fix(deps): update all dependencies (!151) · Merge requests · Information Services / DevOps / Boilerplate Web Application

This MR contains the following updates:

Package	Type	Update	Change
DavidAnson/markdownlint-cli2	repository	minor	`v0.17.2` -> `v0.18.1`
black (changelog)		minor	`==25.1.0` -> `==25.9.0`
copier		patch	`==9.10.1` -> `==9.10.2`
coverage		patch	`==7.10.6` -> `==7.10.7`
debugpy (source)		patch	`==1.8.16` -> `==1.8.17`
django-cors-headers (changelog)		minor	`==4.7.0` -> `==4.9.0`
editorconfig-checker/editorconfig-checker.python	repository	minor	`3.2.1` -> `3.4.0`
faker (changelog)		minor	`==37.6.0` -> `==37.8.0`
ipython		minor	`==9.5.0` -> `==9.6.0`
mkdocs-material (changelog)		patch	`==9.6.19` -> `==9.6.20`
mkdocstrings (changelog)		patch	`==0.30.0` -> `==0.30.1`
poetry (changelog)		minor	`==2.1.4` -> `==2.2.1`
poetry-core		minor	`==2.1.3` -> `==2.2.1`
postgres	service-image	digest	`5250e61` -> `b0a5628`
pre-commit/mirrors-mypy	repository	minor	`v1.4.1` -> `v1.18.2`
pre-commit/pre-commit-hooks	repository	major	`v4.4.0` -> `v6.0.0`
psf/black	repository	major	`23.3.0` -> `25.9.0`
psycopg (source, changelog)		patch	`==3.2.9` -> `==3.2.10`
pycqa/flake8	repository	major	`6.1.0` -> `7.3.0`
python-poetry/poetry	repository	minor	`2.1.4` -> `2.2.1`
pyyaml (source)		patch	`==6.0.2` -> `==6.0.3`
timothycrosley/isort	repository	major	`5.12.0` -> `6.0.1`
uis/devops/continuous-delivery/ci-templates	repository	minor	`v7.14.1` -> `v7.17.4`
whitenoise (changelog)		minor	`==6.9.0` -> `==6.11.0`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

DavidAnson/markdownlint-cli2 (DavidAnson/markdownlint-cli2)

`v0.18.1`

Compare Source

`v0.18.0`

Compare Source

psf/black (black)

`v25.9.0`

Compare Source

Highlights

Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

Fix crash while formatting a long del statement containing tuples (#4628)
Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
Handle # fmt: skip followed by a comment at the end of file (#4635)
Fix crash when a tuple appears in the as clause of a with statement (#4634)
Fix crash when tuple is used as a context manager inside a with statement (#4646)
Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
Fix crash on a \\r\n (#4673)
Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
Fix crash on parenthesized expression inside a type parameter bound (#4684)
Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
Improve multiline_string_handling with ternaries and dictionaries (#4657)
Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
Wrap the in clause of comprehensions across lines if necessary (#4699)
Remove parentheses around multiple exception types in except and except* without as. (#4720)
Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

Rewrite tokenizer to improve performance and compliance (#4536)
Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

Avoid using an extra process when running with only one worker (#4734)

Integrations

Fix the version check in the vim file to reject Python 3.8 (#4567)
Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
Build gallery docker image with python3-slim and reduce image size (#4686)

Documentation

Add FAQ entry for windows emoji not displaying (#4714)

copier-org/copier (copier)

`v9.10.2`

Compare Source

Fix

deps: remove prompt-toolkit version cap

nedbat/coveragepy (coverage)

`v7.10.7`

Compare Source

Performance: with branch coverage in large files, generating HTML, JSON, or LCOV reports could take far too long due to some quadratic behavior when creating the function and class index pages. This is now fixed, closing issue 2048_. Thanks to Daniel Diniz for help diagnosing the problem.
Most warnings and a few errors now have links to a page in the docs explaining the specific message. Closes issue 1921_.

.. _issue 1921: #1921 .. _issue 2048: #2048

.. _changes_7-10-6:

microsoft/debugpy (debugpy)

`v1.8.17`

Compare Source

adamchainz/django-cors-headers (django-cors-headers)

`v4.9.0`

Compare Source

Support Django 6.0.

`v4.8.0`

Compare Source

Support Python 3.14.

editorconfig-checker/editorconfig-checker.python (editorconfig-checker/editorconfig-checker.python)

`v3.4.0`

Compare Source

`v3.3.0`

Compare Source

joke2k/faker (faker)

`v37.8.0`

Compare Source

Add Automotive providers for ja_JP locale. Thanks @ItoRino424.

`v37.7.0`

Compare Source

Add Nigerian name locales (yo_NG, ha_NG, ig_NG, en_NG). Thanks @ifeoluwaoladeji.

ipython/ipython (ipython)

`v9.6.0`

Compare Source

squidfunk/mkdocs-material (mkdocs-material)

`v9.6.20`: mkdocs-material-9.6.20

Compare Source

Fixed #8446: Deprecation warning as of Python 3.14 in Emoji extension
Fixed #8440: & character not escaped in search highlighting
Fixed #8439: FontAwesome icons color not set in social cards (regression)

mkdocstrings/mkdocstrings (mkdocstrings)

`v0.30.1`

Compare Source

Compare with 0.30.0

Bug Fixes

Create default SSL context in main thread before downloading inventories (eec7fb4 by Çağlar Kutlu). Issue-796, MR-797

python-poetry/poetry (poetry)

`v2.2.1`

Compare Source

Fixed

Fix an issue where poetry self show failed with a message about an invalid output format (#10560).

Docs

Remove outdated statements about dependency groups (#10561).

poetry-core (`2.2.1`)

Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#888).

`v2.2.0`

Compare Source

Added

Add support for nesting dependency groups (#10166).
Add support for PEP 735 dependency groups (#10130).
Add support for PEP 639 license clarity (#10413).
Add a --format option to poetry show to alternatively output json format (#10487).
Add official support for Python 3.14 (#10514).

Changed

Normalize dependency group names (#10387).
Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#10278).
Improve log output during poetry install when a wheel is built from source (#10404).
Improve error message in case a file lock could not be acquired while cloning a git repository (#10535).
Require dulwich>=0.24.0 (#10492).
Allow virtualenv>=20.33 again (#10506).
Allow findpython>=0.7 (#10510).
Allow importlib-metadata>=8.7 (#10511).

Fixed

Fix an issue where poetry new did not create the project structure in an existing empty directory (#10431).
Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#10516).

poetry-core (`2.2.0`)

Deprecate table values and values that are not valid SPDX expressions for [project.license] (#870).
Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#874).
Fix an issue where marker operations could result in invalid markers (#875).

python-poetry/poetry-core (poetry-core)

`v2.2.1`

Compare Source

Fixed

Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#888).

`v2.2.0`

Compare Source

Added

Add support for nesting dependency groups (#837).
Add support for PEP 735 dependency groups (#823).
Add support for PEP 639 license clarity (#870).
Add support for Python 3.14 (#877, #884).

Changed

Normalize dependency group names (#868).
Deprecate table values and values that are not valid SPDX expressions for [project.license] (#870).
Update list of supported licenses (#872).

Fixed

Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#874).
Fix an issue where marker operations could result in invalid markers (#875).

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

pre-commit/pre-commit-hooks (pre-commit/pre-commit-hooks)

`v6.0.0`: pre-commit-hooks v6.0.0

Compare Source

Fixes

check-shebang-scripts-are-executable: improve error message.
- #1115 MR by @homebysix.

Migrating

now requires python >= 3.9.
- #1098 MR by @asottile.
file-contents-sorter: disallow --unique and --ignore-case at the same time.
- #1095 MR by @nemacysts.
- #794 issue by @teksturi.
Removed check-byte-order-marker and fix-encoding-pragma.
- check-byte-order-marker: migrate to fix-byte-order-marker.
- fix-encoding-pragma: migrate to pyupgrade.
- #1034 MR by @mxr.
- #1032 issue by @mxr.
- #522 MR by @jgowdy.

`v5.0.0`: pre-commit-hooks v5.0.0

Compare Source

Features

requirements-txt-fixer: also remove pkg_resources==....
- #850 MR by @ericfrederich.
- #1030 issue by @ericfrederich.
check-illegal-windows-names: new hook!
- #1044 MR by @ericfrederich.
- #589 issue by @ericfrederich.
- #1049 MR by @Jeffrey-Lim.
pretty-format-json: continue processing even if a file has a json error.
- #1039 MR by @amarvin.
- #1038 issue by @amarvin.

Fixes

destroyed-symlinks: set stages to [pre-commit, pre-push, manual]
- MR #1085 by @AdrianDC.

Migrating

pre-commit-hooks now requires pre-commit>=3.2.0.
use non-deprecated names for stages.
- #1093 MR by @asottile.

`v4.6.0`: pre-commit-hooks v4.6.0

Compare Source

Features

requirements-txt-fixer: remove duplicate packages.
- #1014 MR by @vhoulbreque-withings.
- #960 issue @csibe17.

Migrating

fix-encoding-pragma: deprecated -- will be removed in 5.0.0. use pyupgrade or some other tool.
- #1033 MR by @mxr.
- #1032 issue by @mxr.

`v4.5.0`: pre-commit-hooks v4.5.0

Compare Source

Features

requirements-txt-fixer: also sort constraints.txt by default.
- #857 MR by @lev-blit.
- #830 issue by @PLPeeters.
debug-statements: add bpdb debugger.
- #942 MR by @mwip.
- #941 issue by @mwip.

Fixes

file-contents-sorter: fix sorting an empty file.
- #944 MR by @RoelAdriaans.
- #935 issue by @paduszyk.
double-quote-string-fixer: don't rewrite inside f-strings in 3.12+.
- #973 MR by @asottile.
- #971 issue by @XuehaiPan.

Migrating

now requires python >= 3.8.
- #926 MR by @asottile.
- #927 MR by @asottile.

psycopg/psycopg (psycopg)

`v3.2.10`

Compare Source

pycqa/flake8 (pycqa/flake8)

`v7.3.0`

Compare Source

`v7.2.0`

Compare Source

`v7.1.2`

Compare Source

`v7.1.1`

Compare Source

`v7.1.0`

Compare Source

`v7.0.0`

Compare Source

yaml/pyyaml (pyyaml)

`v6.0.3`

Compare Source

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3

timothycrosley/isort (timothycrosley/isort)

`v6.0.1`

Compare Source

Changes

fix multi_line_output_modes docs (#2096) @xinydev
Ruff rules PT for pytest (#2372) @cclauss
Ruff rules B017, B028, and E203 (#2371) @cclauss
Lint Python code with ruff (#2359) @cclauss
Fix test_find_imports_in_file_error failing on Windows (#2369) @kobarity
Move flake8 settings into pyproject.toml (#2360) @cclauss
Upgrade to uv>=0.6.0 and enable-cache (#2364) @cclauss
Apply some ruff rules (#2353) @cclauss

🐞 Fixes

Add OSError handling in find_imports_in_file (#2331) @kobarity
Link GH as changelog (#2354) @staticdev

👷 Continuous Integration

Remove Safety (#2373) @staticdev

`v6.0.0`

Compare Source

Changes

💥 Breaking Changes

Remove support for Python 3.8 (#2327) @DanielNoord

🚀 Features

Python 3.13 support (#2306) @mayty
Updates round 3 (#2334) @matthewhughes934
Speed up exists_case_sensitive calls (#2264) @correctmost
nit: Fix deprecation message link (#2220) @syou6162
Ensure that split_on_trailing_comma works with as imports (#2340) @DanielNoord
Black profile: enable magic comma (#2236) @MrMino
Fix google style test (#2336) @DanielNoord
Update line_length and single_line_exclusions in google profile (#2149) @jagapiou
Updates round 2 (#2329) @matthewhughes934
Dependency updates round 1 (#2325) @matthewhughes934
Run pre-commit autoupdate (#2321) @kurtmckee

