Update all dependencies#10

Open

renovate[bot] wants to merge 1 commit intomainfrom

Contributor

renovate bot commented Jul 4, 2025 •

edited

Loading

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	`v4` → `v5`
actions/checkout	action	major	`v4` → `v6`
actions/setup-python	action	major	`v5` → `v6`
astral-sh/ruff-pre-commit	repository	minor	`v0.12.1` → `v0.15.4`
github/codeql-action	action	major	`v3` → `v4`
pre-commit/mirrors-mypy	repository	minor	`v1.16.1` → `v1.19.1`
pre-commit/pre-commit-hooks	repository	major	`v5.0.0` → `v6.0.0`
pycqa/bandit	repository	minor	`1.8.5` → `1.9.4`
python		minor	`3.13.5` → `3.14.3`
python	stage	minor	`3.13.5` → `3.14.3`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

actions/cache (actions/cache)

`v5`

actions/checkout (actions/checkout)

`v6`

`v5`

actions/setup-python (actions/setup-python)

`v6`

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

`v0.15.4`

See: https://github.com/astral-sh/ruff/releases/tag/0.15.4

`v0.15.3`

See: https://github.com/astral-sh/ruff/releases/tag/0.15.3

`v0.15.2`

See: https://github.com/astral-sh/ruff/releases/tag/0.15.2

`v0.15.1`

See: https://github.com/astral-sh/ruff/releases/tag/0.15.1

`v0.15.0`

See: https://github.com/astral-sh/ruff/releases/tag/0.15.0

`v0.14.14`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.14

`v0.14.13`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.13

`v0.14.12`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.12

`v0.14.11`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.11

`v0.14.10`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.10

`v0.14.9`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.9

`v0.14.8`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.8

`v0.14.7`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.7

`v0.14.6`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.6

`v0.14.5`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.5

`v0.14.4`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.4

`v0.14.3`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.3

`v0.14.2`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.2

`v0.14.1`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.1

`v0.14.0`

See: https://github.com/astral-sh/ruff/releases/tag/0.14.0

`v0.13.3`

See: https://github.com/astral-sh/ruff/releases/tag/0.13.3

`v0.13.2`

See: https://github.com/astral-sh/ruff/releases/tag/0.13.2

`v0.13.1`

See: https://github.com/astral-sh/ruff/releases/tag/0.13.1

`v0.13.0`

See: https://github.com/astral-sh/ruff/releases/tag/0.13.0

`v0.12.12`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.12

`v0.12.11`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.11

`v0.12.10`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.10

`v0.12.9`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.9

`v0.12.8`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.8

`v0.12.7`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.7

`v0.12.6`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.7

Ruff's 0.12.6 release was yanked. See the linked release notes for more information.

`v0.12.5`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.5

`v0.12.4`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.4

`v0.12.3`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.3

`v0.12.2`

See: https://github.com/astral-sh/ruff/releases/tag/0.12.2

github/codeql-action (github/codeql-action)

`v4`

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

`v1.19.1`

`v1.19.0`

`v1.18.2`

`v1.18.1`

`v1.17.1`

`v1.17.0`

pre-commit/pre-commit-hooks (pre-commit/pre-commit-hooks)

`v6.0.0`: pre-commit-hooks v6.0.0

Fixes

check-shebang-scripts-are-executable: improve error message.
- #1115 PR by @homebysix.

Migrating

now requires python >= 3.9.
- #1098 PR by @asottile.
file-contents-sorter: disallow --unique and --ignore-case at the same
time.
- #1095 PR by @nemacysts.
- #794 issue by @teksturi.
Removed check-byte-order-marker and fix-encoding-pragma.
- check-byte-order-marker: migrate to fix-byte-order-marker.
- fix-encoding-pragma: migrate to pyupgrade.
- #1034 PR by @mxr.
- #1032 issue by @mxr.
- #522 PR by @jgowdy.

pycqa/bandit (pycqa/bandit)

`v1.9.4`

What's Changed

chore: fixed some typos in comments by @jakob1379 in PyCQA#1351
Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in PyCQA#1353
Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in PyCQA#1357
Fix B613 crash when reading from stdin by @worksbyfriday in PyCQA#1361
Include filename in nosec 'no failed test' warning by @worksbyfriday in PyCQA#1363
Fix B615 false positive when revision is set via variable by @worksbyfriday in PyCQA#1358
Lower version guard in check_ast_node to Python 3.12 by @rcgray in PyCQA#1355
Fix B106 reporting wrong line number on multiline function calls by @worksbyfriday in PyCQA#1360

New Contributors

@jakob1379 made their first contribution in PyCQA#1351
@worksbyfriday made their first contribution in PyCQA#1361
@rcgray made their first contribution in PyCQA#1355

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

`v1.9.3`

What's Changed

Bump actions/checkout from 5 to 6 by @dependabot[bot] in PyCQA#1334
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA#1335
Fix B608 to detect VALUES( without space by @kfess in PyCQA#1337
Add check for hardcoded passwords in dicts. by @alanverresen in PyCQA#1338
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA#1341
Update tox tests for Python 3.10 by @willschlitzer in PyCQA#1346
Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in PyCQA#1347
Limit B614 to torch.load deserializers by @dibussoc in PyCQA#1348

New Contributors

@kfess made their first contribution in PyCQA#1337
@alanverresen made their first contribution in PyCQA#1338
@willschlitzer made their first contribution in PyCQA#1346
@dibussoc made their first contribution in PyCQA#1348

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

`v1.9.2`

What's Changed

Argparse Python 3.14 enhancements by @ericwb in PyCQA#1331
Check whether Constant value is str by @ericwb in PyCQA#1333

Full Changelog: PyCQA/bandit@1.9.1...1.9.2

`v1.9.1`

What's Changed

More Python version related fixes by @ericwb in PyCQA#1327

Full Changelog: PyCQA/bandit@1.9.0...1.9.1

`v1.9.0`

What's Changed

Add instructions for Maintainers to create/publish a release by @ericwb in PyCQA#1275
Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @dependabot[bot] in PyCQA#1289
Bump docker/login-action from 3.4.0 to 3.5.0 by @dependabot[bot] in PyCQA#1290
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA#1291
Bump actions/checkout from 4 to 5 by @dependabot[bot] in PyCQA#1292
Replace deprecated datetime.datetime.utcnow() by @purplezimmermann in PyCQA#1295
Bump actions/setup-python from 5 to 6 by @dependabot[bot] in PyCQA#1296
Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @dependabot[bot] in PyCQA#1298
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA#1303
Fix typos by @Shortfinga in PyCQA#1305
Bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in PyCQA#1306
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA#1315
Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in PyCQA#1317
Support of Python 3.14 by @ericwb in PyCQA#1323
Drop support of end-of-life Python 3.9 by @ericwb in PyCQA#1325
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA#1324

New Contributors

@purplezimmermann made their first contribution in PyCQA#1295
@Shortfinga made their first contribution in PyCQA#1305

Full Changelog: PyCQA/bandit@1.8.6...1.9.0

`v1.8.6`

What's Changed

Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @dependabot in PyCQA#1279
Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @dependabot in PyCQA#1278
added hint to FreeBSD package in doc/source/integrations.rst by @daniel-mohr in PyCQA#1282
Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @dependabot in PyCQA#1284
Huggingface revision pinning by @lukehinds in PyCQA#1281

New Contributors

@daniel-mohr made their first contribution in PyCQA#1282

Full Changelog: PyCQA/bandit@1.8.5...1.8.6

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the dependencies label

renovate bot force-pushed the renovate/all branch from 008deab to 5e202c2 Compare

July 5, 2025 21:51

renovate bot changed the title ~~Update pre-commit hook astral-sh/ruff-pre-commit to v0.12.2~~ Update all dependencies

renovate bot force-pushed the renovate/all branch 3 times, most recently from e90c820 to 54d419c Compare

July 17, 2025 22:30

renovate bot force-pushed the renovate/all branch 3 times, most recently from 8f763c0 to 1c4a812 Compare

July 31, 2025 09:41

renovate bot force-pushed the renovate/all branch 4 times, most recently from 1524133 to 1371ed7 Compare

August 14, 2025 17:50

renovate bot force-pushed the renovate/all branch 2 times, most recently from a162bcf to 703af25 Compare

August 21, 2025 18:44

renovate bot force-pushed the renovate/all branch 2 times, most recently from 86599db to 82d636a Compare

September 6, 2025 18:48

renovate bot force-pushed the renovate/all branch 2 times, most recently from e6786ac to 894bc91 Compare

September 13, 2025 18:58

renovate bot force-pushed the renovate/all branch 3 times, most recently from a02234b to 63261b1 Compare

September 25, 2025 19:45

renovate bot force-pushed the renovate/all branch 3 times, most recently from 52acddb to 90b207d Compare

October 8, 2025 01:10

renovate bot force-pushed the renovate/all branch from 90b207d to 7d8e62b Compare

October 16, 2025 20:42

renovate bot force-pushed the renovate/all branch 2 times, most recently from 1f7efd0 to ebf69f2 Compare

October 31, 2025 01:15

renovate bot force-pushed the renovate/all branch from ebf69f2 to dc569f3 Compare

November 6, 2025 22:50

renovate bot force-pushed the renovate/all branch from dc569f3 to 15028cc Compare

November 14, 2025 01:50

renovate bot force-pushed the renovate/all branch 4 times, most recently from ab2d998 to 7022485 Compare

November 21, 2025 17:56

renovate bot force-pushed the renovate/all branch 3 times, most recently from f473efb to 890aabf Compare

November 29, 2025 09:33

renovate bot force-pushed the renovate/all branch 3 times, most recently from 344c1e1 to bf0ce18 Compare

December 8, 2025 23:43

renovate bot force-pushed the renovate/all branch 3 times, most recently from 5aa58ef to 4090c06 Compare

December 18, 2025 20:37

renovate bot force-pushed the renovate/all branch 2 times, most recently from c1d0617 to aab76b7 Compare

January 15, 2026 20:40

renovate bot force-pushed the renovate/all branch 2 times, most recently from 1ebe1e8 to 14241ab Compare

January 23, 2026 00:41

renovate bot force-pushed the renovate/all branch 2 times, most recently from 42dcd06 to 12fc937 Compare

February 5, 2026 01:01

renovate bot force-pushed the renovate/all branch 2 times, most recently from 52dac08 to 0c04561 Compare

February 20, 2026 01:55

renovate bot force-pushed the renovate/all branch 2 times, most recently from 67d7f67 to 1c19ce1 Compare

February 26, 2026 18:11


          Update all dependencies

renovate bot force-pushed the renovate/all branch from 1c19ce1 to 9366231 Compare

February 26, 2026 22:34

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels