Update maintenance - #260
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
|
|
renovate
Bot
force-pushed
the
renovate/maintenance
branch
4 times, most recently
from
August 8, 2026 01:27
787a4f3 to
fc45205
Compare
renovate
Bot
force-pushed
the
renovate/maintenance
branch
from
August 8, 2026 17:48
fc45205 to
d889a15
Compare
renovate
Bot
force-pushed
the
renovate/maintenance
branch
from
August 9, 2026 21:01
d889a15 to
753b817
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v7.0.0→v7.0.1==3.29.4→==3.32.2==26.2→==26.3==7.14→==7.18==7.14→==7.18==4.10.0→==4.11.1==4.0.6→==4.0.7cef2210→dc37677v3.0.3→v3.0.5v2.19.4→v2.20.1==4.56.1→==4.58.0==21.5.1→==21.7.3Release Notes
actions/checkout (actions/checkout)
v7.0.1Compare Source
tox-dev/py-filelock (filelock)
v3.32.2Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.32.1...3.32.2
v3.32.0Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.31.2...3.32.0
v3.31.2Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.31.1...3.31.2
v3.31.1Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.31.0...3.31.1
v3.31.0Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.30.3...3.31.0
v3.30.3Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/filelock@3.30.2...3.30.3
v3.30.2Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.30.1...3.30.2
v3.30.1Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.30.0...3.30.1
v3.30.0Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.29.7...3.30.0
v3.29.7Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.29.6...3.29.7
v3.29.6Compare Source
What's Changed
Full Changelog: tox-dev/filelock@3.29.5...3.29.6
v3.29.5Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/filelock@3.29.4...3.29.5
pypa/packaging (packaging)
v26.3Compare Source
What's Changed
Features
VersionRangeAPI andSpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering.VersionRange.to_specifier_set()converts a range back to aSpecifierSetwhere a PEP 440 form exists. (#1267, #1270, #1298)Metadata-Version: 2.6. (#1194)limitargument toparse_tag()for compressed tag sets. (#1220)prefer_sdist_predicateargument toPylock.select()to prefer source distributions over wheels for selected packages. (#1334)pure_python_tags()to generate the pure-Python tags for a Python version without touching the running platform. (#1346)SpecifierSet.is_subset(),SpecifierSet.is_superset(), andSpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)Behavior adaptations
linux_*platform tags overmanylinuxandmusllinuxtags on Linux. (#160)Fixes for versions and specifiers
InvalidVersioninstead ofTypeErrorwhenVersionis given a non-string. (#1319)InvalidVersionfor non-string pre-release letters passed toVersion.from_parts. (#1241)AttributeErrorwhen hashing internally trimmed versions. (#1242)SpecifierSet.is_unsatisfiablefor post-release boundary intersections. (#1257)Fixes for requirements and markers
Requirement.__hash__consistent with__eq__for trailing-zero-equivalent specifiers (e.g.foo==1.0.0andfoo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)Requirement's specifierprereleasesoverride across a pickle round trip. (#1204)InvalidRequirementinstead ofInvalidSpecifierwhen a requirement contains an invalid specifier. (#1332)==1.0.post1.*. (#1299)extraanddependency_groupsvalues in nested markers at parse time. (#1246, #1310)UndefinedComparisonwhen a set-valued variable likeextrasis used outside the membership form. (#1265)UndefinedEnvironmentName(aKeyErrorsubclass) for missing environment keys during marker evaluation. (#1276)InvalidMarker/InvalidRequirementinstead of leaking a low-level error. (#1249)Fixes for metadata and licenses
from_emailvalidation errors into oneExceptionGroupinstead of raising the first. (#1268)Description-Content-Typevalues. (#1329){field}placeholders in error messages. (#1327)unparsedinstead of asserting. (#1247)InvalidMetadataandCyclicDependencyGrouppicklable. (#1328)str.splitlinesrecognizes when writing a header withRFC822Message. (#1356)InvalidLicenseExpressionfor misplacedWITHclauses and emptyLicenseRef-names. (#1266)InvalidLicenseExpressioninstead ofKeyErrorfor aLicenseRef-with a+suffix. (#1219)Fixes for tags and filenames
InvalidTagfromparse_tag()for tags with the wrong number of components. (#1238)parse_wheel_filename()andparse_tag(). (#1234)is_normalized_namenow rejects names with collapsed double hyphens likea--b. (#1230)abi3ttags. (#1245)warnargument togeneric_tags()insys_tags(). (#1264)SystemErrorfor an empty or malformed CPythonEXT_SUFFIX. (#1271, #1301)fat3architecture name (wasfat32). (#1199)Fixes for pylock, direct URLs, and dependency groups
pylockartifact file names derived from aurlso that local versions (e.g. a wheel with2.12.1+cu130encoded as2.12.1%2Bcu130) yield a valid file name. (#1314)tagssequence inPylock.select()instead of falling back tosys_tags(). (#1349)Pylock.select()on Python builds that report a non-PEP 440python_full_version(e.g.3.15.0+). (#1179)pylockfiles. (#1244)PylockSelectErrortopackaging.pylock.__all__. (#1202)DirectUrlcredential stripping for passwords containing@. (#1218)direct_url. (#1240)direct_url. (#1297)InvalidRequirementerrors while resolving dependency groups instead of leaking them. (#1302)Performance