🐞 Fixes

Allow --diff to be used with --jobs (#2302) @mnakama
wemake has 80 chars hard limit, not 79 (#2241) @sobolevn
Fix errors on main (#2320) @DanielNoord
Fixed syntax error (#2289) @Sergio-prog
fix: typo (#2298) @Rotzbua
Fix sort_reexports code mangling (#2283) @Helveg
fix: correct group by package tokenization (#2136) @glasnt
Fix isort-action usage documentation (#2297) @jamescurtin
Fix CDN for Ace (#2127) @abitrolly
Fix help text (#2229) @stweil
docs: fix spelling mistake (#2249) @cachho

👷 Continuous Integration

UV replacement of Poetry (#2349) @staticdev
Make actions happy (#2311) @matthewhughes934
Fix GitHub Actions badges (#2326) @hugovk
Eliminate actions/cache@v2 usage (#2322) @kurtmckee
feat: add dependabot for GH action update (#2300) @Rotzbua
Update stage names for pre-commit (#2296) @matthewhughes934

📦 Dependencies

Bump poetry to 2.0.1 (#2341) @DanielNoord
Fix misc unsafe dependencies (#2345) @staticdev
Bump the github-actions group across 1 directory with 5 updates (#2324) @dependabot[bot]
Bump gitpython from 3.1.40 to 3.1.41 (#2223) @dependabot[bot]
Bump jinja2 from 3.1.2 to 3.1.3 (#2224) @dependabot[bot]

`v5.13.2`

Compare Source

Apply the bracket fix from issue #471 only for use_parentheses=True (#2184) @bp72
- Confine pre-commit to stages (#2213) @davidculley
- Fixed colors extras (#2212) @staticdev

`v5.13.1`

Compare Source

Fixed integration tests (#2208) @bp72
- Fixed normalizing imports from more than one level of parent modules (issue/2152) (#2191) @bp72
- Remove optional dependencies without extras (#2207) @staticdev

`v5.13.0`

Compare Source

Cleanup deprecated extras (#2089) @staticdev
- Fixed #1989: settings lookup when working in stream based mode
- Fixed 80 line length for wemake linter (#2183) @skatromb
- Add support for Python 3.12 (#2175) @hugovk
- Fixed: add newest version to pre-commit docs (#2190) @AzulGarza
- Fixed assertions in test_git_hook (#2196) @mgorny
- Removed check for include_trailing_comma for the Hanging Indent wrap mode (#2192) @bp72
- Use the standard library tomllib on sufficiently new python (#2202) @eli-schwartz
- Update pre-commit.md version number (#2197) @nicobako
- doc: Update black_compatibility.md (#2177) @JSS95
- Fixed safety sept 2023 (#2178) @staticdev
- docs: fix black profile documentation (#2163) @nijel
- Fixed typo: indended -> indented (#2161) @vadimkerr
- Docs(configuration/options.md): fix missing trailing spaces for hard linebreak (#2157) @JoeyTeng
- Update pre-commit.md (#2148) @godiard
- chore: move configurations to pyproject.toml (#2115) @SauravMaheshkar
- Fixed typo in README (#2112) @stefmolin
- Update version in pre-commit setup to avoid installation issue with poetry (#2103) @stefmolin
- Skip .pytype directory by default. (#2098) @manueljacob
- Fixed a tip block styling in the Config Files section (#2097) @Klavionik
- Do not cache configuration files (#1995) @kaste
- Derive settings_path from --filename (#1992) @kaste
- Fixed year of version 5.12.0 in CHANGELOG.md (#2082) @DjLegolas

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

`v7.17.4`: 7.17.4

Compare Source

7.17.4 (2025-09-29)

Bug Fixes

yarn: bump k8s memory limit for yarn:pack jobs (739da6d), closes #158 #158

`v7.17.3`: 7.17.3

Compare Source

7.17.3 (2025-09-29)

`v7.17.2`: 7.17.2

Compare Source

7.17.2 (2025-09-25)

Bug Fixes

mandatory-jobs: reduce cpu and memory requests for SAST jobs (9d3526a)

`v7.17.1`: 7.17.1

Compare Source

7.17.1 (2025-09-25)

Bug Fixes

pre-commit: certdir variable must be an empty string (d608c55)

`v7.17.0`: 7.17.0

Compare Source

7.17.0 (2025-09-24)

Features

mandatory-jobs: increase runner resources for failing SAST jobs (cfb7fd5)

`v7.16.0`: 7.16.0

Compare Source

7.16.0 (2025-09-19)

Features

🎸 Move standard job to Generic GKE Runner (59d2a0e)

`v7.15.2`: 7.15.2

Compare Source

7.15.2 (2025-09-17)

`v7.15.1`: 7.15.1

Compare Source

7.15.1 (2025-09-11)

Bug Fixes

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)

`v7.15.0`: 7.15.0

Compare Source

7.15.0 (2025-09-08)

Features

add custom configuration for secrets (ef86a30)

evansd/whitenoise (whitenoise)

`v6.11.0`

Compare Source

`v6.10.0`

Compare Source

Configuration

📅 Schedule: Branch creation - "on sunday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Sep 30, 2025 by uis-devops-renovatebot

Admin message

fix(deps): update all dependencies

Release Notes

Highlights

Stable style

Preview style

Parser

Performance

Integrations

Documentation

Fix

v9.6.20: mkdocs-material-9.6.20

Bug Fixes

Fixed

Docs

poetry-core (2.2.1)

Added

Changed

Fixed

poetry-core (2.2.0)

Fixed

Added

Changed

Fixed

v6.0.0: pre-commit-hooks v6.0.0

Fixes

Migrating

v5.0.0: pre-commit-hooks v5.0.0

Features

Fixes

Migrating

v4.6.0: pre-commit-hooks v4.6.0

Features

Migrating

v4.5.0: pre-commit-hooks v4.5.0

Features

Fixes

Migrating

What's Changed

Changes

🐞 Fixes

👷 Continuous Integration

Changes

💥 Breaking Changes

🚀 Features

🐞 Fixes

👷 Continuous Integration

📦 Dependencies

v7.17.4: 7.17.4

7.17.4 (2025-09-29)

Bug Fixes

v7.17.3: 7.17.3

7.17.3 (2025-09-29)

v7.17.2: 7.17.2

7.17.2 (2025-09-25)

Bug Fixes

v7.17.1: 7.17.1

7.17.1 (2025-09-25)

Bug Fixes

v7.17.0: 7.17.0

7.17.0 (2025-09-24)

Features

v7.16.0: 7.16.0

7.16.0 (2025-09-19)

Features

v7.15.2: 7.15.2

7.15.2 (2025-09-17)

v7.15.1: 7.15.1

7.15.1 (2025-09-11)

Bug Fixes

v7.15.0: 7.15.0

7.15.0 (2025-09-08)

Features

Configuration

Merge request reports

`v9.6.20`: mkdocs-material-9.6.20

poetry-core (`2.2.1`)

poetry-core (`2.2.0`)

`v6.0.0`: pre-commit-hooks v6.0.0

`v5.0.0`: pre-commit-hooks v5.0.0

`v4.6.0`: pre-commit-hooks v4.6.0

`v4.5.0`: pre-commit-hooks v4.5.0

`v7.17.4`: 7.17.4

`v7.17.3`: 7.17.3

`v7.17.2`: 7.17.2

`v7.17.1`: 7.17.1

`v7.17.0`: 7.17.0

`v7.16.0`: 7.16.0

`v7.15.2`: 7.15.2

`v7.15.1`: 7.15.1

`v7.15.0`: 7.15.0