build(deps): update bugfixes (hotfix/2.7)
Metadata
Current evaluation
Merged automated dependency updates for jinja2, pydantic, pyyaml, requests, and types-pyyaml to hotfix/2.7. The Renovate-generated request included security and bugfix releases, passed CI checks, and was automerged.
Suggested action: —
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [jinja2](https://redirect.github.com/pallets/jinja) ([changelog](https://jinja.palletsprojects.com/changes/)) | `==3.1.5` -> `==3.1.6` |  |  |
| [pydantic](https://redirect.github.com/pydantic/pydantic) ([changelog](https://docs.pydantic.dev/latest/changelog/)) | `==1.10.21` -> `==1.10.24` |  |  |
| [pyyaml](https://pyyaml.org/) ([source](https://redirect.github.com/yaml/pyyaml)) | `==6.0.2` -> `==6.0.3` |  |  |
| [requests](https://requests.readthedocs.io) ([source](https://redirect.github.com/psf/requests), [changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md)) | `==2.32.3` -> `==2.32.5` |  |  |
| [types-pyyaml](https://redirect.github.com/python/typeshed) ([changelog](https://redirect.github.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/PyYAML.md)) | `==6.0.12.20241230` -> `==6.0.12.20250915` |  |  |
---
### Release Notes
<details>
<summary>pallets/jinja (jinja2)</summary>
### [`v3.1.6`](https://redirect.github.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-316)
[Compare Source](https://redirect.github.com/pallets/jinja/compare/3.1.5...3.1.6)
Released 2025-03-05
- The `|attr` filter does not bypass the environment's attribute lookup,
allowing the sandbox to apply its checks. :ghsa:`cpwx-vrp4-4pq7`
</details>
<details>
<summary>pydantic/pydantic (pydantic)</summary>
### [`v1.10.24`](https://redirect.github.com/pydantic/pydantic/blob/HEAD/HISTORY.md#v2120-2025-10-07)
[Compare Source](https://redirect.github.com/pydantic/pydantic/compare/v1.10.23...v1.10.24)
[GitHub release](https://redirect.github.com/pydantic/pydantic/releases/tag/v2.12.0)
##### What's Changed
This is the final 2.12 release. It features the work of 20 external contributors and provides useful new features, along with initial Python 3.14 support.
Several minor changes (considered non-breaking changes according to our [versioning policy](https://docs.pydantic.dev/2.12/version-policy/#pydantic-v2))
are also included in this release. Make sure to look into them before upgrading.
**Note that Pydantic V1 is not compatible with Python 3.14 and greater**.
Changes (see the alpha and beta releases for additional changes since 2.11):
##### Packaging
- Update V1 copy to v1.10.24 by [@​Viicos](https://redirect.github.com/Viicos) in [#​12338](https://redirect.github.com/pydantic/pydantic/pull/12338)
##### New Features
- Add `extra` parameter to the validate functions by [@​anvilpete](https://redirect.github.com/anvilpete) in [#​12233](https://redirect.github.com/pydantic/pydantic/pull/12233)
- Add `exclude_computed_fields` serialization option by [@​Viicos](https://redirect.github.com/Viicos) in [#​12334](https://redirect.github.com/pydantic/pydantic/pull/12334)
- Add `preverse_empty_path` URL options by [@​Viicos](https://redirect.github.com/Viicos) in [#​12336](https://redirect.github.com/pydantic/pydantic/pull/12336)
- Add `union_format` parameter to JSON Schema generation by [@​Viicos](https://redirect.github.com/Viicos) in [#​12147](https://redirect.github.com/pydantic/pydantic/pull/12147)
- Add `__qualname__` parameter for `create_model` by [@​Atry](https://redirect.github.com/Atry) in [#​12001](https://redirect.github.com/pydantic/pydantic/pull/12001)
##### Fixes
- Do not try to infer name from lambda definitions in pipelines API by [@​Viicos](https://redirect.github.com/Viicos) in [#​12289](https://redirect.github.com/pydantic/pydantic/pull/12289)
- Use proper namespace for functions in `TypeAdapter` by [@​Viicos](https://redirect.github.com/Viicos) in [#​12324](https://redirect.github.com/pydantic/pydantic/pull/12324)
- Use `Any` for context type annotation in `TypeAdapter` by [@​inducer](https://redirect.github.com/inducer) in [#​12279](https://redirect.github.com/pydantic/pydantic/pull/12279)
- Expose `FieldInfo` in `pydantic.fields.__all__` by [@​Viicos](https://redirect.github.com/Viicos) in [#​12339](https://redirect.github.com/pydantic/pydantic/pull/12339)
- Respect `validation_alias` in `@validate_call` by [@​Viicos](https://redirect.github.com/Viicos) in [#​12340](https://redirect.github.com/pydantic/pydantic/pull/12340)
- Use `Any` as context annotation in plugin API by [@​Viicos](https://redirect.github.com/Viicos) in [#​12341](https://redirect.github.com/pydantic/pydantic/pull/12341)
- Use proper `stacklevel` in warnings when possible by [@​Viicos](https://redirect.github.com/Viicos) in [#​12342](https://redirect.github.com/pydantic/pydantic/pull/12342)
##### New Contributors
- [@​anvilpete](https://redirect.github.com/anvilpete) made their first contribution in [#​12233](https://redirect.github.com/pydantic/pydantic/pull/12233)
- [@​JonathanWindell](https://redirect.github.com/JonathanWindell) made their first contribution in [#​12327](https://redirect.github.com/pydantic/pydantic/pull/12327)
- [@​inducer](https://redirect.github.com/inducer) made their first contribution in [#​12279](https://redirect.github.com/pydantic/pydantic/pull/12279)
- [@​Atry](https://redirect.github.com/Atry) made their first contribution in [#​12001](https://redirect.github.com/pydantic/pydantic/pull/12001)
### [`v1.10.23`](https://redirect.github.com/pydantic/pydantic/blob/HEAD/HISTORY.md#v11023-2025-09-13)
[Compare Source](https://redirect.github.com/pydantic/pydantic/compare/v1.10.22...v1.10.23)
- Fix mypy plugin for mypy 1.18 by [@​cdce8p](https://redirect.github.com/cdce8p) in [#​12207](https://redirect.github.com/pydantic/pydantic/pull/12207)
### [`v1.10.22`](https://redirect.github.com/pydantic/pydantic/blob/HEAD/HISTORY.md#v11022-2025-04-17)
[Compare Source](https://redirect.github.com/pydantic/pydantic/compare/v1.10.21...v1.10.22)
- Fix compatibility with `typing-extensions` by [@​Viicos](https://redirect.github.com/Viicos) in [#​11764](https://redirect.github.com/pydantic/pydantic/pull/11764)
</details>
<details>
<summary>yaml/pyyaml (pyyaml)</summary>
### [`v6.0.3`](https://redirect.github.com/yaml/pyyaml/releases/tag/6.0.3)
[Compare Source](https://redirect.github.com/yaml/pyyaml/compare/6.0.2...6.0.3)
#### What's Changed
- Support for Python 3.14 and free-threading (experimental).
