Update all dependencies by renovate[bot] · Pull Request #154 · iterative/py-template

renovate · 2025-05-09T19:55:33Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v4` → `v7`
actions/setup-python	action	major	`v5` → `v6`
astral-sh/ruff-pre-commit	repository	minor	`v0.11.8` → `v0.15.22`
astral-sh/ruff-pre-commit	repository	patch	`v0.15.14` → `v0.15.22`
codecov/codecov-action	action	major	`v5` → `v7`
codespell-project/codespell	repository	patch	`v2.4.1` → `v2.4.3`
codespell-project/codespell	repository	patch	`v2.4.2` → `v2.4.3`
macisamuele/language-formatters-pre-commit-hooks	repository	minor	`v2.14.0` → `v2.16.0`
peter-evans/create-pull-request	action	major	`v7` → `v8`
pre-commit/pre-commit-hooks	repository	major	`v5.0.0` → `v6.0.0`
python	uses-with	minor	`3.13` → `3.14`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

actions/checkout (actions/checkout)

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v6`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

`v5`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

actions/setup-python (actions/setup-python)

`v6.3.0`

Compare Source

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in #1323
Fix pip cache error handling on Windows by @priyagupta108 in #1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1281
Upgrade actions dependencies by @gowridurgad with @Copilot in #1303
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1324
Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in #1322

Documentation

Update advanced-usage.md by @Dunky-Z in #811

New Contributors

@gowridurgad with @Copilot made their first contribution in #1303
@jasongin made their first contribution in #1324
@Dunky-Z made their first contribution in #811

Full Changelog: actions/setup-python@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in #1259
Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in #1253 and #1264

Full Changelog: actions/setup-python@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancements:

Add support for pip-install input by @gowridurgad in #1201
Add graalpy early-access and windows builds by @timfel in #880

Dependency and Documentation updates:

Enhanced wording and updated example usage for allow-prereleases by @yarikoptic in #979
Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by @dependabot in #1139
Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by @dependabot in #1094
Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by @dependabot in #1199
Upgrade requests from 2.32.2 to 2.32.4 by @dependabot in #1130
Upgrade prettier from 3.5.3 to 3.6.2 by @dependabot in #1234
Upgrade @types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by @dependabot in #1235

New Contributors

@yarikoptic made their first contribution in #979

Full Changelog: actions/setup-python@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #1164

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

Add support for pip-version by @priyagupta108 in #1129
Enhance reading from .python-version by @krystof-k in #787
Add version parsing from Pipfile by @aradkdj in #1067

Bug fixes:

Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by @aparnajyothi-y in #1183
Change missing cache directory error to warning by @aparnajyothi-y in #1182
Add Architecture-Specific PATH Management for Python with --user Flag on Windows by @aparnajyothi-y in #1122
Include python version in PyPy python-version output by @cdce8p in #1110
Update docs: clarification on pip authentication with setup-python by @priya-kinthali in #1156

Dependency updates:

Upgrade idna from 2.9 to 3.7 in /tests/data by @dependabot[bot] in #843
Upgrade form-data to fix critical vulnerabilities #182 & #183 by @aparnajyothi-y in #1163
Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by @aparnajyothi-y in #1165
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1181
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #1095

New Contributors

@krystof-k made their first contribution in #787
@cdce8p made their first contribution in #1110
@aradkdj made their first contribution in #1067

Full Changelog: actions/setup-python@v5...v6.0.0

`v6`

Compare Source

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

Ruff's 0.12.6 release was yanked. See the linked release notes for more information.

`v0.12.5`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.12.5

`v0.12.4`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.12.4

`v0.12.3`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.12.3

`v0.12.2`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.12.2

`v0.12.1`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.12.1

`v0.12.0`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.12.0

`v0.11.13`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.11.13

`v0.11.12`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.11.12

`v0.11.11`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.11.11

`v0.11.10`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.11.10

`v0.11.9`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.11.9

codecov/codecov-action (codecov/codecov-action)

`v7.0.0`

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

`v7`

Compare Source

`v6.0.2`

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

What's Changed

fix: prevent template injection in run: steps (VULN-1652) by @thomasrockhu-codecov in #1947
chore(release): 6.0.1 by @thomasrockhu-codecov in #1949

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @thomasrockhu-codecov in #1929
Th/6.0.0 by @thomasrockhu-codecov in #1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

`v6`

Compare Source

codespell-project/codespell (codespell-project/codespell)

