Repository navigation

Update CI dependencies - #636

Merged

renovate[bot] merged 1 commit into

renovate/ci-dependencies

Oct 1, 2026

Merged

Update CI dependencies#636
renovate[bot] merged 1 commit into
masterfrom
renovate/ci-dependencies

renovate Bot commented Oct 1, 2026 •

edited

Loading

Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
astral-sh/ruff-pre-commit	repository	patch	`v0.16.4` → `v0.16.8`	`v0.16.10` (+1)
helm	uses-with	minor	`4.2.4` → `4.3.0`
poetry (changelog)		minor	`2.4.1` → `2.5.1`
poetry (changelog)		minor	`==2.4.1` → `==2.5.1`
prettier (source)		patch	`3.9.6` → `3.9.9`
prettier-plugin-sh (source)		minor	`0.19.0` → `0.20.0`	`0.20.2` (+1)
pylint (changelog)		patch	`4.0.7` → `4.0.9`	`4.1.1` (+1)
pylint (changelog)	dev	patch	`4.0.7` → `4.0.9`	`4.1.1` (+1)
python-jsonschema/check-jsonschema	repository	patch	`0.38.0` → `0.38.2`
renovatebot/pre-commit-hooks	repository	minor	`44.46.4` → `44.112.3`	`44.129.0` (+41)
ruff (source, changelog)		patch	`0.16.4` → `0.16.8`	`0.16.10` (+1)
ruff (source, changelog)	dev	patch	`0.16.4` → `0.16.8`	`0.16.10` (+1)

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

`v0.16.8`

See: https://github.com/astral-sh/ruff/releases/tag/0.16.8

`v0.16.7`

`v0.16.6`

`v0.16.5`

See: https://github.com/astral-sh/ruff/releases/tag/0.16.5

helm/helm (helm)

`v4.3.0`

python-poetry/poetry (poetry)

`v2.5.1`

Fixed

Fix an issue where uninstalling a package with installer.builtin-uninstall set failed with a TypeError (#11077).

`v2.5.0`

Added

Add an installer.builtin-uninstall setting to uninstall packages with a built-in uninstaller instead of invoking pip uninstall (#10931).
Add official support for Python 3.15 (#11046).

Changed

Do not send credentials configured for an https repository via http (#11073).
Fail with an error when the current Python version is not compatible with the project and virtualenvs.create is false (#10941).
Validate version constraints that are entered interactively in poetry init (#10909).
Include the path of the pyproject.toml file in the message about already present packages in poetry add (#10908).
Improve performance of processing package links and repository pages (#10895,
#10896,
#10903,
#10949,
#10951,
#10953).
Improve performance of dependency resolution (#10907,
#10954).
Improve performance of choosing and installing wheels (#10905,
#10958).
Improve performance by avoiding redundant keyring lookups for repositories without credentials (#10959).
Improve performance by reducing the number of subprocesses to discover virtual environment data (#11042).
Improve performance of poetry search for single-token queries (#10906).
Improve startup time by deferring the import of requests (#11004).
Improve performance of schema validation by caching compiled JSON schema validators (#11033).

Fixed

Fix an issue where credentials of the wrong repository were used under certain circumstances when multiple repositories were configured on the same host (#11072).
Fix an issue where credentials of a repository on another host were used for git dependencies if the path of the URL was the same (#11074).
Fix an issue where dependency resolution failed for conflicting requirements of different packages even though the requirements had mutually exclusive markers (#10944).
Fix an issue where dependency resolution failed when the same package was required with different extras in several optional dependencies or dependency groups (#10943).
Fix an issue where dependency resolution failed with a KeyError (#11008).
Fix an issue where the dependencies of an extra were missing in the lock file after adding the extra to a locked dependency, e.g. a git dependency, in the pyproject.toml file (#10987).
Fix an issue where a path or git dependency was not reinstalled when its develop setting changed (#11022).
Fix an issue where scripts of type file were not installed when installing the project (#10736).
Fix an issue where GUI scripts were not installed when installing the project (#10973).
Fix an issue where a relative path was written to direct_url.json for path dependencies (#10917).
Fix an issue where poetry show <package> showed a version that was not relevant for the current environment if there were multiple versions of the package in the lock file (#11003).
Fix an issue where poetry show --outdated did not find newer versions of packages from sources with explicit priority (#10982).
Fix an issue where poetry env activate ignored the environment that was determined by the application, e.g. when using --directory (#10916).
Fix an issue where poetry init proposed an invalid package name if the directory name was not a valid package name (#10975).

Docs

Document the --license option of poetry init and poetry new (#11064).
Clarify which dependencies are locked when running poetry update with dependency groups (#11024).
Clarify the portability of path dependencies (#11020).
Clarify the usage of poetry run with console scripts (#10984).
Clarify what --no-cache disables (#10915).
Document how to use package sources for poetry self update (#10923).
Fix the stale minimum Python version (#11050).
Update outdated links (#10913,
#10938,
#11000,
#11043).

poetry-core (`2.5.0`)

Add Python 3.15 to the automatically generated classifiers (#961).
Fix an issue where a <V version constraint wrongly allowed pre-releases of V in some cases (#939).
Fix an issue where version ranges with coincident bounds were not recognized as empty (#939).
Fix an issue where the string representation of a version union did not describe the same constraint after being parsed again (#939).
Fix an issue where the intersection of a version range with a local version resulted in a wrong constraint (#949).
Fix an issue where the union of a version range and a public version did not include all local versions of the public version (#950).
Fix an issue where the union of a public version and one of its local versions did not result in the public version (#966).
Fix an issue where the difference between a public version and one of its local versions still allowed the local version, which could result in an infinite loop during dependency resolution (#953).
Fix an issue where a version range that excluded some local versions of a public version was wrongly considered to allow all versions of the public version (#959).
Fix an issue where a != <value> constraint was wrongly considered to allow all values of a <value> not in constraint (#955).
Fix an issue where merging platform_release markers with incompatible constraint types failed (#956).
Fix an issue where the string representation of a version range whose upper bound only consists of zeros raised an IndexError (#964).
Fix an issue where formatting a Python constraint that only allows unknown Python versions raised an IndexError (#971).
Fix an issue where marker values containing spaces could not be parsed (#972).
Fix an issue where the upper bound of a ~= constraint was wrong for versions with more than three release segments (#973).
Fix an issue where the filename of a link created from a Windows path was wrong and reject filenames containing path separators (#974).

`v2.4.3`

Fixed

Fix an issue where Poetry could not extract sdists on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 (#11037).

`v2.4.2`

Fixed

Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact (#11030).
Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source (#11029).
Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory (#11027).

prettier/prettier (prettier)

`v3.9.9`

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by @fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.

<!-- Prettier 3.9.8 -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR`from`c.sh`, before anything else runs here.

<!-- Prettier 3.9.9 -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.

`v3.9.8`

`v3.9.7`

Support Angular 22.2
Fix regressions in v3.9

un-ts/prettier (prettier-plugin-sh)

`v0.20.0`

Minor Changes

#520 02f37a2 Thanks @celluj34! - Add a simplify option to remove redundant shell syntax.

New Contributors

@celluj34 made their first contribution in #520

Full Changelog: https://github.com/un-ts/prettier/compare/prettier-plugin-sh@0.19.0...prettier-plugin-sh@0.20.0

pylint-dev/pylint (pylint)

`v4.0.9`

What's new in Pylint 4.0.9?

Release date: 2026-09-23

Security Fixes

Someone without access to the configuration or linted code, but with access
to the cache directory (predictable PYLINT_HOME on a multi-user host) can no
longer write a crafted pickle that will runs arbitrary code when pylint access its
stat cache. The result cache is now stored as JSON instead of pickle,
preventing code-execution. The workaround is upgrading or not pointing PYLINT_HOME
to an untrusted, shared, or group-writable directory. The default value, ~/.cache/pylint,
is writable only by the user running pylint. (CVE with the same information pending)

False Positives Fixed

Fixed a false positive for no-self-use on a method that only uses
self before a locally defined class (or other nested method), because
the checker's could-be-a-function tracking state was not restored after
visiting the nested method.

Closes #3705
Fix a false positive for :ref:not-callable when calling functions constructed with
types.FunctionType or types.LambdaType.

Closes #7500
Fix a false positive for unnecessary-direct-lambda-call when a directly called
lambda in a class body wraps a comprehension containing an assignment expression.
PEP 572 makes that a SyntaxError without the lambda's scope, so following the
message produced code that would not compile.

Closes #9294
Fix a false positive for :ref:unnecessary-ellipsis when an ellipsis is the
sole body statement of a method defined on a Protocol.

Closes #9319
Fix a false positive for :ref:bad-exception-cause when the bases of the class
being raised from cannot be inferred, such as an exception deriving from a
C extension class. :ref:raising-non-exception and
:ref:catching-non-exception already guard the same inherit_from_std_ex
helper with has_known_bases.

Refs #11399

False Negatives Fixed

method-hidden is no longer silenced when the hidden method shares its name with
a builtin function or with a function defined at module level. Only members of the
ancestor classes themselves can excuse the method now.

Refs #11361

Other Bug Fixes

Fix a block-scoped # pylint: disable= directive placed inside an if
body leaking into sibling elif/else blocks for messages such as
stop-iteration-return, which default to a line-based (rather than
node-based) message scope.

Closes #3136
Fix a false positive for declare-non-slot when a class variable is
annotated with ClassVar without an initial value.

Closes #9950
Fix a crash in the no-member checker when attribute lookup raises an
InferenceError.

Closes #11356
Fix a crash in the unnecessary-default-type-args check when a Generator
or AsyncGenerator subscript holds an empty tuple, such as Generator[()].

Closes #11357
Fix a crash in method-hidden when a method shadows a name that builtins
binds to a node without a statement, such as help or license. Every class
inherits from object, which lives in the builtins module, so no base class
was needed to trigger it.

Closes #11361
Closes #8079

`v4.0.8`

What's new in Pylint 4.0.8?

Release date: 2026-08-29

False Positives Fixed

Fix a false positive for :ref:unspecified-encoding when an open call uses a mode
argument that cannot be inferred.

Closes #10201
Fix a false positive for invalid-name (C0103) on names assigned in an
if __name__ == "__main__": block. Such a block reads like a script body, so
a name there is now accepted if it matches either the constant or the variable
naming style.

Closes #10766
Fix false positives for :ref:invalid-str-returned, :ref:invalid-repr-returned,
:ref:invalid-format-returned, :ref:invalid-bytes-returned, :ref:invalid-hash-returned,
:ref:invalid-index-returned, :ref:invalid-length-returned,
:ref:invalid-length-hint-returned, :ref:invalid-getnewargs-returned and
:ref:invalid-getnewargs-ex-returned when the returned value is an instance of a
subclass of the expected builtin type, such as self in a str subclass or a
namedtuple.

Closes #11306
Fix false positives for :ref:bad-string-format-type when the argument is an
instance of a subclass of int, float or str, such as bool or an
IntEnum member formatted with %d.

Closes #11315

False Negatives Fixed

redundant-unittest-assert now also flags assertEqual and assertNotEqual
when both compared values are constants, e.g. self.assertEqual(5, 5).

Closes #11321

Other Bug Fixes

Fix a crash in the docparams extension when a raised name does not infer to an exception, such as raise sum or raise some_module. Such objects have no ancestors(), which aborted the whole file with an astroid-error fatal message.

Closes #11228
Fix a crash in the use-yield-from checker (AttributeError: 'Subscript' object has no attribute 'name') when a loop target is a subscript, attribute, or tuple.

Closes #11286
Fix a crash in the docparams extension (AttributeError: 'AssignName' object has no attribute 'decorators') when a class has non-function attributes sharing the name of a property setter.

Closes #11287

Other Changes

Upgrade the isort upper bound so isort 9 can be installed alongside pylint.

Closes #11351

python-jsonschema/check-jsonschema (python-jsonschema/check-jsonschema)

`v0.38.2`

Update the version of click declared as a dependency

`v0.38.1`

Update vendored schemas: bitbucket-pipelines, buildkite, changie, circle-ci,
compose-spec, dependabot, github-actions, github-workflows, gitlab-ci, mergify,
renovate, taskfile, travis, woodpecker-ci (2026-09-20)
check-jsonschema now has a logo. Thanks to
Mylah Birdie <https://www.instagram.com/mylahbirdie>__!

renovatebot/pre-commit-hooks (renovatebot/pre-commit-hooks)

`v44.112.3`

See https://github.com/renovatebot/renovate/releases/tag/44.112.3 for more changes

`v44.111.4`

See https://github.com/renovatebot/renovate/releases/tag/44.111.4 for more changes

`v44.111.3`

See https://github.com/renovatebot/renovate/releases/tag/44.111.3 for more changes

`v44.111.2`

See https://github.com/renovatebot/renovate/releases/tag/44.111.2 for more changes

`v44.110.0`

See https://github.com/renovatebot/renovate/releases/tag/44.110.0 for more changes

`v44.109.1`

See https://github.com/renovatebot/renovate/releases/tag/44.109.1 for more changes

`v44.109.0`

See https://github.com/renovatebot/renovate/releases/tag/44.109.0 for more changes

`v44.108.2`

See https://github.com/renovatebot/renovate/releases/tag/44.108.2 for more changes

`v44.108.1`

See https://github.com/renovatebot/renovate/releases/tag/44.108.1 for more changes

`v44.108.0`

See https://github.com/renovatebot/renovate/releases/tag/44.108.0 for more changes

`v44.107.2`

See https://github.com/renovatebot/renovate/releases/tag/44.107.2 for more changes

`v44.107.0`

See https://github.com/renovatebot/renovate/releases/tag/44.107.0 for more changes

`v44.106.0`

See https://github.com/renovatebot/renovate/releases/tag/44.106.0 for more changes

`v44.105.4`

See https://github.com/renovatebot/renovate/releases/tag/44.105.4 for more changes

`v44.105.2`

See https://github.com/renovatebot/renovate/releases/tag/44.105.2 for more changes

`v44.105.1`

See https://github.com/renovatebot/renovate/releases/tag/44.105.1 for more changes

`v44.105.0`

See https://github.com/renovatebot/renovate/releases/tag/44.105.0 for more changes

`v44.104.2`

See https://github.com/renovatebot/renovate/releases/tag/44.104.2 for more changes

`v44.104.1`

See https://github.com/renovatebot/renovate/releases/tag/44.104.1 for more changes

`v44.104.0`

See https://github.com/renovatebot/renovate/releases/tag/44.104.0 for more changes

`v44.103.7`

See https://github.com/renovatebot/renovate/releases/tag/44.103.7 for more changes

`v44.103.6`

See https://github.com/renovatebot/renovate/releases/tag/44.103.6 for more changes

`v44.103.5`

See https://github.com/renovatebot/renovate/releases/tag/44.103.5 for more changes

`v44.103.4`

See https://github.com/renovatebot/renovate/releases/tag/44.103.4 for more changes

`v44.103.3`

See https://github.com/renovatebot/renovate/releases/tag/44.103.3 for more changes

`v44.103.2`

See https://github.com/renovatebot/renovate/releases/tag/44.103.2 for more changes

`v44.103.1`

See https://github.com/renovatebot/renovate/releases/tag/44.103.1 for more changes

`v44.103.0`

See https://github.com/renovatebot/renovate/releases/tag/44.103.0 for more changes

`v44.101.3`

See https://github.com/renovatebot/renovate/releases/tag/44.101.3 for more changes

`v44.101.2`

See https://github.com/renovatebot/renovate/releases/tag/44.101.2 for more changes

`v44.101.0`

See https://github.com/renovatebot/renovate/releases/tag/44.101.0 for more changes

`v44.100.0`

See https://github.com/renovatebot/renovate/releases/tag/44.100.0 for more changes

`v44.97.6`

See https://github.com/renovatebot/renovate/releases/tag/44.97.6 for more changes

`v44.97.5`

See https://github.com/renovatebot/renovate/releases/tag/44.97.5 for more changes

`v44.97.4`

See https://github.com/renovatebot/renovate/releases/tag/44.97.4 for more changes

`v44.97.2`

See https://github.com/renovatebot/renovate/releases/tag/44.97.2 for more changes

`v44.97.1`

See https://github.com/renovatebot/renovate/releases/tag/44.97.1 for more changes

`v44.96.2`

See https://github.com/renovatebot/renovate/releases/tag/44.96.2 for more changes

`v44.96.1`

See https://github.com/renovatebot/renovate/releases/tag/44.96.1 for more changes

`v44.95.0`

See https://github.com/renovatebot/renovate/releases/tag/44.95.0 for more changes

`v44.94.4`

See https://github.com/renovatebot/renovate/releases/tag/44.94.4 for more changes

`v44.94.3`

See https://github.com/renovatebot/renovate/releases/tag/44.94.3 for more changes

`v44.94.2`

See https://github.com/renovatebot/renovate/releases/tag/44.94.2 for more changes

`v44.94.1`

See https://github.com/renovatebot/renovate/releases/tag/44.94.1 for more changes

`v44.94.0`

See https://github.com/renovatebot/renovate/releases/tag/44.94.0 for more changes

`v44.93.8`

See https://github.com/renovatebot/renovate/releases/tag/44.93.8 for more changes

`v44.93.7`

See https://github.com/renovatebot/renovate/releases/tag/44.93.7 for more changes

`v44.93.6`

See https://github.com/renovatebot/renovate/releases/tag/44.93.6 for more changes

`v44.93.5`

See https://github.com/renovatebot/renovate/releases/tag/44.93.5 for more changes

`v44.93.4`

See https://github.com/renovatebot/renovate/releases/tag/44.93.4 for more changes

`v44.93.3`

See https://github.com/renovatebot/renovate/releases/tag/44.93.3 for more changes

`v44.93.2`

See https://github.com/renovatebot/renovate/releases/tag/44.93.2 for more changes

`v44.93.1`

See https://github.com/renovatebot/renovate/releases/tag/44.93.1 for more changes

`v44.93.0`

See https://github.com/renovatebot/renovate/releases/tag/44.93.0 for more changes

`v44.91.0`

See https://github.com/renovatebot/renovate/releases/tag/44.91.0 for more changes

`v44.90.3`

`v44.90.2`

`v44.90.1`

`v44.90.0`

`v44.89.1`

`v44.89.0`

`v44.88.0`

`v44.87.1`

`v44.86.0`

`v44.85.0`

`v44.84.0`

`v44.83.3`

`v44.83.2`

`v44.83.1`

`v44.83.0`

See https://github.com/renovatebot/renovate/releases/tag/44.83.0 for more changes

`v44.82.5`

`v44.82.4`

`v44.82.3`

`v44.82.2`

`v44.82.1`

See https://github.com/renovatebot/renovate/releases/tag/44.82.1 for more changes

`v44.82.0`

`v44.81.0`

`v44.80.0`

`v44.79.6`

`v44.79.5`

`v44.79.4`

`v44.79.2`

`v44.79.1`

`v44.79.0`

See https://github.com/renovatebot/renovate/releases/tag/44.79.0 for more changes

`v44.78.0`

See https://github.com/renovatebot/renovate/releases/tag/44.78.0 for more changes

`v44.77.0`

See https://github.com/renovatebot/renovate/releases/tag/44.77.0 for more changes

`v44.76.0`

See https://github.com/renovatebot/renovate/releases/tag/44.76.0 for more changes

`v44.75.2`

See https://github.com/renovatebot/renovate/releases/tag/44.75.2 for more changes

`v44.75.1`

See https://github.com/renovatebot/renovate/releases/tag/44.75.1 for more changes

`v44.75.0`

See https://github.com/renovatebot/renovate/releases/tag/44.75.0 for more changes

`v44.74.1`

See https://github.com/renovatebot/renovate/releases/tag/44.74.1 for more changes

`v44.74.0`

See https://github.com/renovatebot/renovate/releases/tag/44.74.0 for more changes

`v44.73.0`

See https://github.com/renovatebot/renovate/releases/tag/44.73.0 for more changes

`v44.72.0`

See https://github.com/renovatebot/renovate/releases/tag/44.72.0 for more changes

`v44.71.3`

See https://github.com/renovatebot/renovate/releases/tag/44.71.3 for more changes

`v44.71.2`

See https://github.com/renovatebot/renovate/releases/tag/44.71.2 for more changes

`v44.71.1`

See https://github.com/renovatebot/renovate/releases/tag/44.71.1 for more changes

`v44.71.0`

See https://github.com/renovatebot/renovate/releases/tag/44.71.0 for more changes

`v44.70.2`

See https://github.com/renovatebot/renovate/releases/tag/44.70.2 for more changes

`v44.70.1`

See https://github.com/renovatebot/renovate/releases/tag/44.70.1 for more changes

`v44.70.0`

See https://github.com/renovatebot/renovate/releases/tag/44.70.0 for more changes

`v44.69.14`

See https://github.com/renovatebot/renovate/releases/tag/44.69.14 for more changes

`v44.69.13`

See https://github.com/renovatebot/renovate/releases/tag/44.69.13 for more changes

`v44.69.12`

See https://github.com/renovatebot/renovate/releases/tag/44.69.12 for more changes

`v44.69.11`

[Compare Source](https://redire

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Zurich)

Branch creation
- "after 5pm on the first day of the month,on the first day of the month"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the dependencies label

renovate Bot enabled auto-merge (squash)

October 1, 2026 13:38

github-actions Bot approved these changes

View reviewed changes


          Update CI dependencies

99bc7f1

renovate Bot force-pushed the renovate/ci-dependencies branch from 654ba58 to 99bc7f1 Compare

October 1, 2026 19:13

renovate Bot merged commit 8aed3ea into master

14 checks passed

renovate Bot deleted the renovate/ci-dependencies branch

October 1, 2026 19:20

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels