Skip to content

Update all non-major dependencies #243

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Feb 5, 2025
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 29, 2025

This PR contains the following updates:

Package Type Update Change
ghcr.io/astral-sh/uv final patch 0.5.24 -> 0.5.28
oryd/oathkeeper (source) patch v0.40.8 -> v0.40.9
sigstore/cosign-installer action minor v3.7.0 -> v3.8.0

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.5.28

Compare Source

Bug fixes
  • Allow discovering virtual environments from the first interpreter found on the PATH (#​11218)
  • Clear ephemeral overlays when running tools (#​11141)
  • Disable SSL in Git commands for --allow-insecure-host (#​11210)
  • Fix hardlinks in tar unpacking (#​11221)
  • Set base executable when returning virtual environment (#​11209)
  • Use base Python for cached environments (#​11208)
Documentation
  • Add documentation on verifying Docker image attestations (#​11140)
  • Add last updated to documentation (#​11164)

v0.5.27

Compare Source

Enhancements
  • Avoid setting permissions during tar extraction (#​11191)
  • Remove warnings for missing lower bounds (#​11195)
  • Update PubGrub to set-based outdated priority tracking (#​11169)
  • Improve error messages for uv pip install with --extra or --all-extras and invalid sources (#​11193)
  • Sign Docker images using GitHub attestations (#​8685)
Preview features
  • Don't expand self-referential extras in the build backend (#​11142)
Performance
  • Filter discovered Python executables by source before querying (#​11143)
  • Optimize exclusion computation for markers (#​11158)
  • Use Astral-maintained tokio-tar fork (#​11174)
  • Remove unneeded .clone() (#​11127)
Bug fixes
  • Fix relative paths in bytecode compilation (#​11177)
  • Percent-decode URLs in canonical comparisons (#​11088)
  • Respect concurrency limits in parallel index fetch (#​11182)
  • Use wire JSON schema for conflict items (#​11196)
  • Use explicit _GLibCVersion tuple in uv-python crate (#​11122)
Documentation
  • Add Git SHA locking behavior to docs (#​11125)
  • Add best-practice flags to pip install example in troubleshooting guide (#​11194)
  • Set VIRTUAL_ENV in Jupyter kernels (#​11155)
  • Add instructions for deactivating an environment (#​11200)

v0.5.26

Compare Source

Enhancements
  • Add support for uvx python (#​11076)
  • Allow --no-dev --invert in uv tree (#​11068)
  • Update uv python install --reinstall to reinstall all previous versions (#​11072)
  • Consistently write log messages with capitalized first word (#​11111)
  • Suggest --build-backend when --backend is passed to uv init (#​10958)
  • Improve retry trace message (#​11108)
Performance
  • Remove unnecessary UTF-8 conversion in hash parsing (#​11110)
Bug fixes
  • Ignore non-hash fragments in HTML API responses (#​11107)
  • Avoid resolving symbolic links when querying Python interpreters (#​11083)
  • Avoid sharing state between universal and non-universal resolves (#​11051)
  • Error when --script is passing a non-PEP 723 script (#​11118)
  • Make metadata deserialization failures non-fatal in the cache (#​11105)
  • Mark metadata as dynamic when reading from built wheel cache (#​11046)
  • Propagate credentials for <index>/simple to <index>/... endpoints (#​11074)
  • Fix conflicting extra bug during uv sync (#​11075)
Documentation
  • Add PyTorch XPU instructions to the PyTorch guide (#​11109)
  • Add docs for signal handling (#​11041)
  • Explain build frontend vs. build backend (#​11094)
  • Fix formatting of RUST_LOG documentation (#​10053)
  • Fix typo in --no-deps description (#​11073)
  • Reflow CLI documentation comments (#​11040)
  • Shorten "Using existing Python versions" nav item so it fits on one line (#​11077)
  • Some minor touch-ups to the Python install guide (#​11116)
  • Update Dependabot tracking issue link (#​11054)
  • Update documentation for running in a container (#​11052)
  • Upgrade PyTorch version in documentation (#​11114)
  • Use sys_platform in lieu of platform_system in PyTorch docs (#​11113)
  • Use positive (rather than negative) markers in PyTorch examples (#​11112)
  • Fix unnecessary backslashes in brackets (#​11059)
  • Suggest setting copy link mode in GitLab integration guide (#​11067)

v0.5.25

Compare Source

Enhancements
  • Allow installation of manylinux wheels on loongarch64 (#​10927)
  • Allow optional = for editables in requirements.txt (#​10954)
  • Add Windows aarch64 to the release binaries (#​10885)
Bug fixes
  • Use spec-compliant (128+n) exit codes for uv run and uv tool run on Unix (#​10781)
  • Fix best-interpreter lookups when there is an invalid interpreter in the PATH (#​11030)
  • Guard against concurrent cache writes on Windows (#​11007)
  • Prioritize package preferences with greater package versions (#​10963)
  • Reject --editable flag on non-directory requirements (#​10994)
  • Respect --no-sources for uv pip install workspace discovery (#​11003)
  • Set JEMALLOC_SYS_WITH_LG_PAGE=16 in ARM Docker builds (#​10943)
  • Update riscv64 Python downloads to allow install on riscv64gc (#​10937)
  • Fix file persist retries on Windows (#​11008)
  • Fix incorrect error message when specifying tool.uv.sources.(package).workspace with other options (#​11013)
  • Improve SIGINT handling in uv run (#​11009)
Documentation
  • Add SECURITY policy (#​11035)
  • Add Requires-Python upper bound behavior to the docs (#​10964)
  • Add a troubleshooting section and reproducible example guide (#​10947)
  • Add documentation for uv add -r (#​10926)
  • Amend requires-python rules in resolver documentation (#​10993)
  • Reference workspaces in --no-sources documentation (#​10995)
  • Update documentation for activating virtual environments in different shell (#​11000)
  • Add Docker SHA pinning tip (#​10955)
ory/oathkeeper (oryd/oathkeeper)

v0.40.9

Compare Source

This is a maintanance release with small fixes and dependency updates.

Bug Fixes
Code Generation
  • Pin v0.40.9 release commit (05493f3)

Changelog

Artifacts can be verified with cosign using this public key.

sigstore/cosign-installer (sigstore/cosign-installer)

v3.8.0

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from febus982 as a code owner January 29, 2025 00:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 642e755 to 20dac33 Compare January 30, 2025 12:30
@renovate renovate bot changed the title Update ghcr.io/astral-sh/uv Docker tag to v0.5.25 Update all non-major dependencies Jan 30, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from d4c34e0 to 5a42ff8 Compare February 5, 2025 02:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5a42ff8 to bb64702 Compare February 5, 2025 21:27
Copy link

Code Climate has analyzed commit bb64702 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (100% is the threshold).

This pull request will bring the total coverage in the repository to 100.0%.

View more on Code Climate.

@febus982 febus982 merged commit 23bc09b into main Feb 5, 2025
12 checks passed
@febus982 febus982 deleted the renovate/all-minor-patch branch February 5, 2025 21:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant