chore(deps): update python packages by renovate[bot] · Pull Request #122 · ni/hightime

renovate · 2026-04-07T00:46:30Z

This PR contains the following updates:

Package	Change	Age	Confidence
bandit (source, changelog)	`1.9.3` → `1.9.4`
ni-python-styleguide	`0.4.8` → `0.4.9`
pytest-cov (changelog)	`7.0.0` → `7.1.0`
sphinx-autoapi	`3.6.1` → `3.8.0`
tox (changelog)	`4.34.1` → `4.50.3`

Release Notes

PyCQA/bandit (bandit)

`v1.9.4`

Compare Source

What's Changed

chore: fixed some typos in comments by @jakob1379 in #1351
Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1357
Fix B613 crash when reading from stdin by @worksbyfriday in #1361
Include filename in nosec 'no failed test' warning by @worksbyfriday in #1363
Fix B615 false positive when revision is set via variable by @worksbyfriday in #1358
Lower version guard in check_ast_node to Python 3.12 by @rcgray in #1355
Fix B106 reporting wrong line number on multiline function calls by @worksbyfriday in #1360

New Contributors

@jakob1379 made their first contribution in #1351
@worksbyfriday made their first contribution in #1361
@rcgray made their first contribution in #1355

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

ni/python-styleguide (ni-python-styleguide)

`v0.4.9`

Compare Source

Fixed

Work around "No module named 'pkg_resources'" by pinning setuptools to <82 (#275)

pytest-dev/pytest-cov (pytest-cov)

`v7.1.0`

Compare Source

Fixed total coverage computation to always be consistent, regardless of reporting settings.
Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on
reporting options.
See #641 <https://github.com/pytest-dev/pytest-cov/issues/641>_.
Improve handling of ResourceWarning from sqlite3.

The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0).
It checks if there is already existing plugin for this message by comparing filter regular expression.
When filter is specified on command line the message is escaped and does not match an expected message.
A check for an escaped regular expression is added to handle this case.

With this fix one can suppress ResourceWarning from sqlite3 from command line::

pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...
Various improvements to documentation.
Contributed by Art Pelling in #718 <https://github.com/pytest-dev/pytest-cov/pull/718>_ and
"vivodi" in #738 <https://github.com/pytest-dev/pytest-cov/pull/738>.
Also closed #736 <https://github.com/pytest-dev/pytest-cov/issues/736>.
Fixed some assertions in tests.
Contributed by in Markéta Machová in #722 <https://github.com/pytest-dev/pytest-cov/pull/722>_.
Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

readthedocs/sphinx-autoapi (sphinx-autoapi)

`v3.8.0`

Compare Source

Features
^^^^^^^^

Autodoc-style directives can access members excluded by autoapi_options

Misc
^^^^

#553

`v3.7.0`

Compare Source

Features
^^^^^^^^

Added autoapi.import warning for when AutoAPI directives are given non-existent objects
Adding autoapi_follow_symlinks, which allows api to traverse into symlinked directories when generating the API documentation.
Drop support for Python 3.9 and officially support Python 3.14
Support rendering PEP-695 type parameters

Bugfixes
^^^^^^^^

Render typing_extensions.TypeAlias like other type aliases (#520)
Fix PythonFunction.overloads typing when source code overload(s) do not provide a return type (#523)

Misc
^^^^

Fix deprecation warnings raised by astroid and sphinx
Handling case where match returns None to fix mypy unit test.

tox-dev/tox (tox)

`v4.50.3`

Compare Source

What's Changed

🐛 fix(pkg): distinguish free-threaded Python in wheel build env by @gaborbernat in #3891

Full Changelog: tox-dev/tox@4.50.2...4.50.3

`v4.50.2`

Compare Source

What's Changed

fix(sdist): include docs/man/tox.1.rst by @branchv in #3890

New Contributors

@branchv made their first contribution in #3890

Full Changelog: tox-dev/tox@4.50.1...4.50.2

`v4.50.1`

Compare Source

What's Changed

🐛 fix(env): suggest normalized env name for dotted Python versions by @gaborbernat in #3888

Full Changelog: tox-dev/tox@4.50.0...4.50.1

`v4.50.0`

Compare Source

What's Changed

document {env:TOX_PACKAGE} for referencing built packages in commands by @rahuldevikar in #3873
🧪 test(docs): validate doc config examples to prevent regressions by @gaborbernat in #3875
✨ feat(run): add interrupt_post_commands for cleanup after Ctrl-C by @gaborbernat in #3882
✨ feat(config): support subscript syntax and env_name in conditionals by @gaborbernat in #3884

