chore(deps): update bugfixes
Metadata
Current evaluation
Merged PR #1486 as commit b6e26ca8, updating 12 pinned Python dependencies, including Jinja2 3.1.3, cryptography 41.0.7, lxml 4.9.4, and pytest 7.4.4.
Resolution: closed resolved
Reason: PR charmcraft#1486 was merged into main as commit b6e26ca8, applying the listed dependency upgrades in requirements.txt.
Evaluated by: mr-cal-bot
No scores available.
Issue body
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [Jinja2](https://palletsprojects.com/p/jinja/) ([changelog](https://jinja.palletsprojects.com/changes/)) | `==3.1.2` -> `==3.1.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [MarkupSafe](https://palletsprojects.com/p/markupsafe/) ([changelog](https://markupsafe.palletsprojects.com/changes/)) | `==2.1.3` -> `==2.1.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [cachetools](https://togithub.com/tkem/cachetools) | `==5.3.1` -> `==5.3.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [charset-normalizer](https://togithub.com/Ousret/charset_normalizer) | `==3.3.1` -> `==3.3.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [cryptography](https://togithub.com/pyca/cryptography) ([changelog](https://cryptography.io/en/latest/changelog/)) | `==41.0.6` -> `==41.0.7` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [distlib](https://togithub.com/pypa/distlib) | `==0.3.7` -> `==0.3.8` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [importlib-metadata](https://togithub.com/python/importlib_metadata) | `==7.0.0` -> `==7.0.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [lxml](https://lxml.de/) ([source](https://togithub.com/lxml/lxml), [changelog](https://git.launchpad.net/lxml/plain/CHANGES.txt)) | `==4.9.3` -> `==4.9.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [macaroonbakery](https://togithub.com/go-macaroon-bakery/py-macaroon-bakery) | `==1.3.1` -> `==1.3.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [pyfakefs](https://togithub.com/pytest-dev/pyfakefs) | `==5.3.0` -> `==5.3.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [pyright](https://togithub.com/RobertCraigie/pyright-python) | `==1.1.332` -> `==1.1.347` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [pytest](https://docs.pytest.org/en/latest/) ([source](https://togithub.com/pytest-dev/pytest), [changelog](https://docs.pytest.org/en/stable/changelog.html)) | `==7.4.2` -> `==7.4.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>tkem/cachetools (cachetools)</summary>
### [`v5.3.2`](https://togithub.com/tkem/cachetools/blob/HEAD/CHANGELOG.rst#v532-2023-10-24)
[Compare Source](https://togithub.com/tkem/cachetools/compare/v5.3.1...v5.3.2)
\===================
- Add support for Python 3.12.
- Various documentation improvements.
</details>
<details>
<summary>Ousret/charset_normalizer (charset-normalizer)</summary>
### [`v3.3.2`](https://togithub.com/Ousret/charset_normalizer/blob/HEAD/CHANGELOG.md#332-2023-10-31)
[Compare Source](https://togithub.com/Ousret/charset_normalizer/compare/3.3.1...3.3.2)
##### Fixed
- Unintentional memory usage regression when using large payload that match several encoding ([#​376](https://togithub.com/Ousret/charset_normalizer/issues/376))
- Regression on some detection case showcased in the documentation ([#​371](https://togithub.com/Ousret/charset_normalizer/issues/371))
##### Added
- Noise (md) probe that identify malformed arabic representation due to the presence of letters in isolated form (credit to my wife)
</details>
<details>
<summary>pyca/cryptography (cryptography)</summary>
### [`v41.0.7`](https://togithub.com/pyca/cryptography/compare/41.0.6...41.0.7)
[Compare Source](https://togithub.com/pyca/cryptography/compare/41.0.6...41.0.7)
</details>
<details>
<summary>pypa/distlib (distlib)</summary>
### [`v0.3.8`](https://togithub.com/pypa/distlib/compare/0.3.7...0.3.8)
[Compare Source](https://togithub.com/pypa/distlib/compare/0.3.7...0.3.8)
</details>
<details>
<summary>python/importlib_metadata (importlib-metadata)</summary>
### [`v7.0.1`](https://togithub.com/python/importlib_metadata/compare/v7.0.0...v7.0.1)
[Compare Source](https://togithub.com/python/importlib_metadata/compare/v7.0.0...v7.0.1)
</details>
<details>
<summary>lxml/lxml (lxml)</summary>
### [`v4.9.4`](https://togithub.com/lxml/lxml/blob/HEAD/CHANGES.txt#494-2023-12-19)
[Compare Source](https://togithub.com/lxml/lxml/compare/lxml-4.9.3...lxml-4.9.4)
\==================
## Bugs fixed
- [LP#2046398](https://togithub.com/LP/lxml/issues/2046398): Inserting/replacing an ancestor into a node's children could loop indefinitely.
- [LP#1980767](https://togithub.com/LP/lxml/issues/1980767), [GH#379](https://togithub.com/GH/lxml/issues/379): `TreeBuilder.close()` could fail with a `TypeError` after
parsing incorrect input. Original patch by Enrico Minack.
- [LP#1522052](https://togithub.com/LP/lxml/issues/1522052): A file-system specific test is now optional and should no longer fail
on systems that don't support it.
## Other changes
- Wheels include zlib 1.3, libxml2 2.10.3 and libxslt 1.1.39
(zlib 1.2.12, libxml2 2.10.3 and libxslt 1.1.37 on Windows).
- Built with Cython 0.29.37.
</details>
<details>
<summary>go-macaroon-bakery/py-macaroon-bakery (macaroonbakery)</summary>
### [`v1.3.4`](https://togithub.com/go-macaroon-bakery/py-macaroon-bakery/compare/1.3.3...1.3.4)
[Compare Source](https://togithub.com/go-macaroon-bakery/py-macaroon-bakery/compare/1.3.3...1.3.4)
</details>
<details>
<summary>pytest-dev/pyfakefs (pyfakefs)</summary>
### [`v5.3.4`](https://togithub.com/pytest-dev/pyfakefs/blob/HEAD/CHANGES.md#Version-534-2024-01-19)
[Compare Source](https://togithub.com/pytest-dev/pyfakefs/compare/v5.3.3...v5.3.4)
Bugfix release.
##### Fixes
- fixes handling of unhashable modules which cannot be cached (see [#​923](../../issues/923))
- reload modules loaded by the dynamic patcher instead of removing them - sometimes they may
not be reloaded automatically (see [#​932](../../issues/932))
- add back argument `use_dynamic_patch` as a fallback for similar problems
### [`v5.3.3`](https://togithub.com/pytest-dev/pyfakefs/releases/tag/v5.3.3): pyfakefs release version 5.3.3
[Compare Source](https://togithub.com/pytest-dev/pyfakefs/compare/v5.3.2...v5.3.3)
This is a bugfix release.
### [`v5.3.2`](https://togithub.com/pytest-dev/pyfakefs/blob/HEAD/CHANGES.md#Version-532-2023-11-30)
[Compare Source](https://togithub.com/pytest-dev/pyfakefs/compare/v5.3.1...v5.3.2)
Bugfix release.
##### Fixes
- fixed a problem with patching `_io` under Python 3.12 (see [#​910](../../issues/910))
- fixed a problem with accessing the temp path if emulating Linux under Windows
(see [#​912](../../issues/912))
- fixed result of `os.walk` with a path-like top directory
(see [#​915](../../issues/915))
- properly fixed the problem that filesystem patching was still active in the pytest
logreport phase (see [#​904](../../issues/904)), the previous fix was incomplete
### [`v5.3.1`](https://togithub.com/pytest-dev/pyfakefs/blob/HEAD/CHANGES.md#Version-531-2023-11-15)
[Compare Source](https://togithub.com/pytest-dev/pyfakefs/compare/v5.3.0...v5.3.1)
Mostly a bugfix release.
##### Changes
- changed behavior of `add_real_directory` to be able to map a real directory
to an existing directory in the fake filesystem (see [#​901](../../issues/901))
##### Fixes
- fixes the problem that filesystem patching was still active in the pytest
logreport phase (see [#​904](../../issues/904))
- Restores compatibility with PyTorch 2.0 and above, as well as with other
classes that have custom **setattr** methods (see [#​905](../../pull/905)).
</details>
<details>
<summary>RobertCraigie/pyright-python (pyright)</summary>
### [`v1.1.347`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.346...v1.1.347)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.346...v1.1.347)
### [`v1.1.346`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.345...v1.1.346)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.345...v1.1.346)
### [`v1.1.345`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.344...v1.1.345)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.344...v1.1.345)
### [`v1.1.344`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.343...v1.1.344)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.343...v1.1.344)
### [`v1.1.343`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.342...v1.1.343)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.342...v1.1.343)
### [`v1.1.342`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.341...v1.1.342)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.341...v1.1.342)
### [`v1.1.341`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.340...v1.1.341)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.340...v1.1.341)
### [`v1.1.340`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.339...v1.1.340)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.339...v1.1.340)
### [`v1.1.339`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.338...v1.1.339)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.338...v1.1.339)
### [`v1.1.338`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.337...v1.1.338)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.337...v1.1.338)
### [`v1.1.337`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.336...v1.1.337)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.336...v1.1.337)
### [`v1.1.336`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.335...v1.1.336)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.335...v1.1.336)
### [`v1.1.335`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.334...v1.1.335)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.334...v1.1.335)
### [`v1.1.334`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.333...v1.1.334)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.333...v1.1.334)
### [`v1.1.333`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.332...v1.1.333)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.332...v1.1.333)
</details>
<details>
<summary>pytest-dev/pytest (pytest)</summary>
### [`v7.4.4`](https://togithub.com/pytest-dev/pytest/compare/7.4.3...7.4.4)
[Compare Source](https://togithub.com/pytest-dev/pytest/compare/7.4.3...7.4.4)
### [`v7.4.3`](https://togithub.com/pytest-dev/pytest/releases/tag/v7.4.3): pytest 7.4.3 (2023-10-24)
[Compare Source](https://togithub.com/pytest-dev/pytest/compare/7.4.2...7.4.3)
## Bug Fixes
- [#​10447](https://togithub.com/pytest-dev/pytest/issues/10447): Markers are now considered in the reverse mro order to ensure base class markers are considered first -- this resolves a regression.
- [#​11239](https://togithub.com/pytest-dev/pytest/issues/11239): Fixed `:=` in asserts impacting unrelated test cases.
- [#​11439](https://togithub.com/pytest-dev/pytest/issues/11439): Handled an edge case where :data:`sys.stderr` might already be closed when :ref:`faulthandler` is tearing down.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMzUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjEzNS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #1486 as commit b6e26ca8, updating 12 pinned Python dependencies, including Jinja2 3.1.3, cryptography 41.0.7, lxml 4.9.4, and pytest 7.4.4. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate's "chore(deps): update bugfixes" PR merged as commit b6e26ca8, bumping 12 pinned Python deps in requirements.txt (Jinja2 3.1.3, MarkupSafe 2.1.4, cachetools 5.3.2, cryptography 41.0.7, lxml 4.9.4, pytest 7.4.4, pyright 1.1.347, etc.). | |
| stealth/space-bunny-alpha | — | closed resolved | Merged as b6e26ca8, this Renovate PR updated 12 pinned Python packages, including Jinja2 3.1.3, MarkupSafe 2.1.4, cachetools 5.3.2, and pytest 7.4.4. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency updates via Renovate bot. Twelve Python packages, including pytest and lxml, were upgraded to latest patch versions. Approved by two reviewers, passed CI, and merged automatically. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated dependency updates via Renovate. Twelve Python packages, including Jinja2, pytest, and cryptography, were upgraded to latest bugfix releases. Changes passed checks and were automatically merged. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1601 chore(deps): update bugfixes | charmcraft | merged | Merged PR #1601 as commit 545b8db5, updating six pinned dependencies: coverage 7.4.3, cryptography 42.0.5, importlib-metadata 7.0.2, keyring 24.3.1, pyparsing 3.1.2, and setuptools 69.1.1. | |
| #4473 chore(deps): update bugfixes | snapcraft | merged | Merged via #4473 in commit 662af4c00, updating eight pinned Python dependencies to newer bugfix releases, including pydantic 1.10.13, psutil 5.9.6, and pygit2 1.13.3. | |
| #536 chore(deps): update bugfixes | rockcraft | merged | Renovate bugfix PR merged as commit b33a48c9, bumping 11 dev/test dependencies (cachetools, coverage, cryptography, filelock, keyring, nh3, pyparsing, rich, tomlkit, virtualenv, wcmatch) across 3 files (+14/-14), with 2 approvals. | |
| #339 chore(deps): update bugfixes | rockcraft | merged | Renovate dependency bump PR merged as commit b72aed86 (urllib3 1.26.13->1.26.16, PyYAML 6.0->6.0.1, MarkupSafe, click, codespell, etc.) after the Pyright lint blocker was resolved in PR #342. | |
| #4789 chore(deps): update dependency jinja2 to v3.1.4 [security] | snapcraft | merged | Merged PR #4789 as commit 3869f7517, upgrading Jinja2 from 3.1.3 to 3.1.4 to remediate CVE-2024-34064. | |
| #619 chore(deps): update bugfixes | craft-providers | merged | Renovate PR merged via automerge as commit 5c12422 ("chore(deps): update bugfixes (#619)"), bumping pinned dev deps: freezegun 1.5.0->1.5.1, pyright 1.1.373->1.1.375, pytest-subprocess 1.5.0->1.5.2, responses 0.25.0->0.25.3. | |
| #4695 chore(deps): update bugfixes | snapcraft | merged | Renovate's weekly bugfix dependency bump for snapcraft's Python dev/test pins (MarkupSafe, cryptography, pydantic, pyright, tomlkit, virtualenv, etc.) was approved and merged into main as commit c056a64fe (6 files, +42/-36). | |
| #115 chore(deps): update development dependencies (non-major) | starbase | merged | Merged PR #115 as commit 6a8bb7f, updating pytest 7.4.0, pytest-mock 3.11.1, codespell 2.2.5, mypy 1.4.1, and pyright 1.1.316. | |
| #95 chore(deps): update development dependencies (non-major) | starbase | merged | Merged PR #95 updated pytest 7.3.1→7.3.2 and pyright-python 1.1.311→1.1.313; landed in main via commit 72c7781. | |
| #198 chore(deps): update bugfixes | craft-store | merged | Renovate PR #198 merged to main as commit e4ad9ee, bumping dev deps in pyproject.toml: coverage 7.6.0→7.6.1, mypy 1.11.0→1.11.1, pyright 1.1.372→1.1.375, pytest 8.3.1→8.3.2 (+4/-4 lines). |