fix(deps): update all non-major dependencies #915
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
force-pushed
the
renovate/all-nonmajor
branch
8 times, most recently
from
bfc9f75 to
f1c955d
Compare
renovate
bot
force-pushed
the
renovate/all-nonmajor
branch
7 times, most recently
from
04c153e to
644cb2d
Compare
renovate
bot
force-pushed
the
renovate/all-nonmajor
branch
7 times, most recently
from
e4a1ba0 to
9914b61
Compare
renovate
bot
force-pushed
the
renovate/all-nonmajor
branch
6 times, most recently
from
25068ac to
c56849d
Compare
renovate
bot
force-pushed
the
renovate/all-nonmajor
branch
from
c56849d to
b90a145
Compare
renovate
bot
force-pushed
the
renovate/all-nonmajor
branch
5 times, most recently
from
07bce25 to
f293297
Compare
renovate
bot
force-pushed
the
renovate/all-nonmajor
branch
from
f293297 to
db0ecff
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.9.3→0.9.28==1.34.22→==1.42.39==1.34.22→==1.42.39==8.1.8→==8.3.1==1.4.2→==1.4.4==1.18.2,<2→==1.19.1,<23.10.15→3.14.23.10→3.14==2.0.1→==2.1.1==1.8.5→==1.9.7>=0.12.5,<0.14.0→>=0.14.0,<0.15.0Release Notes
astral-sh/uv (astral-sh/uv)
v0.9.28Compare Source
Released on 2026-01-29.
Python
Enhancements
default = true(#17713)Configuration
Bug fixes
uv.exeexits whenuvw.exeoruvx.exeis killed (#17500)v0.9.27Compare Source
Released on 2026-01-26.
Python
Enhancements
-tshortform for--targettouv pipsubcommands (#17501)uv pip freeze --excludeflag (#17045)--systemand--no-systeminuv venv(#17647)uv pip compileattempt to download a specified--python-versionif it can. (#17249)exclude-newer-package(#17665)Preview features
uv python upgrade(#17653)Bug fixes
SSL_CERT_FILEis a directory (#17503)Documentation
--lockedto installcargo-xwinin guide (#17530)Other changes
v0.9.26Compare Source
Released on 2026-01-15.
Python
Enhancements
--no-sources-package(#14910)Preview features
METADATA.jsonandWHEEL.jsonin uv build backend (#15510)Bug fixes
Documentation
pyproject.tomlexamples for more system-level settings (#17462)v0.9.25Compare Source
Released on 2026-01-13.
Python
Enhancements
--compile-bytecodetouv python installanduv python upgradeto compile the standard library (#17088)exclude-newerper package (#16854)WM_SETTINGCHANGEonuv tool update-shell(#17404)Preview features
uv runtarget (#17423)Bug fixes
tool@latestversion (#17448)v0.9.24Compare Source
Released on 2026-01-09.
Bug fixes
UV_NO_SYNC=1 uv run ...(#17391)--no-cache(#17387)Documentation
v0.9.23Compare Source
Released on 2026-01-09.
Enhancements
RECORDfiles (#17339)UV_PYTHON_BIN_DIRandUV_TOOL_BIN_DIR(#17367)Preview features
Configuration
Bug fixes
armv8las an alias forarmv7lin platform tag parsing (#17384)Documentation
index.mdsuggestion tollms.txt(#17362)uv runuses inexact syncing by default (#17366)v0.9.22Compare Source
Released on 2026-01-06.
Enhancements
Bug fixes
Documentation
v0.9.21Compare Source
Released on 2025-12-30.
Bug fixes
Documentation
python install --defaultdocumentation (#9826)v0.9.20Compare Source
Released on 2025-12-29.
This is a re-release of 0.9.20, with internal crate versions incremented to enable publishing to crates.io.
v0.9.18Compare Source
Released on 2025-12-16.
Enhancements
uv publish(#17096)uv publish(#17130)python3.x-alpine3.23(#17100)Configuration
--torch-backendin[tool.uv](#17116)Performance
uv cache size(#17015)Bug fixes
@latestrequests (#17114)EntryTypefor file entries in tar (#17043)pyproject.tomlindex username in lockfile comparison (#16995)uv addwithUV_GIT_LFSset (#17127)exclude-newerinto optional string (#17121)Documentation
exclude-newer*(#17079)v0.9.17Compare Source
Released on 2025-12-09.
Enhancements
torch-tensorrtandtorchaoto the PyTorch list (#17053)--verboseinuv tool run(#17020)exclude-newer(a.k.a., dependency cooldowns) (#16814)Bug fixes
Documentation
source-excludereference docs (#16832)UV_NO_DEVin Docker installs (#17030)UV_VERSIONin docs for GitLab CI/CD (#17040)v0.9.16Compare Source
Released on 2025-12-06.
Python
Enhancements
debugsubcommand touv pipannouncing its intentional absence (#16966)uv add --script(#16954)uv self update(#16838)--no-binaryet al inuv pip compile(#16956)--targetand--prefixinuv pip list,uv pip freeze, anduv pip show(#16955)Preview features
uv workspace metadata(#16988)uv auth helper --protocol bazelcommand (#16886)Bug fixes
tool.uv.build-backend.module-namebut emit warnings (#16928)Documentation
--projectflag help text to indicate project discovery (#16965)COPYoverADDfor simple cases (#16883)v0.9.15Compare Source
Released on 2025-12-02.
Python
Enhancements
--torch-backend=auto(#16919)Configuration
UV_HIDE_BUILD_OUTPUTto omit build logs (#16885)Bug fixes
uv-trampoline-builderbuilds from crates.io by moving bundled executables (#16922)NO_COLORand always show the command as a header when paginguv helpoutput (#16908)0o666permissions for flock files instead of0o777(#16845)astral-tlto v0.7.10 (#16887)" to narrow down a regression causing hangs in metadata retrieval (#16938)Documentation
v0.9.14Compare Source
Released on 2025-12-01.
Performance
astral-tlto v0.7.10 to enable SIMD for HTML parsing (#16887)Bug fixes
.zshenvover creating a new one intool update-shell(#16866)-eflags inuv add(#16882)Enhancements
UV_WORKING_DIRoverUV_WORKING_DIRECTORYfor consistency (#16884)v0.9.13Compare Source
Released on 2025-11-26.
Bug fixes
--with-requirementsto load extensionless inline-metadata scripts" to fix reading of requirements files from streams (#16861)Requires-Pythonand required environments (#16824)Documentation
v0.9.12Compare Source
Released on 2025-11-24.
Enhancements
--with-requirementsto load extensionless inline-metadata scripts (#16744)uv publish(#16731)uv exportfrom overwritingpyproject.toml(#16745)Documentation
v0.9.11Compare Source
Released on 2025-11-20.
Python
See the
python-build-standalonerelease notes for details.Enhancements
uv export(#16523)crates.io(#16770)Preview features
uv workspace list --paths(#16776)uv workspace dir(#16775)Bug fixes
uv initauthor serialization viatoml_editinline tables (#16778)pyproject.toml(#16734)always-authenticatewhen running under Dependabot (#16773)Documentation
v0.9.10Compare Source
Released on 2025-11-17.
Enhancements
SSL_CERT_DIR(#16473)uv build(#16699)project.license-filesglob matches nothing (#16697)pip install --target(andsync) install Python if necessary (#16694)python_downloads_json_urlin pre-release Python version warnings (#16737)uv python --python-downloads-json-url(#16542)Preview features
--upgradeinuv python install(#16676)python install --defaultfor pre-release Python versions (#16706)uv workspace listto list workspace members (#16691)Bug fixes
Documentation
v0.9.9Compare Source
Released on 2025-11-12.
Deprecations
--projectinuv init(#16674)Enhancements
uv version --bump(#16555).rcdatato store metadata (#15068)--only-emit-workspaceand similar variants touv export(#16681)Preview features
uv workspace dircommand (#16678)uv workspace metadatacommand (#16516)Configuration
UV_NO_DEFAULT_GROUPSenvironment variable (#16645)Bug fixes
torch-model-archiverandtorch-tb-profilerfrom PyTorch backend (#16655)Documentation
CMDpath in FastAPI Dockerfile (#16701)v0.9.8Compare Source
Released on 2025-11-07.
Enhancements
uv export(#16603)uv sync(#16543)uv cache sizecommand (#16032)+gilto require a GIL-enabled interpreter (#16537)uv initerror for invalid directory names (#16554)uv build -h(#16632)Configuration
UV_NO_GROUPas an environment variable (#16529)UV_NO_SOURCESas an environment variable (#15883)Bug fixes
--checkand--lockedto be used together inuv lock(#16538)default-groupsin schema (#16575)nvidia-smi(#15460)Documentation
uv pip listname normalization in docs (#13210)Other changes
v0.9.7Compare Source
Released on 2025-10-30.
Enhancements
Bug fixes
uv auth tokenoutput (#16504)--checkflag (#16521)v0.9.6Compare Source
Released on 2025-10-29.
This release contains an upgrade to Astral's fork of
async_zip, which addresses potential sources of ZIP parsing differentials between uv and other Python packaging tooling. See GHSA-pqhf-p39g-3x64 for additional details.Security
Python
Enhancements
--cleartouv buildto remove old build artifacts (#16371)--no-create-gitignoretouv build(#16369)pip install --systemwhen externally managed (#16392)uv lock --checkwith outdated lockfile will print that--checkwas passed, instead of--locked(#16322)uv inittemplate for Maturin (#16449)Bug fixes
uv python upgrade(#16420)--find-linksdistributions (#16446)uv export --frozenwhen the lockfile is outdated (#16407)uv treewhen--packageis used with circular dependencies (#15908)pip freeze --quiet(#16491)uv auth login pyx.devretries to 60s (#16498)uv add --group ... -r ...(#16490)Documentation
v0.9.5Compare Source
Released on 2025-10-21.
This release contains an upgrade to
astral-tokio-tar, which addresses a vulnerability in tar extraction on malformed archives with mismatching size information between the ustar header and PAX extensions. While theastral-tokio-taradvisory has been graded as "high" due its potential broader impact, the specific impact to uv is low due to a lack of novel attacker capability. Specifically, uv only processes tar archives from source distributions, which already possess the capability for full arbitrary code execution by design, meaning that an attacker gains no additional capabilities throughastral-tokio-tar.Regardless, we take the hypothetical risk of parser differentials very seriously. Out of an abundance of caution, we have assigned this upgrade an advisory: GHSA-w476-p2h3-79g9
Security
astral-tokio-tarto 0.5.6 to address a parsing differential (#16387)Enhancements
uv pip installfailure if the--systemflag is used to select an externally managed interpreter (#16318)Bug fixes
Documentation
v0.9.4Compare Source
Released on 2025-10-17.
Enhancements
Bug fixes
uv auth tokenoutput (#16345)boto/boto3 (boto3)
v1.42.39Compare Source
=======
connect: [botocore] This release adds Estimated Wait Time support to the GetContactMetrics API for Amazon Connect.quicksight: [botocore] Improve SessionTag usage guidelines in the GenerateEmbedURLForAnonymousUser API documentation. Update the GetIdentityContext document with the region support context.v1.42.38Compare Source
=======
ec2: [botocore] G7e instances feature up to 8 NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs with 768 GB of memory and 5th generation Intel Xeon Scalable processors. Supporting up to 192 vCPUs, 1600 Gbps networking bandwidth with EFA, up to 2 TiB of system memory, and up to 15.2 TB of local NVMe SSD storage.gamelift: [botocore] Amazon GameLift Servers now supports automatic scaling to and from zero instances based on game session activity. Fleets scale down to zero following a defined period of no game session activity and scale up from zero when game sessions are requested, providing an option for cost optimization.v1.42.37Compare Source
=======
cognito-idp: [botocore] This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login.connect: [botocore] Adds support for filtering search results based on tags assigned to contacts.ec2: [botocore] SearchTransitGatewayRoutes API response now includes a NextToken field, enabling pagination when retrieving large sets of transit gateway routes. Pass the returned NextToken value in subsequent requests to retrieve the next page of results.lambda: [botocore] We are launching ESM Metrics and logging for Kafka ESM to allow customers to monitor Kafka event processing using CloudWatch Metrics and Logs.mediaconnect: [botocore] This release adds support for NDI flow sources in AWS Elemental MediaConnect. You can now send content to your MediaConnect transport streams directly from your NDI environment using the new NDI source type. Also adds support for LARGE 4X flow size, which can be used when creating CDI JPEG-XS flows.mediaconvert: [botocore] This release adds a follow source mode for audio output channel count, an AES audio frame wrapping option for MXF outputs, and an option to signal DolbyVision compatibility using the SUPPLEMENTAL-CODECS tag in HLS manifests.s3: [botocore] Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets.s3control: [botocore] Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets.v1.42.36Compare Source
=======
connect: [botocore] Added support for task attachments. The StartTaskContact API now accepts file attachments, enabling customers to include files (.csv, .doc, .docx, .heic, .jfif, .jpeg, .jpg, .mov, .mp4, .pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when creating Task contacts. Supports up to 5 attachments per task.deadline: [botocore] AWS Deadline Cloud now supports editing job names and descriptions after submission.ec2: [botocore] Releasing new EC2 instances. C8gb and M8gb with highest EBS performance, M8gn with 600 Gbps network bandwidth, X8aedz and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6 processors and up to 6TB memory, and Mac-m4max with Apple M4 Max chip for 25 percent faster builds.medialive: [botocore] AWS Elemental MediaLive released two new features that allows customers 1) to set Output Timecode for AV1 encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2 output groups when using Pipeline Locking or Disabled Locking modes.sagemaker: [botocore] Idle resource sharing enables teams to borrow unused compute resources in your SageMaker HyperPod cluster. This capability maximizes resource utilization by allowing teams to borrow idle compute capacity beyond their allocated compute quotas.v1.42.35Compare Source
=======
connectcases: [botocore] Amazon Connect now enables you to use tag-based access controls to define who can access specific cases. You can associate tags with case templates and configure security profiles to determine which users can access cases with those tags.ec2: [botocore] DescribeInstanceTypes API response now includes an additionalFlexibleNetworkInterfaces field, the number of interfaces attachable to an instance when using flexible Elastic Network Adapter (ENA) queues in addition to the base number specified by maximumNetworkInterfaces.evidently: [botocore] Deprecate all Evidently API for AWS CloudWatch Evidently deprecationgroundstation: [botocore] Adds support for AWS Ground Station Telemetry.v1.42.34Compare Source
=======
connect: [botocore] Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows.datazone: [botocore] Added api for deleting data export configuration for a domainqconnect: [botocore] Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes.v1.42.33Compare Source
=======
autoscaling: [botocore] This release adds support for Amazon EC2 Auto Scaling group deletion protectionbudgets: [botocore] Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options.dynamodb: [botocore] Adds additional waiters to Amazon DynamoDB.ec2: [botocore] Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types.endpoint-rules: [botocore] Update endpoint-rules client to latest versiongamelift: [botocore] Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system.guardduty: [botocore] Adding new enum value for ScanStatusReasonhealth: [botocore] Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties.meteringmarketplace: [botocore] Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration.verifiedpermissions: [botocore] Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation.v1.42.32Compare Source
=======
bedrock-agentcore: [botocore] Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memoryconfig: [botocore] AWS Config Conformance Packs now support tag-on-create through PutConformancePack API.ec2: [botocore] Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance.quicksight: [botocore] Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIsv1.42.31Compare Source
=======
autoscaling: [botocore] This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status.bedrock-runtime: [botocore] Added support for extended prompt caching with one hour TTL.keyspaces: [botocore] Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra)odb: [botocore] Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field.verifiedpermissions: [botocore] Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation.workspaces-instances: [botocore] Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches.v1.42.30Compare Source
=======
connect: [botocore] Adds support to allow customers to create form with Dispute configurationdatazone: [botocore] This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs.glacier: [botocore] Documentation updates for Amazon Glacier's maintenance modelaunch-wizard: [botocore] Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizardresource-explorer-2: [botocore] Added ViewName to View-related responses and ServiceViewName to GetServiceView response.sagemaker: [botocore] Adding security consideration comments for lcc accessing execution role under root accessv1.42.29Compare Source
=======
cleanrooms: [botocore] This release adds support for parameters in PySpark analysis templates.deadline: [botocore] AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API.ec2: [botocore] This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period.ecs: [botocore] Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints.evs: [botocore] A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter.lakeformation: [botocore] API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResourceopensearchserverless: [botocore] Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key.qconnect: [botocore] Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage APIbotocore] Add support for TCP Keep-Alive configuration via BOTOCORE_TCP_KEEPALIVE environment variablev1.42.28[Compare S
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.