Skip to content

fix(deps): update all dependencies - #354

Open
renovate[bot] wants to merge 4 commits into
mainfrom
renovate/all
Open

fix(deps): update all dependencies#354
renovate[bot] wants to merge 4 commits into
mainfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Feb 5, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action major v4v6 age confidence
actions/upload-artifact action major v4v7 age confidence
canonical-sphinx minor ==0.5.2==0.6.0 age confidence
cosl project.dependencies minor ==1.4.0==1.9.2 age confidence
juju (changelog) dependency-groups patch >=2.9,<3>=3.6,<4 age confidence
mysql-connector-python (changelog) project.dependencies minor ==9.5.0==9.7.0 age confidence
myst-nb minor ==1.1.2==1.4.0 age confidence
myst-parser major ==4.0.1==5.1.0 age confidence
ops (changelog) project.dependencies minor ==3.5.1==3.7.1 age confidence
packaging major ==25.0==26.2 age confidence
pydantic (changelog) project.dependencies minor ==2.12.5==2.13.4 age confidence
pytest (changelog) dependency-groups minor ==9.0.2==9.1.0 age confidence
requests (changelog) project.dependencies minor ==2.32.5==2.34.2 age confidence
sphinx-autobuild (changelog) major ==2024.10.3==2025.8.25 age confidence
sphinx-config-options patch ==0.1.0==0.1.1 age confidence
sphinx-design minor ==0.6.1==0.7.0 age confidence
sphinx-reredirects major ==0.1.6==1.1.0 age confidence
sphinx-tabs minor ==3.4.7==3.5.0 age confidence
sphinx-ubuntu-images minor ==0.1.0==0.2.0 age confidence
sphinxcontrib-mermaid (changelog) patch ==2.0.0==2.0.2 age confidence
sphinxcontrib-svg2pdfconverter minor ==2.0.0==2.1.0 age confidence

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v6

Compare Source

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

Compare Source

What's Changed
⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v5

Compare Source

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v7

Compare Source

v6.0.0

Compare Source

v6

Compare Source

v5.0.0

Compare Source

v5

Compare Source

canonical/cos-lib (cosl)

v1.9.2

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.9.1...1.9.2

v1.9.1

Compare Source

What's Changed

New Contributors

Full Changelog: canonical/cos-lib@1.9.0...1.9.1

v1.9.0

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.8.0...1.9.0

v1.8.0

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.7.0...1.8.0

v1.7.0

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.6.1...1.7.0

v1.6.1

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.6.0...1.6.1

v1.6.0

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.5.0...1.6.0

v1.5.0

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.4.0...1.5.0

mysql/mysql-connector-python (mysql-connector-python)

v9.7.0

Compare Source

======

This release contains no functional changes.

v9.6.0

Compare Source

======

This release contains no functional changes.

executablebooks/myst-nb (myst-nb)

v1.4.0

Compare Source

(full changelog)

What's Changed
New Contributors

v1.3.0

Compare Source

(full changelog)

What's Changed
Enhancements made
Maintenance and upkeep improvements
New Contributors

v1.2.0

Compare Source

(full changelog)

Enhancements made
Bugs Fixed
Maintenance and upkeep improvements
Other merged PRs
New Contributors

(GitHub contributors page for this release)

executablebooks/MyST-Parser (myst-parser)

v5.1.0

Compare Source

✨ New Features
  • ✨ Add "alert" syntax extension for GFM alerts (e.g. > [!NOTE]), see by gh-user:chrisjsewell in gh-pr:1128
  • ✨ Add "gfm_autolink" syntax extension for GFM autolinks, see by gh-user:chrisjsewell in gh-pr:1128
  • ✨ Add myst_strikethrough_single_tilde config option to allow single tilde (~) for strikethrough by gh-user:chrisjsewell in gh-pr:1128
  • ✨ Add myst_colon_fence_exact_match config option to require the closing colon fence to have exactly the same number of colons as the opening, see by gh-user:chrisjsewell in gh-pr:1128
👌 Improvements
  • 👌 Update myst_gfm_only mode to use the unified gfm_plugin, which now includes GFM autolinks, alerts, and improved strikethrough/tasklist handling by gh-user:chrisjsewell in gh-pr:1128
  • 👌 Improve MathJax 4 compatibility for Sphinx 9 by gh-user:chrisjsewell in gh-pr:1110
  • 👌 Stop directive-option parsing at colon fences, fixing nested colon fence directives by gh-user:chrisjsewell in gh-pr:1133
🐛 Bug Fixes
  • 🐛 Use docname instead of source path in warning locations by gh-user:chrisjsewell in gh-pr:1114
  • 🐛 Correctly encode & in Markdown URLs by not HTML-escaping refuri by gh-user:chrisjsewell in gh-pr:1126
  • 🐛 Fix RemovedInSphinx10Warning for inventory item iteration by gh-user:chrisjsewell in gh-pr:1129
  • 🐛 Pin mdit-py-plugins>=0.6.1 for nested field list fix by gh-user:chrisjsewell in gh-pr:1134
⬆️ Dependency Upgrades
  • ⬆️ Upgrade to markdown-it-py~=4.2 and mdit-py-plugins~=0.6 by gh-user:chrisjsewell in gh-pr:1128
  • ⬆️ Update pygments requirement from <2.20 to <2.21 by gh-user:chrisjsewell in gh-pr:1117

Full Changelog: v5.0.0...v5.1.0

v5.0.0

Compare Source

This release significantly bumps the supported versions of core dependencies:

‼️ Breaking Changes

This release updates the minimum supported versions:

  • Python: >=3.11 (dropped Python 3.10, tests up to 3.14)
  • Sphinx: >=8,<10 (dropped Sphinx 7, added Sphinx 9)
  • Docutils: >=0.20,<0.23 (dropped docutils 0.19, added docutils 0.22)
  • markdown-it-py: ~=4.0 (upgraded from v3)
⬆️ Dependency Upgrades
  • ⬆️ Upgrade to markdown-it-py v4 by gh-user:chrisjsewell in gh-pr:1060
  • ⬆️ Drop Python 3.10 and Sphinx 7 by gh-user:chrisjsewell in gh-pr:1059
  • ⬆️ Drop docutils 0.19 by gh-user:chrisjsewell in gh-pr:1061
  • ⬆️ Add support for Python 3.14 by gh-user:chrisjsewell in gh-pr:1075
  • ⬆️ Support Sphinx v9 by gh-user:chrisjsewell in gh-pr:1076
  • ⬆️ Allow docutils 0.22 by gh-user:chrisjsewell in gh-pr:1084
👌 Improvements
  • 👌 Improve generation of meta nodes by gh-user:AA-Turner in gh-pr:1080
📚 Documentation
  • 📚 Fix typo in tables.md by gh-user:electricalgorithm in gh-pr:1034
  • 📚 Fix minor typo in cross-referencing.md by gh-user:krassowski in gh-pr:1036
🔧 Internal / Maintenance
  • 🔧 Update pre-commit by gh-user:chrisjsewell in gh-pr:1058
  • 🔧 Add AGENTS.md by gh-user:chrisjsewell in gh-pr:1083

Full Changelog: v4.0.1...v5.0.0

canonical/operator (ops)

v3.7.1

Compare Source

Fixes

  • Pass the endpoint name through to relation-get (#​2499)

Documentation

  • Add a how-to guide focused on debugging charms (#​2386)
  • Add metadata descriptions to the debug and public listing how-to guides (#​2415)
  • Update tutorials and how-tos to use pytest-jubilant (#​2406)
  • Add how-to guide about CI (#​2405)
  • Test COS Lite integration with the k8s-5-observe charm (#​2411)
  • Update tutorials and example charms to match Charmcraft 4.2 (#​2407)
  • Update api_demo_server version to support non-amd64 architectures (#​2448)
  • Pin to 24.04 when launching VMs (#​2457)
  • Explain how to remove errored apps in k8s tutorial (#​2445)
  • Align example charms with pre-release Charmcraft (#​2444)
  • Add how-to guide for naming and initialising a charm (#​2449)
  • Add a how-to guide about publishing a charm (#​2420)
  • In the tutorials, recommend initing from GitHub (#​2459)
  • Fix integration tests of K8s tutorial charms (#​2471)
  • Replace the PGP key with the upstream page in SECURITY.md (#​2474)
  • Bump api_demo_server to 1.0.4 in docs and example charms (#​2473)
  • Refresh the machine workloads how-to (#​2443)
  • Add COS Lite integration tests to K8s tutorial (#​2478)
  • Add git workflow guidance for contributors (#​2453)
  • Update profile guidance in HACKING.md (#​2486)
  • Explain how to add an icon to a charm (#​2451)
  • Adopt latest Charmcraft profiles, incl juju_setup marker on integration tests (#​2497)
  • Improve support for agents, with Sphinx Stack upgrade (#​2495)
  • Improve how-to about managing files in containers (#​2470)
  • Improve Container.pull docs to avoid leaky files (#​2508)
  • Clarify Secret manage-permission error in testing.State (#​2510)

Tests

  • Extend the type checking of the ops-scenario tests (#​2234, #​2235)
  • Wait on ExecProcess after expected TypeError (#​2509)

CI

  • Drop external action for checking PR title format (#​2388)
  • Add a dependabot cooldown (#​2413)
  • Sort the directory entries when updating the best practices list (#​2422)
  • Configure dependabot for the example charms (#​2426)
  • Pin zizmor and TIOBE tool versions in pyproject.toml rather than the workflow (#​2437)
  • Add 26.04 to smoke tests and remove outdated metadata.yaml (#​2450)
  • Use charmcraft test for example charm (#​2440)
  • Add workflow_dispatch trigger to workflows where it is useful (#​2468)
  • Ensure the correct job is selected in updating charm pins (#​2500)

v3.7.0

Compare Source

Features

  • Enable interactive debugging via breakpoint in testing (#​2363)
  • ops.testing autoload support for charmcraft extensions (#​2367)
  • Allow testing.State.get_relation to accept relation objects (#​2359)
  • Support charmcraft.yaml format as meta for testing.Context (#​2296)

Fixes

  • Correct type annotation for StorageMeta.properties (#​2348)
  • Move the testing.Container compatibility import so that mypy style checkers understand it (#​2343)
  • Hold only copies of user provided meta/config/actions in testing.Context (#​2349)
  • Deep-copy layer objects during testing.State plan rendering (#​2380)
  • Return copies from testing.State secret_get and action_get (#​2379)
  • Use timezone-aware datetimes in expiry calculation (#​2378)
  • Warn before clearing non-empty container in testing (#​2365)

Documentation

  • Replace links to juju.is by canonical.com/juju (#​2368)
  • Refactor homepage to better put Ops in context (#​2370)
  • Add pytest-operator migration guide from Jubilant docs (#​2381)
  • Add a tip about AI help in the Jubilant migration guide (#​2382)
  • Mention jhack scenario snapshot (#​2351)
  • Update integration testing how-to guide (#​2390)
  • Explain K8s charms briefly at the start of the tutorial (#​2392)
  • Juju secrets identifier is now an opaque string (#​2387)

Tests

  • Extend the type checking of the ops-scenario tests (#​2230)

CI

  • Run ruff check --fix in tox -e format (#​2369)
  • Check example charms with mypy in CI (#​2360)
  • Update the list of published charms in the compatibility tests (#​2384)
  • Adjust minimum Python version in broad charm compatibility tests (#​2317)

v3.6.0

Compare Source

Features

  • Bump default Juju version in ops.testing.Context to 3.6.14 (#​2316)

Fixes

  • Correct the Model.get_binding() return type (#​2329)
  • Only show executable in ExecError.__str__, not full command line (#​2336)
  • Support Pydantic MISSING sentinel in ops.Relation.save (#​2306)

Documentation

  • Add how-to subcategory for managing containers (#​2309)
  • Remove 2.19 version in docs, tweak ops.testing title (#​2332)
  • Use "true" and "false" consistently in the reference documentation (#​2330)
  • Add CLI args as another place to not put sensitive data (#​2334)
  • Fix remote unit kwarg in testing example (#​2342)
  • Clarify that secret labels are not names (#​2337)

Tests

  • Set SCENARIO_BARE_CHARM_ERRORS=true in Ops tests that care (#​2314)

CI

  • Fix releasing on branches with no versions.md doc (#​2323)

v3.5.2

Compare Source

Fixes

  • Make testing.CheckInfo level arg type match pebble.CheckInfo.level (#​2274)
  • Make testing consistency check aware that credential-get is available on k8s in newer Juju (#​2307)
  • Drop unused setuptools_scm build dependency (#​2310)