SpecifierandSpecifierSetfiltering with the new range engine. (#1120, #1259)_manylinuxmodule lookup process-wide. (#1254)__slots__toRequirementand the token classes. (#1320, #1258)parse_tag(), and skipplatform.mac_ver()when the version and arch are given. (#1253, #1256, #1236, #1255)Documentation
packaging.pylock. (#1339)packaging.metadatafields are validated. (#1342)RFC822Policyin the low-levelpackaging.metadatainterface. (#1222)versionadded/versionchangeddirectives and many small docstring fixes across the API reference. (#1205, #1207, #1208, #1209, #1211, #1216, #1217, #1223, #1272, #1273, #1274, #1291, #1300, #1303, #1317, #1344)Internal
New Contributors
Full Changelog: pypa/packaging@26.2...26.3
lelit/pglast (pglast)
v7.18Compare Source
v7.17Compare Source
v7.16Compare Source
v7.15Compare Source
tox-dev/platformdirs (platformdirs)
v4.11.1Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/platformdirs@4.11.0...4.11.1
v4.11.0Compare Source
What's Changed
Full Changelog: tox-dev/platformdirs@4.10.1...4.11.0
v4.10.1Compare Source
What's Changed
Full Changelog: tox-dev/platformdirs@4.10.0...4.10.1
pylint-dev/pylint (pylint)
v4.0.7Compare Source
What's new in Pylint 4.0.7?
Release date: 2026-08-09
False Positives Fixed
Fix a false positive for
invalid-namewhen a module-level variable is assignedan instance of a
TypedDictsubclass. Such a name is a value, not a typedefinition, so it is now checked against the constant or variable regex instead
of
class-rgx.Closes #11231
Other Bug Fixes
Fix a crash in the
bad-open-modecheck when themodeargument ofopenis theNotImplementedconstant (Python >= 3.14).Closes #11099
Fix a crash in the
not-context-managerandnot-async-context-managerchecks when the context manager infers to a value without a name, such as the
slicereturned bywith slice(...)/async with slice(...).Closes #11102
Fix a false positive for
nested-min-max(W3301) when the innermin/maxcall carries a keyword argument such askey=. Flattening the call dropped the keyword and changed the result, so nested calls whose inner call has keyword arguments are no longer flagged.Closes #11130
Fix a false suggestion from
nested-min-max(W3301): when rewriting a nestedmin/maxinto a splat call, arguments positioned after the splatted call were silently dropped, so the suggested code changed the result.Closes #11134
Fix a false positive for
too-many-locals(R0914): PEP 695 type parameters, i.e. theT1andT2in a genericdef f[T1, T2]signature, were counted as local variables. They are type-system constructs, not runtime locals, and are now excluded from the local-variable count.Closes #11136
Fix
literal-comparison(R0123) emitting a corrupted suggestion for identifiersthat contain
is(e.g.axis is 5was renderedax== == 5). The suggestionis now rebuilt from the operands and operator.
Closes #11146
Fix false positives in
bad-string-format-type(E1307) for valid%formatting:%i/%uapplied to a float (both truncate like%d) and%aapplied to anynon-int type (
%ais type-agnostic like%s/%r).Closes #11147
Fix a false positive for :ref:
useless-parent-delegationwhen an override changesthe default value of a positional-only parameter.
Closes #11148
Fixed a crash in
comparison-with-callablewhen comparing a lambda assigned as a class attribute.Closes #11175
too-many-linescould be reported at the line of a# pylint: disable=too-many-linespragma found in a previously linted module. Pragma positions are now reset between
modules, so the message is reported at line 1 (or at the current module's own pragma)
regardless of which files were linted before.
Refs #11191
Fix a crash when a call unpacks a dictionary whose keys are not string
constants, e.g.
copy.copy(**{-1: 1}).Closes #11222
slackapi/slack-github-action (slackapi/slack-github-action)
v3.0.5: Slack GitHub Action v3.0.5Compare Source
Patch Changes
96fddbe: fix: revert multiline yaml parsing indentation changev3.0.4: Slack GitHub Action v3.0.4Compare Source
Patch Changes
fa03fe4: refactor: send webhooks with the@slack/webhookpackagestep-security/harden-runner (step-security/harden-runner)
v2.20.1Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2.20.0...v2.20.1
v2.20.0Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0
tox-dev/tox (tox)
v4.58.0Compare Source
What's Changed
Full Changelog: tox-dev/tox@4.57.2...4.58.0
v4.57.2Compare Source
What's Changed
Full Changelog: tox-dev/tox@4.57.1...4.57.2
v4.57.1Compare Source
What's Changed
Full Changelog: tox-dev/tox@4.57.0...4.57.1
v4.57.0Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/tox@4.56.4...4.57.0
v4.56.4Compare Source
What's Changed
Full Changelog: tox-dev/tox@4.56.3...4.56.4
v4.56.3Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/tox@4.56.2...4.56.3
v4.56.2Compare Source
What's Changed
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.