`v2.4.3`

Compare Source

What's Changed

Add 'radback' to dictionary with correction by @Flo3561 in #3883
Add 'repetirion' to dictionary corrections by @Flo3561 in #3885
Need to specify a version of Python version after all by @DimitriPapadopoulos in #3887
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3889
Add cases for "modulle" -> "module" by @utzcoz in #3888
Add case "auido" -> "audio" by @utzcoz in #3890
Add credentilas->credentials and friends by @peternewman in #3895
Add the case "cubid" -> "cubic" by @utzcoz in #3891
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3897
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3900
Bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in #3902
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3904
Add magntiude->magnitude by @nathanjmcdougall in #3899
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3909
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3912
Add the case "instanc" -> "instance" by @utzcoz in #3896
gampad -> gamepad (and plural) by @julianstirling in #3906
Add typos of monotonic and monotonicity by @nathanjmcdougall in #3898
Add spelling correction for multipile(s)/vulnerabities. by @cfi-gb in #3905
Add 'simpilfy -> simplify' by @alexreinking in #3913
fix(packaging): prevent unwanted files and tests from being installed by @mikelolasagasti in #3911
Add skarhoj->SKAARHOJ to dictionary corrections by @peternewman in #3908
Improve the dictionary by @algonell in #3914
Add spelling correction for accorss/accors. by @cfi-gb in #3916
Bump autofix-ci/action from 1.3.3 to 1.3.4 by @dependabot[bot] in #3921
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3923
Add influecer->influencer and influnce* typos to dictionary by @nathanjmcdougall in #3925
Add typos for excavate and variants by @nathanjmcdougall in #3926
Dict: Add corrections for memoy by @mdeweerd in #3924
overheda -> overhead by @George-Ogden in #3919
inclusize->inclusive and variants by @George-Ogden in #3918
Add spelling corrections for authorization by @cfi-gb in #3922
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3927
Don't fix Voight by @DimitriPapadopoulos in #3929
Add spelling corrections for interstect and interstection by @korli in #3928
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3930
Improve output in interactive mode by @darkmattercoder in #3884
feat: support codespell:ignore-next-line directive by @SAY-5 in #3931
Add woork->work and formace->format and friends by @peternewman in #3828
shortctu -> shortcut by @George-Ogden in #3934
A couple typos by @DimitriPapadopoulos in #3935
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3937
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3942
reclaculate->recalculate by @adamgann in #3936
Add spelling correction for improprt. by @cfi-gb in #3939
Dictionary plasic-plastic by @julianstirling in #3938
Add rourter->router and friends by @peternewman in #3943
Add new spelling correction for 'strucutr' to 'structure' by @Flo3561 in #3944
adding zone spelling correction by @Flo3561 in #3945
Add correction for 'egineering' to 'engineering' by @Flo3561 in #3946
adding seet spelling corrections by @Flo3561 in #3947
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3949
Add spelling correction for flwa/flwas. by @cfi-gb in #3948
PEP 735 compliance: dependency groups by @DimitriPapadopoulos in #3877
Allow use --builtin=all to use every builtin dictionary by @AlightSoulmate in #3917
feat: add --ignore-sic to skip misspellings marked with [sic] by @kojiromike in #3950
Bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #3953
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3954
Add common misspellings for 'dispplay' variations by @Flo3561 in #3955
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3958
Add spelling corrections for simpe and variants. by @cfi-gb in #3960
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #3961
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3964
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3966
Add common misspellings for reseeve->reserve to dictionary by @peternewman in #3967
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3968
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3970
Read only [tool.codespell] from TOML config by @Sanjays2402 in #3975

New Contributors

@Flo3561 made their first contribution in #3883
@alexreinking made their first contribution in #3913
@mikelolasagasti made their first contribution in #3911
@korli made their first contribution in #3928
@darkmattercoder made their first contribution in #3884
@SAY-5 made their first contribution in #3931
@adamgann made their first contribution in #3936
@AlightSoulmate made their first contribution in #3917
@kojiromike made their first contribution in #3950
@Sanjays2402 made their first contribution in #3975

Full Changelog: codespell-project/codespell@v2.4.2...v2.4.3

`v2.4.2`

Compare Source

Highlights

Fixed compatibility with chardet 7+

What's Changed

Fix and clarify cases in ignore patterns by @DanielYang59 in #3583
codespell-private.yml: Do not codespell digital signature files by @cclauss in #3623
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #3634
numbes->numbers and numbesr->numbers by @skshetry in #3635
Add spelling corrections for disclose and variables. by @cfi-gb in #3622
Add spelling correction for Vulnererability and variants. by @cfi-gb in #3625
Remove lets->let's by @Piedone in #3633
Add corrections for "dictate" by @jdufresne in #3636
Add specicification (and pl) typo by @yarikoptic in #3639
Remove "blueish" correction by @hadess in #3510
Add "lighting" as an option to fix "lighning" by @yarikoptic in #3648
Revert adding lien to the rare dictionary by @nikolaik in #3631
"ane" could have been "one" by @yarikoptic in #3645
Add spelling correction for "priort" by @cfi-gb in #3647
Remove "fix" of "deques" - it is quite legit by @yarikoptic in #3649
Several new suggestions by @mdeweerd in #3621
Add proposal constraints to containts by @mdeweerd in #3652
Additions dleay,infp,practive,utiliy by @mdeweerd in [#&

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot changed the title ~~chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.11.9~~ chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.11.10 May 15, 2025

renovate Bot force-pushed the renovate/all branch from c21c94a to 5b1e100 Compare May 15, 2025 17:27

renovate Bot changed the title ~~chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.11.10~~ chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.11.11 May 22, 2025

renovate Bot force-pushed the renovate/all branch from 5b1e100 to d2fb699 Compare May 22, 2025 23:36

renovate Bot changed the title ~~chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.11.11~~ chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.11.12 May 29, 2025

renovate Bot force-pushed the renovate/all branch from d2fb699 to 819717a Compare May 29, 2025 18:06

renovate Bot changed the title ~~chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.11.12~~ chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.11.13 Jun 6, 2025

renovate Bot force-pushed the renovate/all branch from 819717a to 8590b66 Compare June 6, 2025 19:14

renovate Bot changed the title ~~chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.11.13~~ chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.12.0 Jun 17, 2025

renovate Bot force-pushed the renovate/all branch from 8590b66 to 0ef30bc Compare June 17, 2025 17:24

renovate Bot force-pushed the renovate/all branch from 0ef30bc to a72ed69 Compare June 26, 2025 00:11

renovate Bot changed the title ~~chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.12.0~~ chore(deps): update all dependencies Jun 26, 2025

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 639ce88 to 7eb9015 Compare July 3, 2025 22:38

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 28f67e3 to 711c1c7 Compare July 17, 2025 19:11

renovate Bot force-pushed the renovate/all branch from 711c1c7 to af46789 Compare July 24, 2025 17:31

renovate Bot force-pushed the renovate/all branch 4 times, most recently from f52a5e2 to eed0146 Compare August 11, 2025 17:48

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 96aac36 to e94bcd1 Compare August 21, 2025 18:35

renovate Bot force-pushed the renovate/all branch 3 times, most recently from af1b042 to c23c658 Compare September 4, 2025 21:07

renovate Bot force-pushed the renovate/all branch from c23c658 to 4e2db1c Compare September 10, 2025 16:51

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 74a6655 to ed66533 Compare September 25, 2025 19:28

renovate Bot force-pushed the renovate/all branch from ed66533 to a8a47d4 Compare October 2, 2025 22:00

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 13b3815 to 5966079 Compare December 4, 2025 17:52

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 1b4fc2d to 07c8b67 Compare December 11, 2025 22:25

renovate Bot force-pushed the renovate/all branch from 07c8b67 to 18de3d6 Compare December 18, 2025 21:56

renovate Bot force-pushed the renovate/all branch 3 times, most recently from db02bf6 to 6eed62c Compare January 15, 2026 21:35

renovate Bot force-pushed the renovate/all branch from 6eed62c to 01ee81f Compare January 23, 2026 01:14

renovate Bot force-pushed the renovate/all branch 2 times, most recently from ef3922a to 1cb5c22 Compare February 10, 2026 08:28

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 96d01ea to d10ff25 Compare February 18, 2026 18:34

renovate Bot force-pushed the renovate/all branch 3 times, most recently from f3af13a to a11fae3 Compare February 26, 2026 21:20

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 8b59c75 to c0d6ceb Compare March 5, 2026 22:06

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 7ac9e87 to 0478ac7 Compare March 19, 2026 16:48

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 79639c5 to 35a43e4 Compare March 26, 2026 22:01

renovate Bot force-pushed the renovate/all branch 2 times, most recently from fa72d86 to b401bca Compare April 9, 2026 18:04

renovate Bot force-pushed the renovate/all branch 4 times, most recently from cf8d6e4 to 779c8a2 Compare April 16, 2026 21:20

Update all dependencies

3aeef56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update all dependencies#154

Update all dependencies#154
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

renovate Bot commented May 9, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented May 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

What's Changed

Dependency Upgrades

What's Changed

Enhancements:

Dependency and Documentation updates:

New Contributors

What's Changed

Breaking Changes

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

What's Changed

What's Changed

What's Changed

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

What's Changed

New Contributors

Highlights

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented May 9, 2025 •

edited

Loading