Full Changelog: tox-dev/tox@4.49.1...4.50.0

`v4.49.1`

Compare Source

What's Changed

Update maintainers by @rahuldevikar in #3868
🐛 fix(run): break deadlock in execution interrupt chain by @gaborbernat in #3869

Full Changelog: tox-dev/tox@4.49.0...4.49.1

`v4.49.0`

Compare Source

What's Changed

✨ feat(config): add {factor:label} substitution for TOML by @gaborbernat in #3865
🐛 fix(legacy): initialize config_format and output_file for --showconfig by @rares985 in #3867

New Contributors

@rares985 made their first contribution in #3867

Full Changelog: tox-dev/tox@4.48.1...4.49.0

`v4.48.1`

Compare Source

What's Changed

Replace archived 31z4/tox Docker image with build-your-own guide by @rahuldevikar in #3864
🐛 fix(toml): extract args from Command in ref replacement by @gaborbernat in #3863

Full Changelog: tox-dev/tox@4.48.0...4.48.1

`v4.48.0`

Compare Source

What's Changed

Add fail_fast to config reference docs by @rahuldevikar in #3853
✨ feat(config): add --format json/toml and -o to config command by @gaborbernat in #3857

Full Changelog: tox-dev/tox@4.47.3...4.48.0

`v4.47.3`

Compare Source

What's Changed

Fix SchemaStore workflow creating empty PRs by @gaborbernat in #3848
Add .mailmap to consolidate author identities by @yarikoptic in #3849
🐛 fix(config): honor ignore_base_python_conflict for factor conflicts by @gaborbernat in #3851

Full Changelog: tox-dev/tox@4.47.2...4.47.3

`v4.47.2`

Compare Source

What's Changed

fix: handle OSError in pos_args path existence check by @yarikoptic in #3847

New Contributors

@yarikoptic made their first contribution in #3847

Full Changelog: tox-dev/tox@4.47.1...4.47.2

`v4.47.1`

Compare Source

What's Changed

🐛 fix(config): resolve base_python from new-style version factors by @gaborbernat in #3846

Full Changelog: tox-dev/tox@4.47.0...4.47.1

`v4.47.0`

Compare Source

What's Changed

Move SECURITY.md to .github/SECURITY.md by @gaborbernat in #3835
Standardize .github files to .yaml suffix by @gaborbernat in #3836
🐛 fix(ci): resolve ty type-check failures by @gaborbernat in #3837
✨ feat(config): show clean errors for type mismatches by @gaborbernat in #3838
🧪 test(config): assert full error messages for all config fields by @gaborbernat in #3840
🐛 fix(exec): pass stdin through to executed command by @gaborbernat in #3842
🐛 fix(config): accept string for base_python in TOML by @gaborbernat in #3843

Full Changelog: tox-dev/tox@4.46.3...4.47.0

`v4.46.3`

Compare Source

What's Changed

👷 ci(schemastore): branch from upstream master by @gaborbernat in #3828
Fix outdated min version of virtualenv by @kajinamit in #3829

New Contributors

@kajinamit made their first contribution in #3829

Full Changelog: tox-dev/tox@4.46.2...4.46.3

`v4.46.2`

Compare Source

What's Changed

👷 ci(schemastore): fix PR creation for fork by @gaborbernat in #3827

Full Changelog: tox-dev/tox@4.46.1...4.46.2

`v4.46.1`

Compare Source

What's Changed

🐛 fix(config): allow glob patterns in ini depends by @gaborbernat in #3825
👷 ci(schemastore): fix git push auth in update workflow by @gaborbernat in #3826
🐛 fix(schema): add additionalProperties to partial-tox.json by @gaborbernat in #3824

Full Changelog: tox-dev/tox@4.46.0...4.46.1

`v4.46.0`

Compare Source

What's Changed

Add architecture (ISA) awareness to Python discovery by @rahuldevikar in #3815
✨ feat(config): add env_base templates for TOML by @gaborbernat in #3817
🐛 fix(deps): drop chardet for req file decoding by @gaborbernat in #3820
🐛 fix(cli): allow --help with invalid config by @gaborbernat in #3821

