chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #3449 · python-gitlab/python-gitlab

renovate · 2026-09-28T02:03:14Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/download-artifact	action	patch	`v8.0.1` → `v8.0.2`
actions/setup-python	action	minor	`v7.0.0` → `v7.1.0`
actions/upload-artifact	action	patch	`v7.0.1` → `v7.0.2`
codecov/codecov-action	action	patch	`v7.1.0` → `v7.1.1`
commitizen (changelog)		minor	`==4.18.1` → `==4.19.3`
commitizen-tools/commitizen	repository	minor	`v4.18.1` → `v4.19.3`
coverage		minor	`==7.16.1` → `==7.17.0`
flake8 (changelog)		minor	`==7.3.0` → `==7.4.1`	`7.5.0`
gql		minor	`==4.0.0` → `==4.4.0`
isort (changelog)		patch	`==9.0.1` → `==9.0.2`
maxbrunet/pre-commit-renovate	repository	minor	`44.90.3` → `44.181.10`	`44.199.2` (+37)
mypy (changelog)		minor	`==2.3.1` → `==2.4.0`	`2.4.1`
pre-commit		minor	`==4.6.2` → `==4.7.0`
pre-commit/mirrors-mypy	repository	minor	`v2.3.1` → `v2.4.0`	`v2.4.1`
psf/black	repository	minor	`26.5.1` → `26.10.1`
pycqa/flake8	repository	minor	`7.3.0` → `7.4.1`	`7.5.0`
pycqa/isort	repository	patch	`9.0.1` → `9.0.2`
pycqa/pylint	repository	minor	`v4.0.8` → `v4.1.3`
pylint (changelog)		minor	`==4.0.9` → `==4.1.3`
pytest-docker		patch	`==3.2.5` → `==3.2.6`
python	uses-with	minor	`3.14` → `3.15`	`3.15.2`
python-semantic-release/publish-action	action	minor	`v10.6.2` → `v10.7.0`
python-semantic-release/python-semantic-release	action	minor	`v10.6.2` → `v10.7.0`
sphinx (changelog)		minor	`==9.1.0` → `==9.2.0`
types-requests (changelog)		patch	`==2.33.0.20260906` → `==2.33.0.20261006`	`2.33.0.20261030`
types-setuptools (changelog)		patch	`==84.0.0.20260812` → `==84.0.0.20261006`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

actions/download-artifact

`v8.0.2`

Compare Source

What's Changed

Update the readme by @danwkennedy in #473
Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Update @actions/artifact to 6.3.1 by @tunc-d in #492
Prepare download-artifact v8.0.2 by @tunc-d in #493

New Contributors

@tunc-d made their first contribution in #492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

actions/setup-python

`v7.1.0`

Compare Source

What's Changed

Enhancements

Add mirror and mirror-token inputs for custom Python distribution sources by @luhenry in #1302
Improve error message clarity by @v-lmvysakh in #1351

Dependency Upgrade

Upgrade browserslist from 4.28.2 to 4.28.9 by @dependabot in #1353
Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in #1343
Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by @dependabot in #1342
Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in #1357
Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in #1359
Upgrade undici from 6.28.0 to 6.29.0 by @dependabot in #1364
Upgrade ts-jest from 29.4.11 to 29.4.14 by @dependabot in #1361
Upgrade brace-expansion from 5.0.9 to 5.0.12 by @dependabot in #1365
Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 by @dependabot in #1363
Upgrade @typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 by @dependabot in #1369
Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in #1345
Upgrade cache to 6.3.0 by @v-HarithaVattikuti in #1370
Resolve Basic Validation audit failures by @v-HarithaVattikuti in #1347
Resolve npm audit failures by @v-HarithaVattikuti in #1350

New Contributors

@luhenry made their first contribution in #1302

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

actions/upload-artifact

`v7.0.2`

Compare Source

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in #821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

codecov/codecov-action

`v7.1.1`

Compare Source

What's Changed

chore(release): 7.1.1 by @thomasrockhu-codecov in #1973

Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1

commitizen-tools/commitizen (commitizen)

`v4.19.3`

Compare Source

Fix

scm-provider: prefer full version over floating tags

`v4.19.2`

Compare Source

Fix

tags: give ignored tag formats precedence over version formats

`v4.19.1`

Compare Source

Refactor

bump: use VersionIncrement ordering for bump detection (#2097)

`v4.19.0`

Compare Source

Feat

add extensible commit filters

coveragepy/coveragepy (coverage)

`v7.17.0`

Compare Source

Dropped support for Python 3.10.
Binary wheels are now provided for iOS and Android. This allows the use of
the optimized C tracer on mobile platforms.
Fix: three or more levels of nested with statements could make a with
line look like a branch with an exit that can never happen. Using the
sys.monitoring core, these phantom branches were reported as partial. Other
cores hid the problem but still counted the phantom branches in the total.
Closes issue 1987_.
Fix: a comment or string that merely mentioned if True: or
while True: could mark its line as a branch that is known to be partial,
so a branch that never ran was reported as taken. These built-in patterns
now only match at the start of the statement. Closes issue 2314_.
Fix: region detection missed functions defined in unusual places, such as
else and except clauses. This is now fixed.
Fix: recent versions of the lcov tool complain if the same function name
appears more than once in a report. Python can have multiple same-named
functions in a few ways, for example, getters/setters or conditionally
defined functions. These are now disambiguated by adding a @<line number>
suffix to the function name. Fixes issue 2335.
Fix: The "Can't combine statement coverage data with branch data" error now
names the two data files it couldn't combine. The :ref:error description <error_cant_combine> in the docs now lists common causes and how to find the
process that wrote the file.
Fix: at coverage totals close to 0 or 100, the XML report could get incorrect
line-rate values like 8.333e-05 or 1. This is now fixed, closing
issue 2293_ and issue 2294_.
Fix: a parallel data file saved more than once kept the hash of its first
save in its file name. Combining could then skip it as a duplicate of another
file that had the same data at that point, and delete it, losing the data
recorded after the first save. Each save now updates the hash. This had been
a problem since 7.13.1. Fixes issue 2338_.
Fixes for obscure but legal file names:
- File names (and plugin names) can contain control characters, which are
  legal in POSIX paths but unsafe in reports: in XML 1.0 they make the
  document non-well-formed, and in a terminal they act as escape sequences
  (colors, title/clipboard sequences, cursor moves that forge output). Now
  the XML report, the text and Markdown summary reports, and coverage debug data replace non-printable characters in names. Printable names are
  unchanged.
- A file pattern (from include, omit, or a [paths] alias)
  containing a newline sent the glob-to-regex translation into an infinite
  loop, hanging the process. Newlines in patterns are now handled like any
  other character.
Fixes in the implementation of the C tracer:
- If a plugin's dynamic_source_filename method raised an exception, lines
  in that function could be recorded as belonging to a different file. Also
  fixed some minor memory leaks in the C tracer.
- The refcount of None was mismanaged during function calls, including
  comprehensions. This was unlikely to cause an actual problem, but is now
  fixed. Thanks, Andrew Dalke.
- The C tracer held borrowed references to dictionary values, which was
  unsafe on free-threaded Python. Now it takes its own references.
- An internal error while recording a new file could be reported as a
  confusing SystemError instead of the actual exception.
Performance: the text summary report (coverage report) held on to every
file's parsed source until it finished, so its memory use grew with the size
of the project: ten times or more what 7.14 used on large projects. Now it
keeps only what it needs to print. Fixes issue 2277_.
Performance: HTML reports should be about 5% faster to produce.
Kept the political banner in the README. Closes issue 2344_.

.. _issue 1987: #1987
.. _issue 2277: #2277
.. _issue 2293: #2293
.. _issue 2294: #2294
.. _issue 2314: #2314
.. _issue 2335: #2335
.. _issue 2338: #2338
.. _issue 2344: #2344

.. _changes_7-16-2:

`v7.16.2`

Compare Source

Fix: on Python 3.14 and later, a for loop completing immediately before a
function return could mistakenly report an uncovered branch. This is now
fixed, closing issue 2168_.
Fix: on Python 3.14 and later, the else clause of a try whose body is
a with statement could incorrectly be reported as covered when the
with raised. This is now fixed, closing issue 2289_.
Fix: with dynamic_context = test_function, test methods written as
@staticmethod or @classmethod were not given a context of their own.
Now they are, on Python 3.11 and later. Closes issue 1923_.

.. _issue 1923: #1923
.. _issue 2168: #2168
.. _issue 2289: #2289

.. _changes_7-16-1:

pycqa/flake8 (flake8)

`v7.4.1`

Compare Source

`v7.4.0`

Compare Source

graphql-python/gql (gql)

`v4.4.0`

Compare Source

Features

Support Python 3.14 and 3.15 (#575) (#618) and remove Python 3.9 support (#600)
Add comprehensive directive support to DSL module (#563)
Feature dsl schema shortcuts (#566)
Support HTTP multipart subscriptions in AIOHTTPTransport (#574)
show oneOf in introspection query (#569)
Add extra_args parameter to subscribe() for aiohttp transport (#584)
Add extensions support to GraphQLRequest (#591)
Feature support httpx2 (#606)

Misc

Refactor DSL code to use Self type (#567)
Fix python 3.9 dev dependencies (#568)
Replace archived backoff with tenacity (#573)
Bump pytest-asyncio to 1.2.0 (#576)
Fix warning in make docs (#579)
DOC Use the session in async subs example (#585)
docs: fix typo in intro.rst (#608)
Using Python 3.14 instead of 3.9 to generate the read the docs documentation (#607)
Bump isort to 8.0.1 (#605)
Bump mypy to 2.1.0 (#604)
Bump pytest versions (#603)
Fix flake8 unused nonlocal and global warnings (F824) (#602)
Bump black version to 26.5.1 and run it with new format (#601)
Upgrade vcrpy to 8.2.1 to fix aiohttp 3.14 compatibility (#599)
Bump websockets version (#617)
DOC Fix intro installation table (#610)

Fixes

Fix DeprecationWarning in test_requests_batch online tests (#582)
Don't fall back to Apollo when not in subprotocols (#586)
DSL using immutable graphql-core AST classes (#589)
Support standard http.cookiejar.CookieJar in RequestsHTTPTransport cookies typing (#594)
Fix gql to work with graphql-core 3.3.0rc0 (#597)
Skip multipart parts with empty Content-Type instead of raising (#598)
Coerce a single value to a list when serializing list variables (#611)

PyCQA/isort (isort)

`v9.0.2`

Compare Source

🪲 Fixes

Preserve blank lines before comment-only sections by @fzlzjerry in #2655
Preserve trailing-comma layout when sorting reexports by @PSR94 in #2605
fix: treat EOF on stdin as 'quit' in --interactive prompt by @Eljees in #2653
Fix multi_line_output=10 emitting unparsable code around trailing comments by @dylanpulver in #2651
Stop configuration discovery at Git worktree boundaries by @vzer200 in #2654
fix: preserve trailing comments when sorting literals by @Manny7717 in #2647
Preserve LF stdin output on Windows by @AleksZyro in #2616
Handle star imports better when using parenthesis by @DanielNoord in #2665
Sort unwrapped lines in force_sort_within_sections by @DanielNoord in #2667
Preserve file line endings when sorting reexports by @vyrnsynx in #2669
Fix float_to_top hoisting indented semicolon imports by @Pajimo in #2671
Preserve CRLF blank lines during float-to-top preprocessing by @hansu650 in #2683
mypy: type-check tests and use pathlib fixtures by @DanielNoord in #2685

Other changes

Fix codecov build reports by @DanielNoord in #2666
Refactors in process by @DanielNoord in #2677
Core developers revision by @staticdev in #2691

Full Changelog: PyCQA/isort@9.0.1...9.0.2

maxbrunet/pre-commit-renovate

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/all-minor-patch branch 19 times, most recently from 218096c to f35c9ea Compare October 5, 2026 01:47

renovate Bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from bc64a18 to 232a6eb Compare October 8, 2026 14:37

renovate Bot force-pushed the renovate/all-minor-patch branch 21 times, most recently from 194035a to 605f735 Compare October 19, 2026 11:30

renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from fe0a1cf to 8a02342 Compare October 22, 2026 04:29

chore(deps): update all non-major dependencies

78cbd8f

Navigation Menu

Repository navigation

chore(deps): update all non-major dependencies - #3449

chore(deps): update all non-major dependencies#3449
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

Enhancements

Dependency Upgrade

New Contributors

What's Changed

New Contributors

What's Changed

Fix

Fix

Refactor

Feat

Features

Misc

Fixes

🪲 Fixes

Other changes

Configuration

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 28, 2026 •

edited

Loading