fix(deps): update all non-major dependencies (!203) · Merge requests · Information Services / DevOps / Tools / Logan

This MR contains the following updates:

Package	Change	Type	Update
coverage	`7.11.3` → `7.13.2`	dev	minor
google-auth	`2.43.0` → `2.48.0`	dependencies	minor
google-cloud-kms (source)	`3.7.0` → `3.10.0`	dependencies	minor
google-cloud-secret-manager (source)	`2.25.0` → `2.26.0`	dependencies	minor
pre-commit	`4.4.0` → `4.5.1`	dev	minor
pre-commit/mirrors-mypy	`v1.18.2` → `v1.19.1`	repository	minor
rich	`14.2.0` → `14.3.1`	dependencies	minor
uis/devops/continuous-delivery/ci-templates	`v7.20.3` → `v7.25.16`	repository	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

coveragepy/coveragepy (coverage)

`v7.13.2`

Compare Source

Fix: when Python is installed via symlinks, for example with Homebrew, the standard library files could be incorrectly included in coverage reports. This is now fixed, closing issue 2115_.
Fix: if a data file is created with no read permissions, the combine step would fail completely. Now a warning is issued and the file is skipped. Closes issue 2117_.

.. _issue 2115: #2115 .. _issue 2117: #2117

.. _changes_7-13-1:

`v7.13.1`

Compare Source

Added: the JSON report now includes a "start_line" key for function and class regions, indicating the first line of the region in the source. Closes issue 2110_.
Added: The debug data command now takes file names as arguments on the command line, so you can inspect specific data files without needing to set the COVERAGE_FILE environment variable.
Fix: the JSON report used to report module docstrings as executed lines, which no other report did, as described in issue 2105_. This is now fixed, thanks to Jianrong Zhao.
Fix: coverage.py uses a more disciplined approach to detecting where third-party code is installed, and avoids measuring it. This shouldn't change any behavior. If you find that it does, please get in touch.
Performance: data files that will be combined now record their hash as part of the file name. This lets us skip duplicate data more quickly, speeding the combining step.
Docs: added a section explaining more about what is considered a missing branch and how it is reported: :ref:branch_explain, as requested in issue 1597. Thanks to Ayisha Mohammed <pull 2092_>.
Tests: the test suite misunderstood what core was being tested if COVERAGE_CORE wasn't set on 3.14+. This is now fixed, closing issue 2109_.

.. _issue 1597: #1597 .. _pull 2092: #2092 .. _issue 2105: #2105 .. _issue 2109: #2109 .. _issue 2110: #2110

.. _changes_7-13-0:

`v7.13.0`

Compare Source

Feature: coverage.py now supports :file:.coveragerc.toml configuration files. These files use TOML syntax and take priority over :file:pyproject.toml but lower priority than :file:.coveragerc files. Closes issue 1643_ thanks to Olena Yefymenko <pull 1952_>_.
Fix: we now include a permanent .pth file which is installed with the code, fixing issue 2084. In 7.12.1b1 this was done incorrectly: it didn't work when using the source wheel (py3-none-any). This is now fixed. Thanks, Henry Schreiner <pull 2100_>.
Deprecated: when coverage.py is installed, it creates three command entry points: coverage, coverage3, and coverage-3.10 (if installed for Python 3.10). The second and third of these are not needed and will eventually be removed. They still work for now, but print a message about their deprecation.

.. _issue 1643: #1643 .. _pull 1952: #1952 .. _pull 2100: #2100

.. _changes_7-12-1b1:

`v7.12.0`

Compare Source

The HTML report now shows separate coverage totals for statements and branches, as well as the usual combined coverage percentage. Thanks to Ryuta Otsuka for the discussion <issue 2081_>_ and the implementation <pull 2085_>_.
The JSON report now includes separate coverage totals for statements and branches, thanks to Ryuta Otsuka <pull 2090_>_.
Fix: except* clauses were not handled properly under the "sysmon" measurement core, causing KeyError exceptions as described in issue 2086_. This is now fixed.
Fix: we now defend against aggressive mocking of open() that could cause errors inside coverage.py. An example of a failure is in issue 2083_.
Fix: in unusual cases where a test suite intentionally exhausts the system's file descriptors to test handling errors in open(), coverage.py would fail when trying to open source files, as described in issue 2091_. This is now fixed.
A small tweak to the HTML report: file paths now use thin spaces around slashes to make them easier to read.

.. _issue 2081: #2081 .. _issue 2083: #2083 .. _pull 2085: #2085 .. _issue 2086: #2086 .. _pull 2090: #2090 .. _issue 2091: #2091

.. _changes_7-11-3:

googleapis/google-auth-library-python (google-auth)

`v2.48.0`

Compare Source

Features

add cryptography as required dependency (#1929) (52558ae2881b1e6555f6f5c0d76365c15807ead9)
Support the mTLS IAM domain for Certificate based Access (#1938) (8dcf91a1b05c85fbbd0bcee78d66e498099102ab)
add configurable GCE Metadata Server retries (#1488) (454b441b478ec62bbf1a6ad5bceb6c7cbbfd0c37)
honor NO_GCE_CHECK environment variable (#1610) (383c9827536d9376e8248370ce4c2b83e468d027)

Bug Fixes

resolve circular imports (#1942) (25c1b064545702cbef087cfcd15fbbb6ef1af74f)
removes content-header from AWS IMDS get request (#1934) (97bfea9e02ede953fc8ee154e0deed3a3cfc6dcc)
detect correct auth when ADC env var is set but empty (#1374) (bfc07e1050bd0aa86fa3b08cdf70c9b68b5fe6a2)
replace deprecated utcfromtimestamp (#1799) (e431f20cf73ccac71926a23ec454468cea92e053)
Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a24089c4ee6822d510de0db210b54260d873)

`v2.47.0`

Compare Source

Features

drop cachetools dependency in favor of simple local implementation (#1590) (5c07e1c4f52bc77a1b16fa3b7b3c5269c242f6f4)

Bug Fixes

Python 3.8 support (#1918) (60dc20014a35ec4ba71e8065b9a33ecbdbeca97a)

`v2.46.0`

Compare Source

Documentation

update urllib3 docstrings for v2 compatibility (#1903) (3f1aeea2d1014ea1d244a4c3470e52d74d55404b)

Features

Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities (#1907) (0b9107d573123e358c347ffa067637f992af61b4)

Bug Fixes

add types to default and verify_token and Request init based on comments in the source code. (#1588) (59a5f588f7793b59d923a4185c8c07738da618f7)
fix the document of secure_authorized_session (#1536) (5d0014707fc359782df5ccfcaa75fd372fe9dce3)
remove setup.cfg configuration for creating universal wheels (#1693) (c767531ce05a89002d109f595187aff1fcaacfb7)
use .read() instead of .content.read() in aiohttp transport (#1899) (12f4470f808809e8abf1141f98d88ab720c3899b)
raise RefreshError for missing token in impersonated credentials (#1897) (94d04e090fdfc61926dd32bc1d65f8820b9cede5)
Fix test coverage for mtls_helper (#1886) (02e71631fe275d93825c2e957e830773e75133f7)

`v2.45.0`

Compare Source

Features

Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e6b0d09b94c467cd432a0a635e8b05f5c)

`v2.44.0`

Compare Source

Features

support Python 3.14 (#1822) (0f7097e78f247665b6ef0287d482033f7be2ed6d)
add ecdsa p-384 support (#1872) (39c381a5f6881b590025f36d333d12eff8dc60fc)
MDS connections use mTLS (#1856) (0387bb95713653d47e846cad3a010eb55ef2db4c)
Implement token revocation in STS client and add revoke() metho… (#1849) (d5638986ca03ee95bfffa9ad821124ed7e903e63)
Add shlex to correctly parse executable commands with spaces (#1855) (cf6fc3cced78bc1362a7fe596c32ebc9ce03c26b)

Bug Fixes

Use public refresh method for source credentials in ImpersonatedCredentials (#1884) (e0c3296f471747258f6d98d2d9bfde636358ecde)
Add temporary patch to workload cert logic to accomodate Cloud Run mis-configuration (#1880) (78de7907b8bdb7b5510e3c6fa8a3f3721e2436d7)
Delegate workload cert and key default lookup to helper function (#1877) (b0993c7edaba505d0fb0628af28760c43034c959)

googleapis/google-cloud-python (google-cloud-kms)

`v3.10.0`: google-cloud-kms 3.10.0

Compare Source

Features

add the SingleTenantHsm functionality including the management API and resource types (PiperOrigin-RevId: 8585822) (13f6df00)

Documentation

A comment for enum value MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION in enum AccessReason is changed (PiperOrigin-RevId: 8585822) (13f6df00)
A comment for enum value MODIFIED_CUSTOMER_INITIATED_ACCESS in enum AccessReason is changed (PiperOrigin-RevId: 8585822) (13f6df00)
A comment for field crypto_key_backend in message .google.cloud.kms.v1.CryptoKey is expanded to include SingleTenantHsmInstances (PiperOrigin-RevId: 8585822) (13f6df00)

`v3.9.0`: google-cloud-kms 3.9.0

Compare Source

Documentation

Marking MODIFIED_CUSTOMER_INITIATED_ACCESS and MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION Key Access Justification codes as deprecated in favor of GOOGLE_RESPONSE_TO_PRODUCTION_ALERT (PiperOrigin-RevId: 8537540) (1a816894)

`v3.8.0`: google-cloud-kms 3.8.0

Compare Source

3.8.0 (2026-01-08)

pre-commit/pre-commit (pre-commit)

`v4.5.1`

Compare Source

==================

Fixes

Fix language: python with repo: local without additional_dependencies.
- #3597 MR by @asottile.

`v4.5.0`

Compare Source

==================

Features

Add pre-commit hazmat.
- #3585 MR by @asottile.

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

`v1.19.1`

Compare Source

`v1.19.0`

Compare Source

Textualize/rich (rich)

`v14.3.1`

Compare Source

Fixed

Fixed characters out of unicode range reporting a cell size if 0 #3944

`v14.3.0`

Compare Source

Fixed

IPython now respects when a Console instance is passed to pretty.install #3915
Fixed extraneous blank line on non-interactive disabled Progress #3905
Fixed extra padding on first cell in columns #3935
Fixed trailing whitespace removed when soft_wrap=True #3937
Fixed style new-lines when soft_wrap = True and a print style is set #3938

Added

Added support for some multi-codepopint glyphs (will fix alignment issues for these characters) #3930
Added support for UNICODE_VERSION environment variable #3930
Added last_render_height property to LiveRender #3934
Expose locals_max_depth and locals_overflow in traceback.install #3906/
Added Segment.split_lines_terminator #3938

Changed

cells.cell_len now has a unicode_version parameter (that you probably should never change) #3930
Live will not write a new line if there was nothing rendered #3934
Changed style of Markdown headers #3942
Changed style of Markdown tables, added markdown.table.header and markdown.table.border styles #3942
Changed style of Markdown rules #3942