chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
astral-sh/uv-pre-commit	repository	patch	0.9.26 → 0.9.28
biomejs/pre-commit	repository	patch	v2.3.11 → v2.3.13
check-jsonschema	dependency-groups	patch	0.36.0 → 0.36.1
pathspec		patch	==1.0.3 → ==1.0.4
pathspec	project.dependencies	patch	1.0.3 → 1.0.4
psutil	dependency-groups	patch	7.2.1 → 7.2.2
python-jsonschema/check-jsonschema	repository	patch	0.36.0 → 0.36.1
pytokens		patch	==0.4.0 → ==0.4.1
ruamel-yaml		minor	==0.18.17 → ==0.19.1
ruamel-yaml	dependency-groups	minor	0.18.17 → 0.19.1
ruamel-yaml	project.dependencies	minor	0.18.17 → 0.19.1
streetsidesoftware/cspell-cli	repository	minor	v9.4.0 → v9.6.0
tombi-toml/tombi-pre-commit	repository	patch	v0.7.23 → v0.7.25
		lockFileMaintenance	All locks refreshed
uv (source, changelog)	dependency-groups	patch	0.9.26 → 0.9.28

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

v0.9.28

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.28

v0.9.27

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.27

biomejs/pre-commit (biomejs/pre-commit)

v2.3.13

Compare Source

v2.3.12

Compare Source

python-jsonschema/check-jsonschema (check-jsonschema)

v0.36.1

Compare Source

• Update vendored schemas: buildkite, circle-ci, dependabot, github-issue-forms,
  github-workflows, gitlab-ci, mergify, readthedocs, renovate, snapcraft, taskfile
  (2026-01-25)

cpburnz/python-pathspec (pathspec)

v1.0.4

Compare Source

• Issue #​103_: Using re2 fails if pyre2 is also installed.

.. _Issue #​103: #​103

giampaolo/psutil (psutil)

v7.2.2

Compare Source

=====

2026-01-28

Enhancements

• 2705_: [Linux]: Process.wait()_ now uses pidfd_open() + poll() for
  waiting, resulting in no busy loop and faster response times. Requires
  Linux >= 5.3 and Python >= 3.9. Falls back to traditional polling if
  unavailable.
• 2705_: [macOS], [BSD]: Process.wait()_ now uses kqueue() for waiting,
  resulting in no busy loop and faster response times.

Bug fixes

• 2701_, [macOS]: fix compilation error on macOS < 10.7. (patch by Sergey
  Fedorov)
• 2707_, [macOS]: fix potential memory leaks in error paths of
  Process.memory_full_info() and Process.threads().
• 2708_, [macOS]: Process.cmdline()_ and Process.environ()_ may fail with ``OSError: [Errno 0] Undefined error`` (from ``sysctl(KERN_PROCARGS2)``). They now raise AccessDenied`_ instead.

tusharsadhwani/pytokens (pytokens)

v0.4.1

Compare Source

streetsidesoftware/cspell-cli (streetsidesoftware/cspell-cli)

v9.6.0

Compare Source

Features

• Update CSpell version (9.6.0) (#​749) (6edd566)

Trivial updates and changes.

• Update CSpell version (9.6.1) (#​758) (372d562)
• Update CSpell version (9.6.2) (#​760) (ae05818)

Miscellaneous Chores

• release 9.6.0 (1bcacd8)

tombi-toml/tombi-pre-commit (tombi-toml/tombi-pre-commit)

v0.7.25

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.7.25

v0.7.24

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.7.24

astral-sh/uv (uv)

v0.9.28

Compare Source

Released on 2026-01-29.

Python

• Update CPython to use OpenSSL 3.5.5 which includes fixes for high severity CVEs (python-build-standalone#960)

Enhancements

• Add support for Pyodide interpreter on Windows (#​17658)
• Warn if multiple indexes include default = true (#​17713)
• Skip uploads when validation reports 'Already uploaded' (#​17412)

Configuration

• Add a reflink alias for the "clone" link mode (#​17724)

Bug fixes

• Ensure uv.exe exits when uvw.exe or uvx.exe is killed (#​17500)

v0.9.27

Compare Source

Released on 2026-01-26.

Python

• Upgrade Pyodide to 0.29.2 (#​17652)
• Upgrade to GraalPy 25.0.2 (#​17634)

Enhancements

• Add -t shortform for --target to uv pip subcommands (#​17501)
• Add support for ROCm 7.0 and 7.1 accelerator backends (#​17681)
• Further improve free-threading ABI incompatibility errors (#​17491)
• Implement uv pip freeze --exclude flag (#​17045)
• Improve warnings for --system and --no-system in uv venv (#​17647)
• Make uv pip compile attempt to download a specified --python-version if it can. (#​17249)
• Support Trusted Publishing with pyx (#​17438)
• Fix JSON schema for exclude-newer-package (#​17665)

Preview features

• Better detection for conflicting packages (#​17623)
• Upgrade based on outdated build versions in uv python upgrade (#​17653)

Bug fixes

• Change chocolatey system test to ensure uv uses the right python (#​17533)
• Fix infinite loop when SSL_CERT_FILE is a directory (#​17503)

Documentation

• Add cargo-xwin to the CONTRIBUTING guide (#​17507)
• Fix typo in the documentation of UV_PUBLISH_INDEX (#​17672)
• Move MSRV to platform support section (#​17534)
• Update the testing instructions in the CONTRIBUTING guide (#​17528)
• Use --locked to install cargo-xwin in guide (#​17530)
• Warn about PyPy being unmaintained (#​17643)
• docs: Correct gitlab-ci.yml to .gitlab-ci.yml (#​17682)

Other changes

• Update MSRV to 1.91 (#​17677)

---

Configuration

📅 Schedule: Branch creation - "before 4am on monday" in timezone UTC, Automerge - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone UTC.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.