0...4.38.0

`v4.37.0`

Compare Source

What's Changed

✨ feat(config): add extra_setup_commands for --notest phase by @gaborbernat in #3716
🐛 fix(release): format changelog with pre-commit before committing by @gaborbernat in #3717
📝 docs: restructure documentation using Diátaxis framework by @gaborbernat in #3718
🐛 fix(pip): set PIP_USER=0 to prevent --user installs in virtualenvs by @gaborbernat in #3719
🐛 fix(config): prevent env_run_base deps from being clobbered by @gaborbernat in #3721
Fix env name with dot losing description in TOML config by @Fridayai700 in #3722
🐛 fix(ci): add completion extras to type checker environments by @gaborbernat in #3728
Fix factor selection via TOX_FACTORS environment variable by @Fridayai700 in #3725
Fix setenv PATH modifications being overwritten by @Fridayai700 in #3723
Fix extras with underscores not matching hyphenated metadata by @Fridayai700 in #3727
Fix install_command ignored from TOML config by @Fridayai700 in #3724
Fix deps with ~= version specifier treated as local paths by @Fridayai700 in #3726

New Contributors

@Fridayai700 made their first contribution in #3722

Full Changelog: https://github.com/tox-dev/tox/compare/4.36.1...4.37.0

`v4.36.1`

Compare Source

What's Changed

🔒 ci(workflows): add explicit permissions to workflows by @gaborbernat in #3714
Add architecture documentation by @rahuldevikar in #3708
📚 docs(man): add Unix man page and composable CLI argument inheritance by @gaborbernat in #3705
Add new logging section in documentation by @rahuldevikar in #3701
Report TOML parse errors during config discovery instead of silently ignoring them by @rahuldevikar in #3710
🐛 fix(execute): adopt CPython subprocess stream handling by @gaborbernat in #3715

Full Changelog: https://github.com/tox-dev/tox/compare/4.36.0...4.36.1

`v4.36.0`

Compare Source

What's Changed

✨ feat(config): allow skip_missing_interpreters per environment by @gaborbernat in #3684
Return non-zero exit code from tox config when exceptions occur by @veeceey in #3683
Update development.rst to reflect current standards by @rahuldevikar in #3685
Build dependencies should only come from build backend by @rahuldevikar in #3687
Add packaging environment docs to regular Configuration by @rahuldevikar in #3686
🔧 chore(type): migrate from mypy to ty by @gaborbernat in #3688
📝 docs(plugins): document CLI argument conventions by @gaborbernat in #3689
Exclude self-dependencies in run_order to prevent KeyError by @rahuldevikar in #3690
Drop setup.py mentions from the installation page by @rahuldevikar in #3693
🚀 perf(tests): prevent stale fixture state and fix flaky timing assertions by @gaborbernat in #3692
✨ feat(run): add fail-fast option to stop on first failure by @gaborbernat in #3691
📝 docs(plugins): document toxfile.py inline plugins by @gaborbernat in #3694
✨ feat(cli): add shell completion via argcomplete by @gaborbernat in #3695
✨ feat(package): validate extras against package metadata by @gaborbernat in #3696
✨ feat(depends): add glob pattern support for depends option by @gaborbernat in #3697
✨ feat(env): add disallow_pass_env to exclude env vars by @gaborbernat in #3698
📝 docs: restructure documentation following Diataxis framework by @gaborbernat in #3702
📝 docs: config enhancements, man page, version tracking by @gaborbernat in #3703
Added a _resolve_path() static method to InstallPackageAction by @rahuldevikar in #3699
Follow FORCE_COLOR. Any non-empty value now enables color by @rahuldevikar in #3700

New Contributors

@veeceey made their first contribution in #3683

Full Changelog: https://github.com/tox-dev/tox/compare/4.35.0...4.36.0

`v4.35.0`

Compare Source

What's Changed

docs: fix misleading ENVDIR reference in devenv description by @VedantMadane in #3670
Fix CI post packaging releese by @gaborbernat in #3673
Fix code block format in docs/plugins.rst by @mushitoriami in #3675
fix(docs): correct path for built documentation by @daniel7an in #3680
Document injected environment variables by @rahuldevikar in #3681
Show toxfile.py inline plugin in --version output by @rahuldevikar in #3682

New Contributors

@VedantMadane made their first contribution in #3670
@mushitoriami made their first contribution in #3675
@daniel7an made their first contribution in #3680
@rahuldevikar made their first contribution in #3681

Full Changelog: https://github.com/tox-dev/tox/compare/4.34.1...4.35.0

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.28.4`: 7.28.4

Compare Source

7.28.4 (2026-02-26)

Bug Fixes

deps: update python:3 docker digest to 6134653 (127f03b)
deps: update python:3.14 docker digest to 6134653 (7437a65)

`v7.28.3`: 7.28.3

Compare Source

7.28.3 (2026-02-25)

Bug Fixes

deps: update python:3.14 docker digest to b370b01 (af78b7e)

`v7.28.2`: 7.28.2

Compare Source

7.28.2 (2026-02-25)

Bug Fixes

deps: update python:3 docker digest to b370b01 (0583350)

`v7.28.1`: 7.28.1

Compare Source

7.28.1 (2026-02-23)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to eedc563 (99fd4a1)

`v7.28.0`: 7.28.0

Compare Source

7.28.0 (2026-02-18)

Features

delete auto-devops/deploy-cloud-run-services/deploy-cloud-run.yml (98e6854)

`v7.27.14`: 7.27.14

Compare Source

7.27.14 (2026-02-16)

Bug Fixes

deps: update auto-build-image docker tag to v4.16.0 (7a90595)

`v7.27.13`: 7.27.13

Compare Source

7.27.13 (2026-02-16)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 39b01ca (e8f06c6)

`v7.27.12`: 7.27.12

Compare Source

7.27.12 (2026-02-11)

`v7.27.11`: 7.27.11

Compare Source

7.27.11 (2026-02-11)

Bug Fixes

deps: update python:3 docker digest to 151ab35 (304b027)
deps: update python:3.14 docker digest to 151ab35 (2b90aef)

`v7.27.10`: 7.27.10

Compare Source

7.27.10 (2026-02-10)

Bug Fixes

deps: update python:3.14 docker digest to 4b827ab (c4cc951)

`v7.27.9`: 7.27.9

Compare Source

7.27.9 (2026-02-09)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 98d2777 (4dce1c2)
deps: update python:3 docker digest to 4b827ab (7e8e8f6)

`v7.27.8`: 7.27.8

Compare Source

7.27.8 (2026-02-05)

`v7.27.7`: 7.27.7

Compare Source

7.27.7 (2026-02-05)

`v7.27.6`: 7.27.6

Compare Source

7.27.6 (2026-02-05)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to bc4c7bc (d7ce92f)
deps: update python:3 docker digest to 1c4c033 (856a122)
deps: update python:3.14 docker digest to 1c4c033 (0182a8c)

`v7.27.5`: 7.27.5

Compare Source

7.27.5 (2026-02-04)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to 1f8c9cd (60f854e)

`v7.27.4`: 7.27.4

Compare Source

7.27.4 (2026-02-04)

`v7.27.3`: 7.27.3

Compare Source

7.27.3 (2026-02-04)

Bug Fixes

deps: update docker:dind docker digest to 8bcbad4 (4ccc9c3)
deps: update python:3 docker digest to fbf695a (134b929)
deps: update python:3.14 docker digest to fbf695a (da47b1e)

`v7.27.2`: 7.27.2

Compare Source

7.27.2 (2026-02-03)

`v7.27.1`: 7.27.1

Compare Source

7.27.1 (2026-02-03)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to bf0a912 (2fe852d)

`v7.27.0`: 7.27.0

Compare Source

7.27.0 (2026-02-02)

Features

gitlab-ci: include mandatory jobs (2342bab), closes #192

`v7.26.3`: 7.26.3

Compare Source

7.26.3 (2026-02-02)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to e8b8b9e (2bb77ff)

`v7.26.2`: 7.26.2

Compare Source

7.26.2 (2026-01-29)

`v7.26.1`: 7.26.1

Compare Source

7.26.1 (2026-01-29)

Bug Fixes

deps: update docker:dind docker digest to a284d31 (ab440ee)

`v7.26.0`: 7.26.0

Compare Source

7.26.0 (2026-01-28)

Features

use gitlab runner cache for pre-commit jobs (fe53b0d)

`v7.25.17`: 7.25.17

Compare Source

7.25.17 (2026-01-28)

Bug Fixes

deps: update docker:dind docker digest to 6a58fe0 (123bec6)

`v7.25.16`: 7.25.16

Compare Source

7.25.16 (2026-01-26)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to d3265ad (929aa91)

`v7.25.15`: 7.25.15

Compare Source

7.25.15 (2026-01-22)

`v7.25.14`: 7.25.14

Compare Source

7.25.14 (2026-01-22)

Bug Fixes

deps: update python:3 docker digest to 17bc9f1 (9106fe0)
deps: update python:3.14 docker digest to 17bc9f1 (9ae614e)

`v7.25.13`: 7.25.13

Compare Source

7.25.13 (2026-01-19)

`v7.25.12`: 7.25.12

Compare Source

7.25.12 (2026-01-19)

Bug Fixes

deps: update alpine/httpie:3.2.4 docker digest to de3d0ab (8fcb386)
deps: update docker:dind docker digest to 3a33fc8 (4d1f0cb)

nodejs/undici (undici)

`v7.22.0`

Compare Source

What's Changed

docs: fix syntax highlighting in WebSocket.md by @styfle in #4814
fix: use OR operator in includesCredentials per WHATWG URL Standard by @jackhax in #4816
feat(dispatcher/env-http-proxy-agent): strip leading dot and asterisk by @SuperOleg39 in #4676
fix: route WebSocket upgrades through onRequestUpgrade by @mcollina in #4787
build(deps-dev): bump esbuild from 0.25.12 to 0.27.3 by @dependabot[bot] in #4821
fix(deduplicate): do not deduplicate non-safe methods by default by @mcollina in #4818
feat: Support async cache stores in revalidation by @marcopiraccini in #4826

New Contributors

@jackhax made their first contribution in #4816
@marcopiraccini made their first contribution in #4826

Full Changelog: https://github.com/nodejs/undici/compare/v7.21.0...v7.22.0

`v7.21.0`

Compare Source

What's Changed

build(deps): bump actions/setup-node from 6.0.0 to 6.2.0 by @dependabot[bot] in #4796
test: restore global dispatcher after fetch tests by @mcollina in #4790
Add missing close method to WebSocketStream interface by @piotr-cz in #4802
fix: error stream instead of canceling by @KhafraDev in #4804
Fix clientTtl cleanup race in Agent by @mcollina in #4807
feat(#4230): Implement pingInterval for dispatching PING frames by @metcoder95 in #4296
fix: handle undefined __filename in bundled environments by @mcollina in #4812
fix: set finalizer only for fetch responses by @tsctx in #4803

New Contributors

@piotr-cz made their first contribution in #4802

Full Changelog: https://github.com/nodejs/undici/compare/v7.20.0...v7.21.0

`v7.20.0`

Compare Source

What's Changed

fix: preserve fetch stack traces by @mcollina in #4778
Fix error handling in MockPool example by @dave-kennedy in #4781
feat: expose statusText in request() ResponseData by @domenic in #4784
test: reduce retry-after invalid date flake by @mcollina in #4788
extractBody fixes by @KhafraDev in #4791
fix: MockAgent delayed response with AbortSignal (#4693) by @mcollina in #4772
fix: onParserTimeout potentially accessing undefined by @vbfox in #4758

New Contributors

@dave-kennedy made their first contribution in #4781
@vbfox made their first contribution in #4758

Full Changelog: https://github.com/nodejs/undici/compare/v7.19.2...v7.20.0

`v7.19.2`

Compare Source

What's Changed

Minor code cleanups to decompress interceptor by @domenic in #4754
fix(h2): fix flaky stream end handling on macOS by @mcollina in #4762
return response when receiving 401 instead of network error by @KhafraDev in #4769
fix: properly close idle connections in test server cleanup by @mcollina in #4764
fix: decode HTTP headers as latin1 instead of utf8 by @mcollina in #4768
fix: submodule update by @Uzlopak in #4648
build(deps): bump peter-evans/create-pull-request from 7.0.8 to 8.0.0 by @dependabot[bot] in #4720

