Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/stale	action	minor	v10.3.0 → v10.4.0
jubilant	dependency-groups	minor	==1.10.0 → ==1.12.0
ops (changelog)	project.dependencies	minor	==3.7.1 → ==3.8.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/stale (actions/stale)

v10.4.0

Compare Source

What's Changed

Bug Fix

• Fixed only-issue-types validation by @​trueberryless in #​1338

Dependency Updates

• Bump undici to 6.27.0 via override, clean up stale license files, and version to 10.4.0. by @​dependabot in #​1342

New Contributors

• @​trueberryless made their first contribution in #​1338

Full Changelog: actions/stale@v10.3.0...v10.4.0

canonical/jubilant (jubilant)

v1.12.0

Compare Source

Features

• Improve Jubilant logging mechanism (#​351)
• Bump minimum python version to 3.10 (#​370)

Chores

• Rolling uv exclude-newer supply-chain quarantine (#​368)
• Set dependabot commit-message prefix to "chore" (no scope) (#​367)
• Add Code of Conduct linking to Ubuntu CoC (#​356)
• Run uv lock after adding exclude-newer duration (#​372)

CI

• Adopt new dependabot conventions (#​365)
• Hash-pin actions and drop zizmor config (#​366)
• Correct hash-pin version comment for upload-sarif action (#​376)
• Pin action version comments to exact tags (#​378)

v1.11.0

Compare Source

Features

• Add show_unit method (#​308)

Documentation

• Move dataclass codegen note from docs to comment; consolidate (#​336)
• Expand the security page to include more sections (#​332)
• Clarify behaviour when providing a user in the model value (#​340)
• Clarify behaviour of any_* methods and fix various small issues (#​344)
• Move docs to canonical.com/juju/docs/jubilant (#​337)

Refactoring

• Avoid yaml.load() call in safe_load to silence scanner false positive (#​331)

CI

• Split Juju 4 channel into 4.0 and 4.1, add edge to scheduled runs (#​338)
• Enforce Conventional Commits on PR titles (#​341)
• Attest build provenance for released artifacts (#​352)
• Add dependency-review-action on PRs (#​353)

canonical/operator (ops)

v3.8.1

Compare Source

Fixes

• Align Juju naming rules with testing class rules (#​2570)
• Do not attempt to mutate secret data in grant/revoke during tests (#​2614)
• Allow IdentityDict to be assigned IdentityAccess (#​2628)
• Only decode fields used by the data class in Relation.load() (#​2636)
• Use juju.wait for workload version tests in Kubernetes tutorial (#​2650)

Documentation

• Wait longer for Loki data in Kubernetes tutorial integration tests (#​2611)
• Add more guidance about charm naming (#​2610)
• Fix tempo test_deploy URL (#​2631)
• Add how-to guide for debugging Kubernetes charms (#​2498)
• Revert to installed charmcraft for initing charms (#​2635)
• Grab workload version in Kubernetes tutorial (#​2559)
• Separate test_workload_version_is_set in Kubernetes tutorial chapter 3 (#​2638)
• Add how-to guide to configure jubilant logs (#​2619)
• Use autofunction for layer_from_rockcraft (#​2648)
• Remove log_cli and log_file ini options; keep them as CLI arguments for integration tests (#​2654)
• Fix typo in explanation of mock_version fixture usage (#​2647)
• Switch Kubernetes tutorial charms to rock version of demo server (#​2649)

Tests

• Type-check testing/src/scenario and fix uncovered errors (#​2615)

CI

• Add dependency-review-action on PRs (#​2587)
• Re-enable the tracing integration tests (#​2586)
• Adopt new dependabot conventions (#​2609)
• Drop unsupported cooldown.semver-major-days from github-actions block (#​2617)
• Open an issue if a scheduled workflow fails (#​2627)
• Hash-pin actions and drop zizmor config (#​2612)
• Use uv-venv-lock-runner in tracing tox, align deps (#​2651)

v3.8.0

Compare Source

Features

• Note the socket path in Pebble tracing spans (#​2555)

Fixes

• Treat remote unit zero as explicit (#​2454)
• Ensure resources are cleaned up in testing.Context (#​2506)
• Close SQLite storage in Harness.cleanup() (#​2507)
• Restore sys.breakpointhook on _Manager teardown (#​2542)
• Avoid errors in finalisation due to already-closed websocket (#​2548)
• Use the correct value for JUJU_HOOK_NAME when objects contain dashes (#​2552)
• Avoid double-closing the framework in testing teardown (#​2561)
• Don't leak exec I/O threads when waiting on the change fails (#​2558)
• Take Pebble defaults into consideration when consistency checking Checks (#​2567)
• Tear down Runtime.exec() when the charm raises (#​2581)

Documentation

• Fix small issues in K8s tutorial (#​2540)
• Document user-secret observer lifecycle and secret-changed semantics (#​2522)
• Replace CoC with link to Ubuntu Code of Conduct (#​2564)
• Add a small note about -W error in the unit test how-to (#​2560)
• Add doc about subordinate charms (#​2455)
• Add 26.04 to the versions page and mark 2.23 as LTS (#​2517)
• Clarify storage-detaching applies to both machine and K8s charms (#​2554)
• Add guidance about names of workload-less charms (#​2496)
• Fix first unit tests command in machine charm tutorial (#​2574)
• Extend security explanation page to cover SEC0030 V1.3 gaps (#​2571)
• Move docs to canonical.com/juju/docs/ops (#​2545)
• Fix docstring of _Event._is_action_event (#​2580)

Tests

• Treat warnings as errors when running unit tests (#​2541)
• Fix mock_temp_dir fixture's open() patch (#​2553)
• Add integration tests for ops.hookcmds (#​2520, #​2562)
• Fix integration test flakes on Juju 3 k8s and Juju 4 secrets (#​2584)

Refactoring

• Avoid yaml.load() to silence security scanner false positives (#​2523)
• Replace jsonpatch with an inline dict-diff (#​2578)
• Move the otlp-json package to be a regular ops-tracing module (#​2585)
• Distinguish between init and attribute types in testing state classes (#​2331)

CI

• Remove obsolete containerd workaround from integration workflow (#​2519)
• Use the sys.monitoring coverage core (#​2518)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.