Skip to content

Update all non-major dependencies#243

Merged
febus982 merged 1 commit intomainfrom
renovate/all-minor-patch
Feb 5, 2025
Merged

Update all non-major dependencies#243
febus982 merged 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 29, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
ghcr.io/astral-sh/uv final patch 0.5.24 -> 0.5.28
oryd/oathkeeper (source) patch v0.40.8 -> v0.40.9
sigstore/cosign-installer action minor v3.7.0 -> v3.8.0

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.5.28

Compare Source

Bug fixes
  • Allow discovering virtual environments from the first interpreter found on the PATH (#​11218)
  • Clear ephemeral overlays when running tools (#​11141)
  • Disable SSL in Git commands for --allow-insecure-host (#​11210)
  • Fix hardlinks in tar unpacking (#​11221)
  • Set base executable when returning virtual environment (#​11209)
  • Use base Python for cached environments (#​11208)
Documentation
  • Add documentation on verifying Docker image attestations (#​11140)
  • Add last updated to documentation (#​11164)

v0.5.27

Compare Source

Enhancements
  • Avoid setting permissions during tar extraction (#​11191)
  • Remove warnings for missing lower bounds (#​11195)
  • Update PubGrub to set-based outdated priority tracking (#​11169)
  • Improve error messages for uv pip install with --extra or --all-extras and invalid sources (#​11193)
  • Sign Docker images using GitHub attestations (#​8685)
Preview features
  • Don't expand self-referential extras in the build backend (#​11142)
Performance
  • Filter discovered Python executables by source before querying (#​11143)
  • Optimize exclusion computation for markers (#​11158)
  • Use Astral-maintained tokio-tar fork (#​11174)
  • Remove unneeded .clone() (#​11127)
Bug fixes
  • Fix relative paths in bytecode compilation (#​11177)
  • Percent-decode URLs in canonical comparisons (#​11088)
  • Respect concurrency limits in parallel index fetch (#​11182)
  • Use wire JSON schema for conflict items (#​11196)
  • Use explicit _GLibCVersion tuple in uv-python crate (#​11122)
Documentation
  • Add Git SHA locking behavior to docs (#​11125)
  • Add best-practice flags to pip install example in troubleshooting guide (#​11194)
  • Set VIRTUAL_ENV in Jupyter kernels (#​11155)
  • Add instructions for deactivating an environment (#​11200)

v0.5.26

Compare Source

Enhancements
  • Add support for uvx python (#​11076)
  • Allow --no-dev --invert in uv tree (#​11068)
  • Update uv python install --reinstall to reinstall all previous versions (#​11072)
  • Consistently write log messages with capitalized first word (#​11111)
  • Suggest --build-backend when --backend is passed to uv init (#​10958)
  • Improve retry trace message (#​11108)
Performance
  • Remove unnecessary UTF-8 conversion in hash parsing (#​11110)
Bug fixes
  • Ignore non-hash fragments in HTML API responses (#​11107)
  • Avoid resolving symbolic links when querying Python interpreters (#​11083)
  • Avoid sharing state between universal and non-universal resolves (#​11051)
  • Error when --script is passing a non-PEP 723 script (#​11118)
  • Make metadata deserialization failures non-fatal in the cache (#​11105)
  • Mark metadata as dynamic when reading from built wheel cache (#​11046)
  • Propagate credentials for <index>/simple to <index>/... endpoints (#​11074)
  • Fix conflicting extra bug during uv sync (#​11075)
Documentation
  • Add PyTorch XPU instructions to the PyTorch guide (#​11109)
  • Add docs for signal handling (#​11041)
  • Explain build frontend vs. build backend (#​11094)
  • Fix formatting of RUST_LOG documentation (#​10053)
  • Fix typo in --no-deps description (#​11073)
  • Reflow CLI documentation comments (#​11040)
  • Shorten "Using existing Python versions" nav item so it fits on one line (#​11077)
  • Some minor touch-ups to the Python install guide (#​11116)
  • Update Dependabot tracking issue link (#​11054)
  • Update documentation for running in a container (#​11052)
  • Upgrade PyTorch version in documentation (#​11114)
  • Use sys_platform in lieu of platform_system in PyTorch docs (#​11113)
  • Use positive (rather than negative) markers in PyTorch examples (#​11112)
  • Fix unnecessary backslashes in brackets (#​11059)
  • Suggest setting copy link mode in GitLab integration guide (#​11067)

v0.5.25

Compare Source

Enhancements
  • Allow installation of manylinux wheels on loongarch64 (#​10927)
  • Allow optional = for editables in requirements.txt (#​10954)
  • Add Windows aarch64 to the release binaries (#​10885)
Bug fixes
  • Use spec-compliant (128+n) exit codes for uv run and uv tool run on Unix (#​10781)
  • Fix best-interpreter lookups when there is an invalid interpreter in the PATH (#​11030)
  • Guard against concurrent cache writes on Windows (#​11007)
  • Prioritize package preferences with greater package versions (#​10963)
  • Reject --editable flag on non-directory requirements (#​10994)
  • Respect --no-sources for uv pip install workspace discovery (#​11003)
  • Set JEMALLOC_SYS_WITH_LG_PAGE=16 in ARM Docker builds (#​10943)
  • Update riscv64 Python downloads to allow install on riscv64gc (#​10937)
  • Fix file persist retries on Windows (#​11008)
  • Fix incorrect error message when specifying tool.uv.sources.(package).workspace with other options (#​11013)
  • Improve SIGINT handling in uv run (#​11009)
Documentation
  • Add SECURITY policy (#​11035)
  • Add Requires-Python upper bound behavior to the docs (#​10964)
  • Add a troubleshooting section and reproducible example guide (#​10947)
  • Add documentation for uv add -r (#​10926)
  • Amend requires-python rules in resolver documentation (#​10993)
  • Reference workspaces in --no-sources documentation (#​10995)
  • Update documentation for activating virtual environments in different shell (#​11000)
  • Add Docker SHA pinning tip (#​10955)
ory/oathkeeper (oryd/oathkeeper)

v0.40.9

Compare Source

This is a maintanance release with small fixes and dependency updates.

Bug Fixes
Code Generation
  • Pin v0.40.9 release commit (05493f3)

Changelog

Artifacts can be verified with cosign using this public key.

sigstore/cosign-installer (sigstore/cosign-installer)

v3.8.0

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from febus982 as a code owner January 29, 2025 00:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 642e755 to 20dac33 Compare January 30, 2025 12:30
@renovate renovate bot changed the title Update ghcr.io/astral-sh/uv Docker tag to v0.5.25 Update all non-major dependencies Jan 30, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from d4c34e0 to 5a42ff8 Compare February 5, 2025 02:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5a42ff8 to bb64702 Compare February 5, 2025 21:27
@qlty-cloud-legacy
Copy link

qlty-cloud-legacy bot commented Feb 5, 2025

Code Climate has analyzed commit bb64702 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (100% is the threshold).

This pull request will bring the total coverage in the repository to 100.0%.

View more on Code Climate.

@febus982 febus982 merged commit 23bc09b into main Feb 5, 2025
12 checks passed
@febus982 febus982 deleted the renovate/all-minor-patch branch February 5, 2025 21:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@febus982 febus982 Awaiting requested review from febus982 febus982 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@febus982