build(deps): update bugfixes (hotfix/2.7)
Metadata
Current evaluation
Merged automated dependency updates for Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs to hotfix/2.7. Approved by two reviewers, passed CI, and merged via Renovate automerge.
Suggested action: —
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [Jinja2](https://togithub.com/pallets/jinja) ([changelog](https://jinja.palletsprojects.com/changes/)) | `==3.1.3` -> `==3.1.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [MarkupSafe](https://palletsprojects.com/p/markupsafe/) ([changelog](https://markupsafe.palletsprojects.com/changes/)) | `==2.1.4` -> `==2.1.5` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [PyYAML](https://pyyaml.org/) ([source](https://togithub.com/yaml/pyyaml)) | `==6.0.1` -> `==6.0.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [pyright](https://togithub.com/RobertCraigie/pyright-python) | `==1.1.332` -> `==1.1.377` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [pytest-subprocess](https://togithub.com/aklajnert/pytest-subprocess) | `==1.5.0` -> `==1.5.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [tox-gh](https://togithub.com/tox-dev/tox-gh#tox-gh) | `1.3.1` -> `1.3.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [tox-gh](https://togithub.com/tox-dev/tox-gh#tox-gh) | `==1.3.1` -> `==1.3.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [types-Deprecated](https://togithub.com/python/typeshed) ([changelog](https://togithub.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/Deprecated.md)) | `==1.2.9.20240106` -> `==1.2.9.20240311` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [types-PyYAML](https://togithub.com/python/typeshed) ([changelog](https://togithub.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/PyYAML.md)) | `==6.0.12.12` -> `==6.0.12.20240808` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>pallets/jinja (Jinja2)</summary>
### [`v3.1.4`](https://togithub.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-314)
[Compare Source](https://togithub.com/pallets/jinja/compare/3.1.3...3.1.4)
Released 2024-05-05
- The `xmlattr` filter does not allow keys with `/` solidus, `>`
greater-than sign, or `=` equals sign, in addition to disallowing spaces.
Regardless of any validation done by Jinja, user input should never be used
as keys to this filter, or must be separately validated first.
:ghsa:`h75v-3vvj-5mfj`
</details>
<details>
<summary>yaml/pyyaml (PyYAML)</summary>
### [`v6.0.2`](https://togithub.com/yaml/pyyaml/releases/tag/6.0.2)
[Compare Source](https://togithub.com/yaml/pyyaml/compare/6.0.1...6.0.2)
#### What's Changed
- Support for Cython 3.x and Python 3.13.
**Full Changelog**: https://github.com/yaml/pyyaml/compare/6.0.1...6.0.2
</details>
<details>
<summary>RobertCraigie/pyright-python (pyright)</summary>
### [`v1.1.377`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.376...v1.1.377)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.376...v1.1.377)
### [`v1.1.376`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.375...v1.1.376)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.375...v1.1.376)
### [`v1.1.375`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.374...v1.1.375)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.374...v1.1.375)
### [`v1.1.374`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.373...v1.1.374)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.373...v1.1.374)
### [`v1.1.373`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.372...v1.1.373)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.372...v1.1.373)
### [`v1.1.372`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.371...v1.1.372)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.371...v1.1.372)
### [`v1.1.371`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.370...v1.1.371)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.370...v1.1.371)
### [`v1.1.370`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.369...v1.1.370)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.369...v1.1.370)
### [`v1.1.369`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.368...v1.1.369)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.368...v1.1.369)
### [`v1.1.368`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.367...v1.1.368)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.367...v1.1.368)
### [`v1.1.367`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.366...v1.1.367)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.366...v1.1.367)
### [`v1.1.366`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.365...v1.1.366)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.365...v1.1.366)
### [`v1.1.365`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.364...v1.1.365)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.364...v1.1.365)
### [`v1.1.364`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.363...v1.1.364)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.363...v1.1.364)
### [`v1.1.363`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.362...v1.1.363)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.362...v1.1.363)
### [`v1.1.362`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.361...v1.1.362)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.361...v1.1.362)
### [`v1.1.361`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.360...v1.1.361)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.360...v1.1.361)
### [`v1.1.360`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.359...v1.1.360)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.359...v1.1.360)
### [`v1.1.359`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.358...v1.1.359)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.358...v1.1.359)
### [`v1.1.358`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.357...v1.1.358)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.357...v1.1.358)
### [`v1.1.357`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.356...v1.1.357)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.356...v1.1.357)
### [`v1.1.356`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.355...v1.1.356)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.355...v1.1.356)
### [`v1.1.355`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.354...v1.1.355)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.354...v1.1.355)
### [`v1.1.354`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.353...v1.1.354)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.353...v1.1.354)
### [`v1.1.353`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.352...v1.1.353)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.352...v1.1.353)
### [`v1.1.352`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.351...v1.1.352)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.351...v1.1.352)
### [`v1.1.351`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.350...v1.1.351)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.350...v1.1.351)
### [`v1.1.350`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.349...v1.1.350)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.349...v1.1.350)
### [`v1.1.349`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.348...v1.1.349)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.348...v1.1.349)
### [`v1.1.348`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.347...v1.1.348)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.347...v1.1.348)
### [`v1.1.347`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.346...v1.1.347)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.346...v1.1.347)
### [`v1.1.346`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.345...v1.1.346)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.345...v1.1.346)
### [`v1.1.345`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.344...v1.1.345)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.344...v1.1.345)
### [`v1.1.344`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.343...v1.1.344)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.343...v1.1.344)
### [`v1.1.343`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.342...v1.1.343)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.342...v1.1.343)
### [`v1.1.342`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.341...v1.1.342)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.341...v1.1.342)
### [`v1.1.341`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.340...v1.1.341)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.340...v1.1.341)
### [`v1.1.340`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.339...v1.1.340)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.339...v1.1.340)
### [`v1.1.339`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.338...v1.1.339)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.338...v1.1.339)
### [`v1.1.338`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.337...v1.1.338)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.337...v1.1.338)
### [`v1.1.337`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.336...v1.1.337)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.336...v1.1.337)
### [`v1.1.336`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.335...v1.1.336)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.335...v1.1.336)
### [`v1.1.335`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.334...v1.1.335)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.334...v1.1.335)
### [`v1.1.334`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.333...v1.1.334)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.333...v1.1.334)
### [`v1.1.333`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.332...v1.1.333)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.332...v1.1.333)
</details>
<details>
<summary>aklajnert/pytest-subprocess (pytest-subprocess)</summary>
### [`v1.5.2`](https://togithub.com/aklajnert/pytest-subprocess/blob/HEAD/HISTORY.rst#152-2024-07-24)
[Compare Source](https://togithub.com/aklajnert/pytest-subprocess/compare/1.5.1...1.5.2)
Bug fixes
* `#​162 <https://github.com/aklajnert/pytest-subprocess/pull/162>`_: Include tests (and docs) and sdist correctly, and stop installing them to site-packages.
Other changes
- `#​163 <https://github.com/aklajnert/pytest-subprocess/pull/163>`\_: Add support for Python 3.12.
### [`v1.5.1`](https://togithub.com/aklajnert/pytest-subprocess/blob/HEAD/HISTORY.rst#151-2024-07-23)
[Compare Source](https://togithub.com/aklajnert/pytest-subprocess/compare/1.5.0...1.5.1)
Other changes
* `#​160 <https://github.com/aklajnert/pytest-subprocess/pull/160>`_: Changed pytest entrypoint to avoid error while loading plugin with `-p` argument.
* `#​128 <https://github.com/aklajnert/pytest-subprocess/pull/128>`_: Add `tests` directory to sdist.
</details>
<details>
<summary>tox-dev/tox-gh (tox-gh)</summary>
### [`v1.3.2`](https://togithub.com/tox-dev/tox-gh/releases/tag/1.3.2)
[Compare Source](https://togithub.com/tox-dev/tox-gh/compare/1.3.1...1.3.2)
<!-- Release notes generated using configuration in .github/release.yml at main -->
##### What's Changed
- Fix CI by [@​gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox-gh/pull/106](https://togithub.com/tox-dev/tox-gh/pull/106)
- Fix the CI by [@​gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox-gh/pull/121](https://togithub.com/tox-dev/tox-gh/pull/121)
**Full Changelog**: https://github.com/tox-dev/tox-gh/compare/1.3.1...1.3.2
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguNTYuMCIsInRhcmdldEJyYW5jaCI6ImhvdGZpeC8yLjciLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency updates for Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs to hotfix/2.7. Approved by two reviewers, passed CI, and merged via Renovate automerge. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated dependency updates for bugfixes on the hotfix/2.7 branch. Updated Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs. Auto-merged by Renovate bot after CI passed. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated dependency updates for Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, types-Deprecated, and types-PyYAML to hotfix/2.7. The renovate[bot] PR successfully applied bugfix and security releases. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #2422 build(deps): update bugfixes (hotfix/2.7) | charmcraft | merged | Merged automated dependency updates for jinja2, pydantic, pyyaml, requests, and types-pyyaml to hotfix/2.7. The Renovate-generated request included security and bugfix releases, passed CI checks, and was automerged. | |
| #4974 build(deps): update bugfixes (hotfix/7.5) | snapcraft | merged | Merged automated dependency updates for bugfixes on the hotfix/7.5 branch. Renovate upgraded multiple Python packages including Jinja2, PyYAML, click, and pylint. Approved by reviewers and passed CI checks before auto-merging. | |
| #5058 build(deps): update bugfixes (main) | snapcraft | merged | Merged automated dependency updates to main via Renovate. Updated mdit-py-plugins, pytest, starlette, types-PyYAML, virtualenv, and zipp to latest patch releases. CI passed, received two approvals, and was auto-merged. | |
| #226 build(deps): update bugfixes | craft-store | merged | Merged automated dependency updates for coverage, pyright, and sphinx-tabs to their latest bugfix versions. Approved by two reviewers, passed CI, and merged automatically via Renovate. | |
| #209 build(deps): update bugfixes | craft-store | merged | Merged automated dependency updates for mypy, pyright, pytest, and tox-gh. The Renovate bot request passed CI checks, received two approvals, and was automatically merged into the main branch. | |
| #317 build(deps): update bugfixes (main) | craft-store | merged | Merged automated dependency updates via Renovate. Upgraded ruff-pre-commit to v0.12.12, coverage to v7.10.6, and pytest to v8.4.2. Approved by two reviewers, passed all CI checks, and merged into main. | |
| #270 build(deps): update bugfixes (main) | craft-store | closed | Automatically merged via Renovate after passing CI and approval. Updated patch versions for ruff-pre-commit, coverage, pytest, and sphinx-toolbox to apply bug fixes and improve compatibility. | |
| #510 build(deps): update bugfixes (main) | craft-application | merged | Merged automatically via Renovate bot following two approvals and passing CI. Updated pytest to 8.3.3 and setuptools to 74.1.3 to apply upstream bug fixes. Single file changed with minimal diff. | |
| #130 build(deps): update bugfixes (main) | craft-archives | merged | Merged to main via Renovate automerge. Updated pytest to 7.4.4 and python-gnupg to 0.5.4 to apply upstream bug fixes. Approved by two reviewers, passed CI checks, and committed. | |
| #1296 build(deps): update bugfixes (main) | craft-parts | merged | Merged automated dependency updates for bugfixes across eight packages. Approved by two reviewers, passed all CI checks, and merged via the Renovate bot. |