Documentation

  • Update Pebble version in Juju 3.6 (#​2295)
  • Refresh K8s tutorial to use Concierge and uv-based Charmcraft profile (#​2285)
  • Add missing "How to" in page titles (#​2289)
  • Fix and improve observability part of K8s tutorial (#​2305)
pypa/packaging (packaging)

v26.2

Compare Source

What's Changed

Fixes:

Documentation:

Internal:

New Contributors

Full Changelog: pypa/packaging@26.1...26.2

v26.1

Compare Source

Features:

Behavior adaptations:

Pylock (PEP 751) updates:

Fixes:

Performance:

Internal:

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner February 5, 2026 16:33
@renovate
renovate Bot enabled auto-merge (squash) February 5, 2026 16:33
@renovate
renovate Bot requested review from amandahla and cbartz and removed request for a team February 5, 2026 16:33
github-actions[bot]
github-actions Bot previously approved these changes Feb 5, 2026
github-actions[bot]
github-actions Bot previously approved these changes Feb 6, 2026
github-actions[bot]
github-actions Bot previously approved these changes Feb 10, 2026
github-actions[bot]
github-actions Bot previously approved these changes Feb 11, 2026
github-actions[bot]
github-actions Bot previously approved these changes Feb 26, 2026
github-actions[bot]
github-actions Bot previously approved these changes Feb 26, 2026
github-actions[bot]
github-actions Bot previously approved these changes Mar 3, 2026
github-actions[bot]
github-actions Bot previously approved these changes Mar 3, 2026
github-actions[bot]
github-actions Bot previously approved these changes Mar 5, 2026
github-actions[bot]
github-actions Bot previously approved these changes Mar 6, 2026
github-actions[bot]
github-actions Bot previously approved these changes Mar 10, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Unused entries in .trivyignore

Image: ghcr.io/canonical/wordpress:8f494ab4a1cdbe62ed8a0ab4c3e7edf220239f0c-_1.0_amd64

The following CVEs are in .trivyignore but not ignored by Trivy anymore:

1 similar comment
@github-actions

Copy link
Copy Markdown
Contributor

Unused entries in .trivyignore

Image: ghcr.io/canonical/wordpress:8f494ab4a1cdbe62ed8a0ab4c3e7edf220239f0c-_1.0_amd64

The following CVEs are in .trivyignore but not ignored by Trivy anymore:

The bot_pr_approval workflow requires pull-requests: write permission to approve bot-authored PRs via the GitHub API. Add this permission at the job level as per the operator-workflows documentation.
@renovate

renovate Bot commented Jun 18, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@github-actions

Copy link
Copy Markdown
Contributor

Unused entries in .trivyignore

Image: ghcr.io/canonical/wordpress:8f494ab4a1cdbe62ed8a0ab4c3e7edf220239f0c-_1.0_amd64

The following CVEs are in .trivyignore but not ignored by Trivy anymore:

1 similar comment
@github-actions

Copy link
Copy Markdown
Contributor

Unused entries in .trivyignore

Image: ghcr.io/canonical/wordpress:8f494ab4a1cdbe62ed8a0ab4c3e7edf220239f0c-_1.0_amd64

The following CVEs are in .trivyignore but not ignored by Trivy anymore:

… dependency updates

Revert all dependency updates in docs/requirements.txt to maintain stability.
Exclude docs/requirements.txt from automatic updates by adding a packageRule to
renovate.json that disables the pip_requirements manager for this file.

Fixes CI failure in docs_rtd.yaml workflow by ensuring documentation
dependencies remain pinned to tested versions.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown
Contributor

Unused entries in .trivyignore

Image: ghcr.io/canonical/wordpress:8f494ab4a1cdbe62ed8a0ab4c3e7edf220239f0c-_1.0_amd64

The following CVEs are in .trivyignore but not ignored by Trivy anymore:

1 similar comment
@github-actions

Copy link
Copy Markdown
Contributor

Unused entries in .trivyignore

Image: ghcr.io/canonical/wordpress:8f494ab4a1cdbe62ed8a0ab4c3e7edf220239f0c-_1.0_amd64

The following CVEs are in .trivyignore but not ignored by Trivy anymore:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant