chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
click (changelog)	==8.3.1 → ==8.3.3
cosl	==1.6.1 → ==1.9.1
fabric (source, changelog)	==3.2.2 → ==3.2.3
openstacksdk	==4.10.0 → ==4.11.0
ops (changelog)	==3.6.0 → ==3.7.0
pydantic (changelog)	==2.12.5 → ==2.13.3

---

Release Notes

pallets/click (click)

v8.3.3

Compare Source

v8.3.2

Compare Source

Released 2026-04-02

• Fix handling of flag_value when is_flag=False to allow such options to be
  used without an explicit value. :issue:3084 :pr:3152
• Hide Sentinel.UNSET values as None when using lookup_default().
  :issue:3136 :pr:3199 :pr:3202 :pr:3209 :pr:3212 :pr:3224
• Prevent _NamedTextIOWrapper from closing streams owned by StreamMixer.
  :issue:824 :issue:2991 :issue:2993 :issue:3110 :pr:3139 :pr:3140
• Add comprehensive tests for CliRunner stream lifecycle, covering
  logging interaction, multi-threaded safety, and sequential invocation
  isolation. Add high-iteration stress tests behind a stress marker
  with a dedicated CI job. :pr:3139
• Fix callable flag_value being instantiated when used as a default via
  default=True. :issue:3121 :pr:3201 :pr:3213 :pr:3225

canonical/cos-lib (cosl)

v1.9.1

Compare Source

What's Changed

• feat: add JujuTopology.to_baggage() for telemetry labelling by @​Copilot in #​186

New Contributors

• @​Copilot made their first contribution in #​186

Full Changelog: canonical/cos-lib@1.9.0...1.9.1

v1.9.0

Compare Source

What's Changed

• refactor: InjectResult and SingleRuleFormat types by @​MichaelThamm in #​190

Full Changelog: canonical/cos-lib@1.8.0...1.9.0

v1.8.0

Compare Source

What's Changed

• refactor: Improved typing in the rules and cos_tool modules by @​MichaelThamm in #​189

Full Changelog: canonical/cos-lib@1.7.0...1.8.0

v1.7.0

Compare Source

What's Changed

• feat: Type-agnostic Rules instance by @​MichaelThamm in #​187

Full Changelog: canonical/cos-lib@1.6.1...1.7.0

fabric/fabric (fabric)

v3.2.3

Compare Source

canonical/operator (ops)

v3.7.0

Compare Source

Features

• Enable interactive debugging via breakpoint in testing (#​2363)
• ops.testing autoload support for charmcraft extensions (#​2367)
• Allow testing.State.get_relation to accept relation objects (#​2359)
• Support charmcraft.yaml format as meta for testing.Context (#​2296)

Fixes

• Correct type annotation for StorageMeta.properties (#​2348)
• Move the testing.Container compatibility import so that mypy style checkers understand it (#​2343)
• Hold only copies of user provided meta/config/actions in testing.Context (#​2349)
• Deep-copy layer objects during testing.State plan rendering (#​2380)
• Return copies from testing.State secret_get and action_get (#​2379)
• Use timezone-aware datetimes in expiry calculation (#​2378)
• Warn before clearing non-empty container in testing (#​2365)

Documentation

• Replace links to juju.is by canonical.com/juju (#​2368)
• Refactor homepage to better put Ops in context (#​2370)
• Add pytest-operator migration guide from Jubilant docs (#​2381)
• Add a tip about AI help in the Jubilant migration guide (#​2382)
• Mention jhack scenario snapshot (#​2351)
• Update integration testing how-to guide (#​2390)
• Explain K8s charms briefly at the start of the tutorial (#​2392)
• Juju secrets identifier is now an opaque string (#​2387)

Tests

• Extend the type checking of the ops-scenario tests (#​2230)

CI

• Run ruff check --fix in tox -e format (#​2369)
• Check example charms with mypy in CI (#​2360)
• Update the list of published charms in the compatibility tests (#​2384)
• Adjust minimum Python version in broad charm compatibility tests (#​2317)

pydantic/pydantic (pydantic)

v2.13.3

Compare Source

GitHub release

What's Changed

Fixes

• Handle AttributeError subclasses with from_attributes by @​Viicos in #​13096

v2.13.2

Compare Source

v2.13.1: 2026-04-15

Compare Source

v2.13.1 (2026-04-15)

What's Changed

Fixes

• Fix ValidationInfo.data missing with model_validate_json() by @​davidhewitt in #​13079

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0

Compare Source

GitHub release

The highlights of the v2.13 release are available in the blog post.
Several minor changes (considered non-breaking changes according to our versioning policy)
are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features

• Allow default factories of private attributes to take validated model data by @​Viicos in #​13013

Changes

• Warn when serializing fixed length tuples with too few items by @​arvindsaripalli in #​13016

Fixes

• Change type of Any when synthesizing _build_sources for BaseSettings.__init__() signature in the mypy plugin by @​Viicos in #​13049
• Fix model equality when using runtime extra configuration by @​Viicos in #​13062

Packaging

• Add zizmor for GitHub Actions workflow linting by @​Viicos in #​13039
• Update jiter to v0.14.0 to fix a segmentation fault on musl Linux by @​Viicos in #​13064

New Contributors

• @​arvindsaripalli made their first contribution in #​13016

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.