chore(deps): update all non-major dependencies#219
Merged
Conversation
![renovate-approve-2[bot]](https://avatars.githubusercontent.com/in/62175?s=60&v=4){kind=small}
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
Contributor
✅MegaLinter analysis: Success
See detailed reports in MegaLinter artifacts Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining
|
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
eabc94b to
d4a268e
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
69234c6 to
2d86663
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
5 times, most recently
from
0629740 to
e0f79ae
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
7 times, most recently
from
c722b5f to
ae34964
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
38e6c61 to
2cfbebd
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
0883937 to
268f94f
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
9547dbf to
49c3813
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
5 times, most recently
from
6ff69b9 to
9b0acf5
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
9 times, most recently
from
6a3b69b to
d8337bd
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
d8337bd to
54dafc2
Compare
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
Contributor
Trivy image scan report
|
| Package | ID | Severity | Installed Version | Fixed Version |
|---|---|---|---|---|
pip |
CVE-2026-1703 | LOW | 25.3 | 26.0 |
No Misconfigurations found
Contributor
Trivy image scan report
|
| Package | ID | Severity | Installed Version | Fixed Version |
|---|---|---|---|---|
pip |
CVE-2026-1703 | LOW | 25.3 | 26.0 |
No Misconfigurations found
Contributor
Trivy image scan report
|
| Package | ID | Severity | Installed Version | Fixed Version |
|---|---|---|---|---|
pip |
CVE-2026-1703 | LOW | 25.3 | 26.0 |
No Misconfigurations found
chgl
approved these changes
Mar 7, 2026
Contributor
|
🎉 This PR is included in version 1.11.15 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v6.0.1→v6.0.2v4.8.2→v4.9.0v5.0.1→v5.2.0v5.1.0→v5.2.0v6.1.0→v6.3.00.68.2→0.69.3v7.1.6→v7.3.13.14.2-slim→3.14.3-slimv6.18.0→v6.19.2v3.6.0→v3.7.0v4.31.9→v4.32.6v5.0.0→v5.0.2v9.2.0→v9.4.0v2.14.0→v2.15.11.19.0→1.22.0Release Notes
actions/checkout (actions/checkout)
v6.0.2Compare Source
actions/dependency-review-action (actions/dependency-review-action)
v4.9.0: Dependency Review Action 4.9.0Compare Source
This feature release contains a couple of notable changes:
show_patched_versionswhich will add a column to the output, showing the fix version of each vulnerable dependency. Thanks @felickz!allow-package-dependencylists, including case (in)sensitivity and url-encoded namespaces Thanks @juxtin!What's Changed
Patched VersiontoVulnerabilitiessummary by @felickz in #1045New Contributors
Full Changelog: actions/dependency-review-action@v4.8.3...v4.9.0
v4.8.3: 4.8.3Compare Source
Dependency Review Action v4.8.3
This is a bugfix release that updates a number of upstream dependencies and includes a fix for the earlier feature that detected oversized summaries and upload them as artifacts, which could occasionally crash the action.
We have also updated the release process to use a long-lived
v4branch for the action, instead of a force-pushed tag, which aligns better with git branching strategies; the change should be transparent to end users.What's Changed
Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.8.2..v4.8.3
actions/setup-dotnet (actions/setup-dotnet)
v5.2.0Compare Source
v5.1.0Compare Source
What's Changed
Documentation
Dependency updates
New Contributors
Full Changelog: actions/setup-dotnet@v5...v5.1.0
actions/setup-java (actions/setup-java)
v5.2.0Compare Source
What's Changed
Enhancement
Documentation Changes
Dependency Updates
New Contributors
Full Changelog: actions/setup-java@v5...v5.2.0
actions/setup-node (actions/setup-node)
v6.3.0Compare Source
What's Changed
Enhancements:
devEnginesfield by @susnux in #1283Dependency updates:
Bug fixes:
New Contributors
Full Changelog: actions/setup-node@v6...v6.3.0
v6.2.0Compare Source
aquasecurity/trivy (aquasecurity/trivy)
v0.69.3Compare Source
Changelog
6fb20c8release: v0.69.3 [release/v0.69] (#10293)dabefecfix(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 [backport: release/v0.69] (#10291)v0.69.2Compare Source
Changelog
cfa322erelease: v0.69.2 [release/v0.69] (#10266)86debcefix(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 [backport: release/v0.69] (#10267)cf3d4cdfix(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 [backport: release/v0.69] (#10264)6dfd3b0ci: remove apidiff workflowv0.69.0Compare Source
👉 Trivy v0.69.0 release notes (click here)
⬇️ Download Trivy
🐳 New Docker Install option
docker pull get.trivy.dev/image/trivy:0.69.0Changelog
https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0690-2026-01-30
astral-sh/setup-uv (astral-sh/setup-uv)
v7.3.1: 🌈 fall back to VERSION_CODENAME when VERSION_ID is not availableCompare Source
Changes
This release adds support for running in containers like
debian:testingordebian:unstable🐛 Bug fixes
🧰 Maintenance
⬆️ Dependency updates
v7.3.0: 🌈 New features and bug fixes for activate-environmentCompare Source
Changes
This release contains a few bug fixes and a new feature for the activate-environment functionality.
🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
v7.2.1: 🌈 update known checksums up to 0.9.28Compare Source
Changes
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
v7.2.0: 🌈 add outputs python-version and python-cache-hitCompare Source
Changes
Among some minor typo fixes and quality of life features for developers of actions the main feature of this release are new outputs:
UV_PYTHON)While implementing this it became clear, that it is easier to handle the Python binaries in a separate cache entry. The added benefit for users is that the "normal" cache containing the dependencies can be used in all runs no matter if these cache the Python binaries or not.
🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
⬆️ Dependency updates
docker/build-push-action (docker/build-push-action)
v6.19.2Compare Source
GIT_AUTH_TOKENhost by @crazy-max in #1458Full Changelog: docker/build-push-action@v6.19.1...v6.19.2
v6.19.1Compare Source
GIT_AUTH_TOKENhost from GitHub server URL by @crazy-max in #1456Full Changelog: docker/build-push-action@v6.19.0...v6.19.1
v6.19.0Compare Source
github.comby @crazy-max in #1451Full Changelog: docker/build-push-action@v6.18.0...v6.19.0
docker/login-action (docker/login-action)
v3.7.0Compare Source
scopeinput to set scopes for the authentication token by @crazy-max in #912registry-authinput by @crazy-max in #911Full Changelog: docker/login-action@v3.6.0...v3.7.0
github/codeql-action (github/codeql-action)
v4.32.6Compare Source
v4.32.5Compare Source
github-codeql-disable-overlaycustom repository property to disable improved incremental analysis for CodeQL. First, create a custom repository property with the namegithub-codeql-disable-overlayand the type "True/false" in the organization's settings. Then in the repository's settings, set this property totrueto disable improved incremental analysis. For more information, see Managing custom properties for repositories in your organization. This feature is not yet available on GitHub Enterprise Server. #3507start-proxyaction to resolve the CodeQL CLI version from feature flags instead of using the linked CLI bundle version. We expect to roll this change out to everyone in March. #3512v4.32.4Compare Source
v4.32.3Compare Source
v4.32.2Compare Source
v4.32.1Compare Source
v4.32.0Compare Source
v4.31.11Compare Source
v4.31.10Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
4.31.10 - 12 Jan 2026
See the full CHANGELOG.md for more information.
gradle/actions (gradle/actions)
v5.0.2Compare Source
Summary
This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums.
What's Changed
Full Changelog: gradle/actions@v5.0.1...v5.0.2
v5.0.1Compare Source
What's Changed
npmcode dependency versionsFull Changelog: gradle/actions@v5.0.0...v5.0.1
oxsecurity/megalinter (oxsecurity/megalinter)
v9.4.0Compare Source
Core
New linters
Disabled linters
Linters enhancements
Fixes
apply_fixes=Truewhen linter has no fix options configured.ipynbfrom file extensions (mypy doesn't support notebooks directly) - fixes #6904Reporters
Flavors
Doc
CI
skip lintersin latest commit textBETA_LINTERS_ENABLED=falsemega-linter-runner
Linter versions upgrades (59)
v9.3.0Compare Source
Core
New linters
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.