chore(deps): update all non-major dependencies #264
peschmae
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/all-minor-patch"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
==7.4.1->==7.6.0==4.2.0->==4.6.13.13-alpine->3.14-alpineRelease Notes
jazzband/pip-tools (pip-tools)
v7.6.0Compare Source
2026-07-13
Features
The
--helpoutput forpip-compileandpip-synccommands has been extended to include usage examples
-- by {user}
Dzhud.PRs and issues: {issue}
1142Added
--uploaded-prior-toas a passthrough option forpip-compile, allowingusers to restrict package candidates to versions uploaded before a given
datetime. Requires pip >= 26.0 -- by {user}
miettal.PRs and issues: {issue}
2288pip-toolsis now compatible withpip26.1 -- {user}gaborbernat.PRs and issues: {issue}
2379Improved documentation
Fixed the contents sidebar for the index doc -- by {user}
sirosen.PRs and issues: {issue}
2169pip-toolsnow has a policy regarding LLM-generated contributions, noted in thecontributing documentation -- by {user}
sirosen.Thanks to {user}
0cjs, {user}gpshead, {user}mr-c, {user}samdoran,{user}
webknjaz, and everyone else in the broader community who helped usto craft a policy which is considerate of contributors and protective of the
project and its maintainers.
PRs and issues: {issue}
2318pip-tools' documentation now features a section titled "Reference" coveringthe CLI commands and configuration. Configuration documentation has been removed
from the readme.
-- by {user}
sirosenContributor-facing changes
CI testing now runs on Intel and ARM macOS runners, and is pinned to a specific
macOS version -- by {user}
sirosen.PRs and issues: {issue}
2079, {issue}2132, {issue}2348pip-toolsnow has a policy regarding LLM-generated contributions, noted in thecontributing documentation -- by {user}
sirosen.Thanks to {user}
0cjs, {user}gpshead, {user}mr-c, {user}samdoran,{user}
webknjaz, and everyone else in the broader community who helped usto craft a policy which is considerate of contributors and protective of the
project and its maintainers.
PRs and issues: {issue}
2278, {issue}2318Started running {pypi}
zizmoras a part of CI pipelines to improvesecurity of how we configure GitHub Actions CI/CD
-- by {user}
webknjaz.PRs and issues: {issue}
2327pip-tools docs now support GitHub Flavored Markdown admonition blocks
-- by {user}
webknjaz.PRs and issues: {issue}
2343Coverage reporting in
pip-toolsnow skips_t.TYPE_CHECKINGblocks -- by{user}
gaborbernat.PRs and issues: {issue}
2386{class}
~piptools.repositories.LocalRequirementsRepositorynow accepts any{class}
~piptools.repositories.BaseRepositorysubclass as its proxiedrepository, not only {class}
~piptools.repositories.PyPIRepository-- by {user}
gaborbernat.PRs and issues: {issue}
2387A handful of f-string conversions in {mod}
piptools.utilsand the CLIentry points in {mod}
piptools.scripts.compileand{mod}
piptools.scripts.synccarried a stray space before!s(e.g.f"...{value !s}..."). {pep}498forbids the whitespace before theconversion flag and tooling differs on whether the form parses; the
literals are now in canonical
{value!s}shape -- by{user}
gaborbernat.PRs and issues: {issue}
2388A session-scoped autouse fixture in {file}
tests/conftest.pynow drops everyPIP_*environment variable before any other fixture runs, so the testsuite no longer flakes on contributor machines whose shell exports
PIP_INDEX_URL,PIP_FIND_LINKS,PIP_TRUSTED_HOST, and the rest ofthe family for a corporate mirror. Tests that need a specific variable
keep their function-scoped {meth}
pytest:pytest.MonkeyPatch.setenvandsupersede the session-level deletion -- by {user}
gaborbernat.PRs and issues: {issue}
2390The Sphinx configuration now resolves cross-references for
{external+packaging:doc}
packaging <index>, {external+pip:doc}pip <index>,{external+pip:doc}
click <index>, {mod}build, and {mod}importlib_metadatavia intersphinx, and the deprecated
sphinx.util.console.boldhelper isreplaced with a plain
logger.infocall (the colour markup never renderedin CI logs anyway). Cross-references in docstrings that previously fell
back to nitpick suppression now link to the upstream documentation -- by
{user}
gaborbernat.PRs and issues: {issue}
2391The
Notify CodecovCI workflow job now only fails on privilege errorsin the upstream project repository runs. This fixes a problem
contributors face when running CI within their forks that are not filed
as true Codecov-side projects.
-- {user}
gaborbernatand {user}webknjazPRs and issues: {issue}
2392Fixed incorrect nitpick ignore regexes -- by {user}
sirosen.pip-toolsCI now pins GitHub Actions versions to hashes -- by {user}sirosen.pip-toolsnow tests against PyPy 3.11 -- by {user}sirosenand {user}webknjaz.pip-tools's GitHub Actions config now specifies the Ubuntu and Windows runnerversions used.
v7.5.3Compare Source
2026-02-09
Bug fixes
The option
--unsafe-packageis now normalized -- by {user}shifqu.PRs and issues: {issue}
2150Fixed a bug in which
pip-compilelost any index URL options whenlooking up hashes -- by {user}
sirosen.This caused errors when a package was only available from an extra
index, and caused
pip-compileto incorrectly drop index URL optionsfrom output, even when they were present in the input requirements.
PRs and issues: {issue}
2220, {issue}2294, {issue}2305Fixed removal of temporary files used when reading requirements from stdin
-- by {user}
sirosen.Features
pip-toolsis now tested against Python 3.14 and 3.14t in CI, andmarks them as supported in the core packaging metadata
-- by {user}
webknjaz.PRs and issues: {issue}
2255pip-tools is now compatible with pip 26.0 -- by {user}
sirosen.PRs and issues: {issue}
2319, {issue}2320Removals and backward incompatible breaking changes
sirosen.Improved documentation
The change log management infra now allows the maintainers to add notes
before and after the regular categories -- by {user}
webknjaz.PRs and issues: {issue}
2287, {issue}2322Added documentation clarifying that
pip-compilereads the existingoutput file as a constraint source, and how to use
--upgradetorefresh dependencies -- by {user}
maliktafheem.PRs and issues: {issue}
2307Packaging updates and notes for downstreams
pip-toolsis now tested against Python 3.14 and 3.14t in CI, andmarks them as supported in the core packaging metadata
-- by {user}
webknjaz.PRs and issues: {issue}
2255Contributor-facing changes
Consistency of the Markdown files is now being enforced by linting
with {pypi}
pymarkdownlnt-- by {user}webknjaz.PRs and issues: {issue}
2256The linting is now set up to perform structured GitHub Actions
workflows and actions checks against json schemas
-- by {user}
webknjaz.PRs and issues: {issue}
2273The CI/CD is now set up so that the distribution build job
is a part of the test pipeline. That pipeline is included in
the release workflow which sources the artifact in produces.
The tests must now pass for the release to be published to PyPI.
-- by {user}
webknjazPRs and issues: {issue}
2274Fix
actionlinthook usage to always includeshellcheckintegration -- by {user}sirosen.PRs and issues: {issue}
2281Utilities for interacting with
piphave started to move into the:py:mod:
piptools._internal._pip_apisubpackage -- by {user}sirosen.PRs and issues: {issue}
2285The change log management infra now allows the maintainers to add notes
before and after the regular categories -- by {user}
webknjaz.PRs and issues: {issue}
2287, {issue}2322The linting is now set up to demand that {py:mod}
typingis alwaysimported as a module under the name of
_t-- by {user}webknjaz.This is enforced by {user}
sirosen's {pypi}flake8-typing-as-tplugin for {pypi}
flake8.PRs and issues: {issue}
2289The {file}
tox.iniand {file}.github/parts of the repository nowhave project leads assigned as GitHub code owners -- by {user}
webknjaz.PRs and issues: {issue}
2291Remove a redundant 'v' prefix from the CI release workflow job name -- by {user}
anandvenugopal-tech.PRs and issues: {issue}
2300The
check-jsonschemaReadTheDocs hook has been enabled, andthe config has been tweaked to pass -- by {user}
sirosen.v7.5.2Compare Source
2025-11-11
Bug fixes
Fixed
pip-compileto handle relative path includes which are not subpaths ofthe current working directory -- by {user}
sirosen.PRs and issues: {issue}
2231, {issue}2260Using
--upgrade-packageand dynamically building project metadata nolonger causes an {exc}
AttributeErrorwhen pip encounters an error during thebuild -- by {user}
Epic_Winkand {user}tusharsadhwani.PRs and issues: {issue}
2258Features
Test and declare Python 3.13 support -- by {user}
jayaddison(for OpenCulinary).PRs and issues: {issue}
2251pip-tools is now compatible with pip 25.3 -- by {user}
shifqu.PRs and issues: {issue}
2252, {issue}2253Packaging updates and notes for downstreams
pip-toolsnow supports installation from git archives by providingsetuptools-scmwith.git_archival.txtdata.PRs and issues: {issue}
2225Contributor-facing changes
The change log entry bot has been explicitly configured to stop requiring
news fragments in pull requests having the [
bot:chronographer:skiplabel][bot:chronographer:skip label] set-- by {user}
sirosenand {user}webknjaz.It was also set up to reference our change log authoring document from the
GitHub Checks pages. And the reported check name is now set to
Change log entry.PRs and issues: {issue}
2201The CI is now set up to invoke failed tests again with
maximum level of detail -- by {user}
webknjaz.The change is aimed at helping troubleshoot failures
that might be difficult to reproduce locally.
PRs and issues: {issue}
2254The integration with Codecov has been updated to ensure that reports
are uploaded to the service even on failures -- by {user}
webknjaz.GitHub Actions is now configured to also send an explicit notification
to Codecov about the completion of previously initiated uploads.
Additionally, the configuration file is now {file}
.codecov.yml.PRs and issues: {issue}
2265The linting suite now runs [
actionlint][actionlint] -- by {user}webknjaz.This tool checks typical problems with GitHub Actions workflow
definitions and has a registry of widely-used GitHub Action
arguments that it validates.
PRs and issues: {issue}
2266v7.5.1Compare Source
2025-09-26
Bug fixes
Fixed static parsing of {file}
pyproject.tomldata when the{file}
pyproject.tomlis supplied as a relative path -- by {user}sirosen.PRs and issues: {issue}
2215, {issue}2221, {issue}2233The "via" paths in
pip-compileoutput for requirements discovered frompyproject.tomldata are now written in POSIX format -- by {user}sirosen.PRs and issues: {issue}
2221Fixed a bug which removed slashes from URLs in
-rand-cin the outputof
pip-compile-- by {user}sirosen.PRs and issues: {issue}
2223Fixed an incompatibility with
click >= 8.3which madepip-compiledisplay incorrect options in the compile command in output headers
-- by {user}
sirosen.PRs and issues: {issue}
2235Features
pip-toolsnow officially supportspipversion 25.2 -- by {user}sirosen.PRs and issues: {issue}
2214Improved documentation
ReadTheDocs builds for
pip-toolsno longer include htmlzip and pdf outputs-- by {user}
sirosen.PRs and issues: {issue}
2218Contributor-facing changes
pip-toolsnow tests onpipversion 25.2 -- by {user}sirosen.PRs and issues: {issue}
2214The changelog documentation for contributors now provides hyperlinks to the
source of each example change note -- by {user}
jayaddison(for OpenCulinary).
PRs and issues: {issue}
2217The CPython versions tested in nightly CI runs are now separate from
branch and PR CI, and don't include very old versions -- by {user}
sirosen.PRs and issues: {issue}
2226v7.5.0Compare Source
2025-07-30
Bug fixes
Fixed the ordering of format controls to preserve underlying
pipbehavior-- by {user}
sethmlarson.PRs and issues: {issue}
2082Fixed
NoCandidateFoundexception to be compatible withpip >= 24.1-- by {user}
chrysle.PRs and issues: {issue}
2083pip-compilenow produces relative paths for editable dependencies-- by {user}
macro1.PRs and issues: {issue}
2087Fixed crash failures due to incompatibility with
pip >= 25.1-- by {user}
gkreitzand {user}sirosen.PRs and issues: {issue}
2176, {issue}2178Features
pip-compilenow treats package versions requested on the command line asconstraints for the underlying
pipusage.This applies to build deps in addition to normal package requirements.
-- by {user}
chryslePRs and issues: {issue}
2106pip-toolsnow tests on and officially supports Python 3.12-- by {user}
sirosen.PRs and issues: {issue}
2188Requirements file paths in
pip-compileoutput are now normalized toPOSIX-style, even when
pip-compileis run on Windows.This provides more consistent output across various platforms.
-- by {user}
sirosenPRs and issues: {issue}
2195pip-toolsnow tests against and supportspipup to version25.1-- by {user}
sirosen.PRs and issues: {issue}
2195Removals and backward incompatible breaking changes
pip-compilewill now relativize the requirements paths which are recorded inits output.
Paths are made relative to the working directory.
This provides more consistent results across
pipversions.-- by {user}
sirosenPRs and issues: {issue}
2131, {issue}2195Packaging updates and notes for downstreams
pip-toolsreleases are now configured via Trusted Publishing.This allows for signature and attestation verification via PyPI.
-- by {user}
webknjazPRs and issues: {issue}
2149, {issue}2209, {issue}2210Contributor-facing changes
pip-tools's CI now runs against pinnedpipversions, declared intoxconfiguration as the "supported" version.
This does not change the support policy for
pipversions, but declares whatis tested and known to work.
-- by {user}
webknjazPRs and issues: {issue}
2142pip-toolsnow tests against PyPy 3.10 as its supported PyPy version-- by {user}
webknjaz.PRs and issues: {issue}
2146pip-toolsnow uses Towncrier to manage the changelog-- by {user}
sirosenand {user}webknjaz,with suggestions from {user}
jayaddison.PRs and issues: {issue}
2201, {issue}2203pip-toolsnow usessphinx-issuesto link to issues, PRs, commits, and user accounts
-- by {user}
sirosen.PRs and issues: {issue}
2202pre-commit/pre-commit (pre-commit)
v4.6.1Compare Source
==================
Fixes
language: nodehooks viagit.JULIA_DEPOT_PATHforlanguage: julia.--repoforpre-commit autoupdate.pre-push.pre-commit run --all-files.v4.6.0Compare Source
==================
Features
pre-commit hook-impl: allow--hook-dirto be missing to enable easierusage with
git2.54+ git hooks.Fixes
pre-commit hook-impl:--hook-typeis required.v4.5.1Compare Source
==================
Fixes
language: pythonwithrepo: localwithoutadditional_dependencies.v4.5.0Compare Source
==================
Features
pre-commit hazmat.v4.4.0Compare Source
==================
Features
--fail-fastoption topre-commit run.ruby-build/rbenv.language: unsupported/language: unsupported_scriptas aliasesfor
language: system/language: script(which will eventually bedeprecated).
Fixes
SecurityOptions: null.stagesin.pre-commit-config.yaml.v4.3.0Compare Source
==================
Features
language: docker/language: docker_image: detect rootless docker.language: julia: avoidstartup.jlwhen executing hooks.language: dart: support latest dart versions which require a higher sdklower bound.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
chore(deps): update dependency pip-tools to v7.5.0to chore(deps): update all non-major dependenciesff72b18156tof56ba80511f56ba80511toa31a0bb16fa31a0bb16ftoeecacf4ed8eecacf4ed8toae53c955a1ae53c955a1to742854b4ad742854b4adtoe3bbfdc37ee3bbfdc37etoc6337785f3c6337785f3to251c90b15d251c90b15dto0efa0c08ec0efa0c08ecfb674640a0fb674640a0tofcd65e1958fcd65e1958to06c3de1e9306c3de1e93f7fa81584ef7fa81584eto96b8be489396b8be4893b2b4522b5ab2b4522b5atodb362b1dc3db362b1dc3toa99fbc8f3cView command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.