build(deps): update bugfixes (hotfix/2.7)
Metadata
Current evaluation
Renovate bugfix dependency updates merged into hotfix/2.7 as commit b92c6d62, bumping Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs.
Resolution: closed resolved
Reason: PR canonical/charmcraft#1846 was merged into hotfix/2.7 as commit b92c6d62. The merged change delivered the listed dependency and tooling updates.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [Jinja2](https://togithub.com/pallets/jinja) ([changelog](https://jinja.palletsprojects.com/changes/)) | `==3.1.3` -> `==3.1.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [MarkupSafe](https://palletsprojects.com/p/markupsafe/) ([changelog](https://markupsafe.palletsprojects.com/changes/)) | `==2.1.4` -> `==2.1.5` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [PyYAML](https://pyyaml.org/) ([source](https://togithub.com/yaml/pyyaml)) | `==6.0.1` -> `==6.0.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [pyright](https://togithub.com/RobertCraigie/pyright-python) | `==1.1.332` -> `==1.1.377` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [pytest-subprocess](https://togithub.com/aklajnert/pytest-subprocess) | `==1.5.0` -> `==1.5.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [tox-gh](https://togithub.com/tox-dev/tox-gh#tox-gh) | `1.3.1` -> `1.3.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [tox-gh](https://togithub.com/tox-dev/tox-gh#tox-gh) | `==1.3.1` -> `==1.3.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [types-Deprecated](https://togithub.com/python/typeshed) ([changelog](https://togithub.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/Deprecated.md)) | `==1.2.9.20240106` -> `==1.2.9.20240311` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [types-PyYAML](https://togithub.com/python/typeshed) ([changelog](https://togithub.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/PyYAML.md)) | `==6.0.12.12` -> `==6.0.12.20240808` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>pallets/jinja (Jinja2)</summary>
### [`v3.1.4`](https://togithub.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-314)
[Compare Source](https://togithub.com/pallets/jinja/compare/3.1.3...3.1.4)
Released 2024-05-05
- The `xmlattr` filter does not allow keys with `/` solidus, `>`
greater-than sign, or `=` equals sign, in addition to disallowing spaces.
Regardless of any validation done by Jinja, user input should never be used
as keys to this filter, or must be separately validated first.
:ghsa:`h75v-3vvj-5mfj`
</details>
<details>
<summary>yaml/pyyaml (PyYAML)</summary>
### [`v6.0.2`](https://togithub.com/yaml/pyyaml/releases/tag/6.0.2)
[Compare Source](https://togithub.com/yaml/pyyaml/compare/6.0.1...6.0.2)
#### What's Changed
- Support for Cython 3.x and Python 3.13.
**Full Changelog**: https://github.com/yaml/pyyaml/compare/6.0.1...6.0.2
</details>
<details>
<summary>RobertCraigie/pyright-python (pyright)</summary>
### [`v1.1.377`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.376...v1.1.377)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.376...v1.1.377)
### [`v1.1.376`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.375...v1.1.376)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.375...v1.1.376)
### [`v1.1.375`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.374...v1.1.375)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.374...v1.1.375)
### [`v1.1.374`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.373...v1.1.374)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.373...v1.1.374)
### [`v1.1.373`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.372...v1.1.373)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.372...v1.1.373)
### [`v1.1.372`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.371...v1.1.372)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.371...v1.1.372)
### [`v1.1.371`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.370...v1.1.371)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.370...v1.1.371)
### [`v1.1.370`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.369...v1.1.370)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.369...v1.1.370)
### [`v1.1.369`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.368...v1.1.369)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.368...v1.1.369)
### [`v1.1.368`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.367...v1.1.368)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.367...v1.1.368)
### [`v1.1.367`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.366...v1.1.367)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.366...v1.1.367)
### [`v1.1.366`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.365...v1.1.366)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.365...v1.1.366)
### [`v1.1.365`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.364...v1.1.365)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.364...v1.1.365)
### [`v1.1.364`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.363...v1.1.364)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.363...v1.1.364)
### [`v1.1.363`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.362...v1.1.363)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.362...v1.1.363)
### [`v1.1.362`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.361...v1.1.362)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.361...v1.1.362)
### [`v1.1.361`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.360...v1.1.361)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.360...v1.1.361)
### [`v1.1.360`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.359...v1.1.360)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.359...v1.1.360)
### [`v1.1.359`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.358...v1.1.359)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.358...v1.1.359)
### [`v1.1.358`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.357...v1.1.358)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.357...v1.1.358)
### [`v1.1.357`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.356...v1.1.357)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.356...v1.1.357)
### [`v1.1.356`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.355...v1.1.356)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.355...v1.1.356)
### [`v1.1.355`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.354...v1.1.355)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.354...v1.1.355)
### [`v1.1.354`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.353...v1.1.354)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.353...v1.1.354)
### [`v1.1.353`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.352...v1.1.353)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.352...v1.1.353)
### [`v1.1.352`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.351...v1.1.352)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.351...v1.1.352)
### [`v1.1.351`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.350...v1.1.351)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.350...v1.1.351)
### [`v1.1.350`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.349...v1.1.350)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.349...v1.1.350)
### [`v1.1.349`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.348...v1.1.349)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.348...v1.1.349)
### [`v1.1.348`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.347...v1.1.348)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.347...v1.1.348)
### [`v1.1.347`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.346...v1.1.347)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.346...v1.1.347)
### [`v1.1.346`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.345...v1.1.346)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.345...v1.1.346)
### [`v1.1.345`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.344...v1.1.345)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.344...v1.1.345)
### [`v1.1.344`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.343...v1.1.344)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.343...v1.1.344)
### [`v1.1.343`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.342...v1.1.343)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.342...v1.1.343)
### [`v1.1.342`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.341...v1.1.342)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.341...v1.1.342)
### [`v1.1.341`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.340...v1.1.341)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.340...v1.1.341)
### [`v1.1.340`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.339...v1.1.340)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.339...v1.1.340)
### [`v1.1.339`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.338...v1.1.339)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.338...v1.1.339)
### [`v1.1.338`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.337...v1.1.338)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.337...v1.1.338)
### [`v1.1.337`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.336...v1.1.337)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.336...v1.1.337)
### [`v1.1.336`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.335...v1.1.336)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.335...v1.1.336)
### [`v1.1.335`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.334...v1.1.335)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.334...v1.1.335)
### [`v1.1.334`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.333...v1.1.334)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.333...v1.1.334)
### [`v1.1.333`](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.332...v1.1.333)
[Compare Source](https://togithub.com/RobertCraigie/pyright-python/compare/v1.1.332...v1.1.333)
</details>
<details>
<summary>aklajnert/pytest-subprocess (pytest-subprocess)</summary>
### [`v1.5.2`](https://togithub.com/aklajnert/pytest-subprocess/blob/HEAD/HISTORY.rst#152-2024-07-24)
[Compare Source](https://togithub.com/aklajnert/pytest-subprocess/compare/1.5.1...1.5.2)
Bug fixes
* `#​162 <https://github.com/aklajnert/pytest-subprocess/pull/162>`_: Include tests (and docs) and sdist correctly, and stop installing them to site-packages.
Other changes
- `#​163 <https://github.com/aklajnert/pytest-subprocess/pull/163>`\_: Add support for Python 3.12.
### [`v1.5.1`](https://togithub.com/aklajnert/pytest-subprocess/blob/HEAD/HISTORY.rst#151-2024-07-23)
[Compare Source](https://togithub.com/aklajnert/pytest-subprocess/compare/1.5.0...1.5.1)
Other changes
* `#​160 <https://github.com/aklajnert/pytest-subprocess/pull/160>`_: Changed pytest entrypoint to avoid error while loading plugin with `-p` argument.
* `#​128 <https://github.com/aklajnert/pytest-subprocess/pull/128>`_: Add `tests` directory to sdist.
</details>
<details>
<summary>tox-dev/tox-gh (tox-gh)</summary>
### [`v1.3.2`](https://togithub.com/tox-dev/tox-gh/releases/tag/1.3.2)
[Compare Source](https://togithub.com/tox-dev/tox-gh/compare/1.3.1...1.3.2)
<!-- Release notes generated using configuration in .github/release.yml at main -->
##### What's Changed
- Fix CI by [@​gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox-gh/pull/106](https://togithub.com/tox-dev/tox-gh/pull/106)
- Fix the CI by [@​gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox-gh/pull/121](https://togithub.com/tox-dev/tox-gh/pull/121)
**Full Changelog**: https://github.com/tox-dev/tox-gh/compare/1.3.1...1.3.2
</details>
---
### Configuration
π
**Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
π¦ **Automerge**: Enabled.
β» **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
π» **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguNTYuMCIsInRhcmdldEJyYW5jaCI6ImhvdGZpeC8yLjciLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | β | closed resolved | Renovate bugfix dependency updates merged into hotfix/2.7 as commit b92c6d62, bumping Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs. | |
| stealth/space-bunny-alpha | β | closed resolved | Renovateβs bugfix dependency batch merged into hotfix/2.7 as commit b92c6d62, updating Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs. | |
| qwen/qwen3.6-35b-a3b | β | β | Merged automated dependency updates for Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs to hotfix/2.7. Approved by two reviewers, passed CI, and merged via Renovate automerge. | |
| qwen3.6-35b-a3b-mtp-q6 | β | β | Merged automated dependency updates for bugfixes on the hotfix/2.7 branch. Updated Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs. Auto-merged by Renovate bot after CI passed. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #4974 build(deps): update bugfixes (hotfix/7.5) | snapcraft | merged | Renovate bugfix dependency updates were merged into hotfix/7.5 via #4974 (commit 654871d45), including Jinja2, PyYAML, MarkupSafe, click, and pylint upgrades. | |
| #2422 build(deps): update bugfixes (hotfix/2.7) | charmcraft | merged | Merged PR #2422 into hotfix/2.7, bumping Jinja2 3.1.6, Pydantic 1.10.24, PyYAML 6.0.3, Requests 2.32.5, and types-PyYAML 20250915. | |
| #843 build(deps): update bugfixes (hotfix/2.1) | craft-providers | closed | Merged Renovate PR #843 into hotfix/2.1, updating freezegun, pytest-subprocess, responses, types-pyyaml, and types-requests. | |
| #696 build(deps): update bugfixes (hotfix/1.20) | craft-providers | merged | Renovate PR #696 merged into hotfix/1.20, updating coverage to 7.6.3, pyright to 1.1.385, and sphinx-tabs to 3.4.7. | |
| #700 build(deps): update bugfixes (hotfix/1.20) | craft-providers | merged | Renovate updates for coverage 7.6.4 and pyright 1.1.386 were merged into hotfix/1.20 via PR #700 (commit 5e43791). | |
| #270 build(deps): update bugfixes (main) | craft-store | closed | Renovate dependency updates were merged, applying ruff-pre-commit 0.9.3β0.9.6, coverage 7.6.2β7.6.12, pytest 8.3.3β8.3.4, and sphinx-toolbox 3.8.0β3.8.2. | |
| #2922 build(deps): update bugfixes (hotfix/2.7) | charmcraft | merged | Merged dependency update PR #2922 by Renovate, upgrading protobuf to 4.25.9, pydantic to 1.10.26, and types-pyyaml to 6.0.12.20260906 on the hotfix/2.7 branch. | |
| #4977 build(deps): update bugfixes (hotfix/8.3) | snapcraft | merged | Merged Renovate dependency bugfix updates for hotfix/8.3, including PyYAML 6.0.2 and cryptography 42.0.8, in commit 7bee67cd7. | |
| #686 build(deps): update bugfixes (main) | craft-providers | merged | Renovate PR merged into main, bumping coverage 7.6.1β7.6.2, pyright 1.1.383β1.1.384, sphinx-tabs 3.4.5β3.4.7 and tox-gh 1.4.1β1.4.4 (+4/-4 lines) with automerge enabled. | |
| #682 build(deps): update bugfixes (hotfix/1.20) | craft-providers | merged | Renovate PR #682 merged into hotfix/1.20, updating lxd-sphinx-extensions, pyright, pytest, and related development and documentation dependencies to bugfix releases. |