Full Changelog: tox-dev/tox@4.45.0...4.46.0

`v4.45.0`

Compare Source

What's Changed

Fix user guide link in README.md by @cpburnz in #3805
🐛 fix(type): resolve ty 0.0.17 compatibility by @gaborbernat in #3807
📝 docs: add redirects for old URLs (#3806) by @gaborbernat in #3808
Bump dependency requirements by @gaborbernat in #3812
fix: cross-section substitution resolves to empty when no factors match by @worksbyfriday in #3810
✨ feat(schema): enhance schema command with IDE integration by @gaborbernat in #3813
🐛 fix(env): break circular dependency in environment_variables resolution by @gaborbernat in #3816

New Contributors

@cpburnz made their first contribution in #3805

Full Changelog: tox-dev/tox@4.44.0...4.45.0

`v4.44.0`

Compare Source

What's Changed

🐛 fix(config): keep unfactored continuation lines after filtered factors (#3802) by @gaborbernat in #3804
✨ feat(config): add PEP 751 pylock.toml support by @gaborbernat in #3803

Full Changelog: tox-dev/tox@4.43.0...4.44.0

`v4.43.0`

Compare Source

What's Changed

📝 docs(infra): integrate sphinxcontrib-towncrier by @gaborbernat in #3798
✨ feat(toml): add generative env_list via product dict by @gaborbernat in #3797
🐛 fix(config): restore factor conditional continuations by @gaborbernat in #3799
🐛 fix(pip): pass config_settings to pip for sdist install by @gaborbernat in #3800

Full Changelog: tox-dev/tox@4.42.0...4.43.0

`v4.42.0`

Compare Source

What's Changed

🐛 fix(interrupt): suppress BrokenPipeError during teardown by @gaborbernat in #3778
✨ feat(cli): add --no-capture flag for interactive programs by @gaborbernat in #3777
✨ feat(config): add platform-dependent factor support by @gaborbernat in #3779
✨ feat(env): gracefully skip environments with unavailable runners by @gaborbernat in #3781
🐛 fix(env): restore compound factor conditionals by @gaborbernat in #3782
✨ feat(config): add default_base_python config key by @gaborbernat in #3783
✨ feat(config): add env_site_packages_dir_plat substitution by @gaborbernat in #3784
🐛 fix(parallel): show --list-dependencies output by @gaborbernat in #3786
✨ feat(config): add open-ended generative ranges by @gaborbernat in #3788
🐛 fix(config): collapse continuation lines before factor filtering by @gaborbernat in #3787
✨ feat(pkg): cache external packaging env build across envs by @gaborbernat in #3790
✨ feat(changelog): add granular towncrier categories by @gaborbernat in #3785
✨ feat(cli): accept plugin CLI options during provisioning by @gaborbernat in #3791
✨ feat(env): add recreate_commands config key by @gaborbernat in #3793
📝 docs(faq): document Debian python3-venv limitation by @gaborbernat in #3789
✨ feat(config): warn on unused config keys with -v by @gaborbernat in #3795
✨ feat(cli): add --skip-env-install flag for offline env reuse by @gaborbernat in #3792
✨ feat(env): add virtualenv_spec for per-env version pinning by @gaborbernat in #3794

Full Changelog: tox-dev/tox@4.41.0...4.42.0

`v4.41.0`

Compare Source

What's Changed

Prefer TOML-native config over legacy_tox_ini in pyproject.toml by @rahuldevikar in #3776
✨ feat(config): add package = "deps-only" mode by @gaborbernat in #3774

Full Changelog: tox-dev/tox@4.40.0...4.41.0

`v4.40.0`

Compare Source

What's Changed

Use positive exit code for multi-env failures by @rahuldevikar in #3768
✨ feat(config): add {glob:PATTERN} substitution by @gaborbernat in #3769
Add package=sdist-wheel package type by @rahuldevikar in #3741
✨ feat(config): add conditional replace for TOML by @gaborbernat in #3771
Create .gitignore in work_dir and info file directories by @rahuldevikar in #3770
✨ feat(run): add commands_retry config option by @gaborbernat in #3772
🐛 fix(config): set_env override lost after load by @gaborbernat in #3775

Full Changelog: tox-dev/tox@4.39.0...4.40.0

`v4.39.0`

Compare Source

What's Changed

🐛 fix(ci): suppress Pygments DeprecationWarning on Python 3.15 by @gaborbernat in #3733
🐛 fix(deps): apply --force-dep to package metadata dependencies by @gaborbernat in #3734
fix(ci): drop module scope from commonprefix warning filter by @gaborbernat in #3735
🐛 fix(config): resolve overrides with alias config keys by @gaborbernat in #3736
🐛 fix(config): set_env cross-section substitution loses values by @gaborbernat in #3737
🐛 fix(legacy): --parallel-no-spinner no longer suppresses output by @gaborbernat in #3738
🐛 fix(config): set_env cross-section substitution precedence by @gaborbernat in #3739
🐛 fix(config): set_env file| no longer overrides later values by @gaborbernat in #3740
🐛 fix(config): setup.cfg without [tox:tox] no longer blocks discovery by @gaborbernat in #3742
🐛 fix(env): posargs with colon no longer crash inactive envs by @gaborbernat in #3744
🐛 fix(provision): skip requires with false environment markers by @gaborbernat in #3745
🐛 fix(config): env variable substitution in package envs by @gaborbernat in #3746
🐛 fix(config): set_env substitution honors skip_missing_interpreters by @gaborbernat in #3747
🐛 fix(config): resolve cross-section refs in caller context by @gaborbernat in #3748
🐛 fix(config): break changedir/posargs circular dependency by @gaborbernat in #3749
🐛 fix(cli): support brace expansion in -e flag by @gaborbernat in #3750
🐛 fix(config): factor filter fallback to default value by @gaborbernat in #3751
🐛 fix(env): preserve shared pkg env on recreate by @gaborbernat in #3752
🐛 fix(env): reject partial testenv section matches by @gaborbernat in #3753
🐛 fix(config): support base inherit in TOML format by @gaborbernat in #3754
🐛 fix(cli): make multiple -e flags additive by @gaborbernat in #3755
🐛 fix(provision): serialize concurrent provisioning by @gaborbernat in #3756
📝 docs: document interactive terminal programs limitation by @gaborbernat in #3757
🐛 fix(config): defer TOML set_env string substitution by @gaborbernat in #3759
🐛 fix(config): handle cross-drive posargs on Windows by @gaborbernat in #3760
🐛 fix(plugin): skip toxfile.py with unknown hooks by @gaborbernat in #3762
🐛 fix(config): skip non-tox sections in env discovery by @gaborbernat in #3761
🐛 fix(config): treat backslash-space as path separator on Windows by @gaborbernat in #3764
🐛 fix(config): preserve colors in provisioned tox on Windows by @gaborbernat in #3765
create a cachedir.tag file in the tox work directory by @rahuldevikar in #3763
🐛 fix(execute): render ANSI colors from subprocesses on Windows by @gaborbernat in #3766
🧪 test(config): verify unicode support in config files by @gaborbernat in #3767

Full Changelog: tox-dev/tox@4.38.0...4.39.0

`v4.38.0`

Compare Source

What's Changed

🐛 fix(test): resolve Windows CI flake in provision integration tests by @gaborbernat in #3732
Scope deps rejection to pure PEP-517 build types by @rahuldevikar in #3730

Full Changelog: tox-dev/tox@4.37.0...4.38.0

`v4.37.0`

Compare Source

What's Changed

✨ feat(config): add extra_setup_commands for --notest phase by @gaborbernat in #3716
🐛 fix(release): format changelog with pre-commit before committing by @gaborbernat in #3717
📝 docs: restructure documentation using Diátaxis framework by @gaborbernat in #3718
🐛 fix(pip): set PIP_USER=0 to prevent --user installs in virtualenvs by @gaborbernat in #3719
🐛 fix(config): prevent env_run_base deps from being clobbered by @gaborbernat in #3721
Fix env name with dot losing description in TOML config by @Fridayai700 in #3722
🐛 fix(ci): add completion extras to type checker environments by @gaborbernat in #3728
Fix factor selection via TOX_FACTORS environment variable by @Fridayai700 in #3725
Fix setenv PATH modifications being overwritten by @Fridayai700 in #3723
Fix extras with underscores not matching hyphenated metadata by @Fridayai700 in #3727
Fix install_command ignored from TOML config by @Fridayai700 in #3724
Fix deps with ~= version specifier treated as local paths by @Fridayai700 in #3726

New Contributors

@Fridayai700 made their first contribution in #3722

Full Changelog: tox-dev/tox@4.36.1...4.37.0

`v4.36.1`

Compare Source

What's Changed

🔒 ci(workflows): add explicit permissions to workflows by @gaborbernat in #3714
Add architecture documentation by @rahuldevikar in #3708
📚 docs(man): add Unix man page and composable CLI argument inheritance by @gaborbernat in #3705
Add new logging section in documentation by @rahuldevikar in #3701
Report TOML parse errors during config discovery instead of silently ignoring them by @rahuldevikar in #3710
🐛 fix(execute): adopt CPython subprocess stream handling by @gaborbernat in #3715

Full Changelog: tox-dev/tox@4.36.0...4.36.1

`v4.36.0`

Compare Source

What's Changed

✨ feat(config): allow skip_missing_interpreters per environment by @gaborbernat in #3684
Return non-zero exit code from tox config when exceptions occur by @veeceey in #3683
Update development.rst to reflect current standards by @rahuldevikar in #3685
Build dependencies should only come from build backend by @rahuldevikar in #3687
Add packaging environment docs to regular Configuration by @rahuldevikar in #3686
🔧 chore(type): migrate from mypy to ty by @gaborbernat in #3688
📝 docs(plugins): document CLI argument conventions by @gaborbernat in #3689
Exclude self-dependencies in run_order to prevent KeyError by @rahuldevikar in #3690
Drop setup.py mentions from the installation page by @rahuldevikar in #3693
🚀 perf(tests): prevent stale fixture state and fix flaky timing assertions by @gaborbernat in #3692
✨ feat(run): add fail-fast option to stop on first failure by @gaborbernat in #3691
📝 docs(plugins): document toxfile.py inline plugins by @gaborbernat in #3694
✨ feat(cli): add shell completion via argcomplete by @gaborbernat in #3695
✨ feat(package): validate extras against package metadata by @gaborbernat in #3696
✨ feat(depends): add glob pattern support for depends option by @gaborbernat in #3697
✨ feat(env): add disallow_pass_env to exclude env vars by @gaborbernat in #3698
📝 docs: restructure documentation following Diataxis framework by @gaborbernat in #3702
📝 docs: config enhancements, man page, version tracking by @gaborbernat in #3703
Added a _resolve_path() static method to InstallPackageAction by @rahuldevikar in #3699
Follow FORCE_COLOR. Any non-empty value now enables color by @rahuldevikar in #3700

New Contributors

@veeceey made their first contribution in #3683

Full Changelog: tox-dev/tox@4.35.0...4.36.0

`v4.35.0`

Compare Source

What's Changed

docs: fix misleading ENVDIR reference in devenv description by @VedantMadane in #3670
Fix CI post packaging releese by @gaborbernat in #3673
Fix code block format in docs/plugins.rst by @mushitoriami in #3675
fix(docs): correct path for built documentation by @daniel7an in #3680
Document injected environment variables by @rahuldevikar in #3681
Show toxfile.py inline plugin in --version output by @rahuldevikar in #3682

New Contributors

@VedantMadane made their first contribution in #3670
@mushitoriami made their first contribution in #3675
@daniel7an made their first contribution in #3680
@rahuldevikar made their first contribution in #3681

Full Changelog: tox-dev/tox@4.34.1...4.35.0

Configuration

📅 Schedule: Branch creation - Only on Sunday ( * * * * 0 ) in timezone US/Central, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-04-07T00:46:33Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml

Artifact update for tox resolved to version 4.52.0, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 4.50.3
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

github-actions · 2026-04-07T00:55:34Z

Test Results

27 files ±0 27 suites ±0 1m 27s ⏱️ +6s
408 tests ±0 407 ✅ ±0 1 💤 ±0 0 ❌ ±0
11 016 runs ±0 10 989 ✅ ±0 27 💤 ±0 0 ❌ ±0

Results for commit d90d068. ± Comparison against base commit 69762be.

♻️ This comment has been updated with latest results.

renovate bot requested review from bkeryan and tkrebes as code owners April 7, 2026 00:46

renovate bot force-pushed the users/renovate/python branch from 11ba02d to 449442d Compare April 7, 2026 01:09

chore(deps): update python packages

d90d068

renovate bot force-pushed the users/renovate/python branch from 449442d to d90d068 Compare April 7, 2026 01:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update python packages#122

chore(deps): update python packages#122
renovate[bot] wants to merge 1 commit intomasterfrom
users/renovate/python

renovate bot commented Apr 7, 2026

Uh oh!

renovate bot commented Apr 7, 2026

Uh oh!

github-actions bot commented Apr 7, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Apr 7, 2026

Release Notes

What's Changed

New Contributors

Fixed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

renovate bot commented Apr 7, 2026

⚠️ Artifact update problem

File name: pyproject.toml

Uh oh!

github-actions bot commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

github-actions bot commented Apr 7, 2026 •

edited

Loading