New Contributors

@domenic made their first contribution in #4754

Full Changelog: https://github.com/nodejs/undici/compare/v7.19.1...v7.19.2

`v7.19.1`

Compare Source

What's Changed

fix: use commit hash when generating release (#4757) by @fenichelar in #4759
fix fetch 401 loop by @KhafraDev in #4761

New Contributors

@fenichelar made their first contribution in #4759

Full Changelog: https://github.com/nodejs/undici/compare/v7.19.0...v7.19.1

`v7.19.0`

Compare Source

What's Changed

fix: Handle FormData body type correctly in RetryAgent retried requests by @eliotschu in #4692
feat(client): expose HTTP/2 flow-control options by @pabloelisseo in #4706
Implement origin normalization in MockAgent for case-insensitivity and URL handling by @SksOp in #4731
fix websocket basic auth by @KhafraDev in #4747
fix(cache): regenerate stream from source when cache.match is called after GC by @mcollina in #4713
chore: use testcontext for test:cache by @Uzlopak in #4571
chore: use testcontext for subresource integrity tests by @Uzlopak in #4575
feat(cache): add origins option for whitelist filtering by @mcollina in #4739
ci: test shared-builtin only on Node.js 24 and 25 by @mcollina in #4746
fix websocketstream open error by @KhafraDev in #4748

New Contributors

@eliotschu made their first contribution in #4692
@pabloelisseo made their first contribution in #4706
@SksOp made their first contribution in #4731

Full Changelog: https://github.com/nodejs/undici/compare/v7.18.2...v7.19.0

aleclarson/vite-tsconfig-paths (vite-tsconfig-paths)

`v6.1.1`

Compare Source

`v6.1.0`

Compare Source

Features

New importerFilter option: Provides fine-grained control over which files should have their imports resolved by this plugin. (Closes #175, #193)
Ignore .d.ts overrides: The plugin now ignores resolutions that point to .d.ts files, avoiding issues when tsconfig is used for opt-in type overrides. (Closes #179, #180)

Performance

Hoisted regular expressions out of the hot path in the resolver for better performance.

Internal

Added resolvedToDeclarationFile event to the debug log file.

`v6.0.5`

Compare Source

evansd/whitenoise (whitenoise)

`v6.12.0`

Compare Source

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Mar 01, 2026 by uis-devops-renovatebot

fix(deps): update all non-major dependencies

Release Notes

@mui/material@7.3.8

Core

Docs

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Bug Fixes

Fix canSkipBabel not accounting for babel.overrides (#​1098)

v1.8.20: debugpy v1.8.20

What's Changed

New Contributors

v9.7.3: mkdocs-material-9.7.3

Changes

v9.7.2: mkdocs-material-9.7.2

Changes

Bug Fixes

Bug Fixes

Code Refactoring

Build

Bug Fixes

v2.12.10 (2026-02-10)

Bug Fixes

v2.12.9 (2026-02-06)

Bug Fixes

v2.12.8 (2026-02-03)

Bug Fixes

Changed

poetry-core (2.3.1)

Changed

poetry-core (2.3.1)

Added

Changed

Fixed

Docs

poetry-core (2.3.0)

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

v19.2.4: 19.2.4 (January 26th, 2026)

React Server Components

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

v7.28.4: 7.28.4

7.28.4 (2026-02-26)

Bug Fixes

v7.28.3: 7.28.3

7.28.3 (2026-02-25)

Bug Fixes

v7.28.2: 7.28.2

7.28.2 (2026-02-25)

Bug Fixes

v7.28.1: 7.28.1

7.28.1 (2026-02-23)

Bug Fixes

v7.28.0: 7.28.0

`@mui/material@7.3.8`

Fix `canSkipBabel` not accounting for `babel.overrides` (#1098)

`v1.8.20`: debugpy v1.8.20

`v9.7.3`: mkdocs-material-9.7.3

`v9.7.2`: mkdocs-material-9.7.2

poetry-core (`2.3.1`)

poetry-core (`2.3.1`)

poetry-core (`2.3.0`)

`v19.2.4`: 19.2.4 (January 26th, 2026)

`v7.28.4`: 7.28.4

`v7.28.3`: 7.28.3

`v7.28.2`: 7.28.2

`v7.28.1`: 7.28.1

`v7.28.0`: 7.28.0

`v7.27.14`: 7.27.14

`v7.27.13`: 7.27.13

`v7.27.12`: 7.27.12