**Full Changelog**: <https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3>
</details>
<details>
<summary>psf/requests (requests)</summary>
### [`v2.32.5`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2325-2025-08-18)
[Compare Source](https://redirect.github.com/psf/requests/compare/v2.32.4...v2.32.5)
**Bugfixes**
- The SSLContext caching feature originally introduced in 2.32.0 has created
a new class of issues in Requests that have had negative impact across a number
of use cases. The Requests team has decided to revert this feature as long term
maintenance of it is proving to be unsustainable in its current iteration.
**Deprecations**
- Added support for Python 3.14.
- Dropped support for Python 3.8 following its end of support.
### [`v2.32.4`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2324-2025-06-10)
[Compare Source](https://redirect.github.com/psf/requests/compare/v2.32.3...v2.32.4)
**Security**
- CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted
environment will retrieve credentials for the wrong hostname/machine from a
netrc file.
**Improvements**
- Numerous documentation improvements
**Deprecations**
- Added support for pypy 3.11 for Linux and macOS.
- Dropped support for pypy 3.9 following its end of support.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS43MS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzIuMiIsInRhcmdldEJyYW5jaCI6ImhvdGZpeC8yLjciLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency updates for jinja2, pydantic, pyyaml, requests, and types-pyyaml to hotfix/2.7. The Renovate-generated request included security and bugfix releases, passed CI checks, and was automerged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Automated dependency updates for jinja2, pydantic, pyyaml, requests, and types-pyyaml were merged into hotfix/2.7 via Renovate bot. The merge applies security patches, bug fixes, and Python 3.14 compatibility improvements. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Renovate bot automatically merged dependency updates for jinja2, pydantic, pyyaml, requests, and types-pyyaml into the hotfix/2.7 branch, applying security patches and bugfixes. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1846 build(deps): update bugfixes (hotfix/2.7) | charmcraft | merged | Merged automated dependency updates for Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs to hotfix/2.7. Approved by two reviewers, passed CI, and merged via Renovate automerge. | |
| #4974 build(deps): update bugfixes (hotfix/7.5) | snapcraft | merged | Merged automated dependency updates for bugfixes on the hotfix/7.5 branch. Renovate upgraded multiple Python packages including Jinja2, PyYAML, click, and pylint. Approved by reviewers and passed CI checks before auto-merging. | |
| #5058 build(deps): update bugfixes (main) | snapcraft | merged | Merged automated dependency updates to main via Renovate. Updated mdit-py-plugins, pytest, starlette, types-PyYAML, virtualenv, and zipp to latest patch releases. CI passed, received two approvals, and was auto-merged. | |
| #209 build(deps): update bugfixes | craft-store | merged | Merged automated dependency updates for mypy, pyright, pytest, and tox-gh. The Renovate bot request passed CI checks, received two approvals, and was automatically merged into the main branch. | |
| #2175 build(deps): update bugfixes (main) | charmcraft | closed | Automatically merged to update several Python packages and pre-commit tools to their latest patch versions. The Renovate bot applied the dependency upgrades without manual intervention. | |
| #5191 build(deps): update dependency jinja2 to v3.1.5 [security] (hotfix/7.5) - autoclosed | snapcraft | closed | Automatically closed without merging. The Renovate PR updated Jinja2 to v3.1.5 to patch CVE-2024-56326 and CVE-2024-56201. Despite approvals and passing CI, the branch was autoclosed. | |
| #5308 build(deps): update dependency jinja2 to v3.1.6 [security] (hotfix/8.6) | snapcraft | closed | Automatically merged via Renovate to update Jinja2 to v3.1.6, resolving CVE-2025-27516. Applied to hotfix/8.6 without manual review. | |
| #2189 build(deps): update bugfixes (main) | charmcraft | merged | Merged automated patch updates for 16 dependencies via Renovate, including numpy, poetry, pylint, and ruff-pre-commit. Upgrades resolve reported bugs and improve stability. All required CI checks passed, triggering automatic merge. | |
| #2342 build(deps): update dependency types-requests (main) | charmcraft | merged | Merged an automated Renovate update upgrading types-requests from <2.31.0.20240312 to <2.32.4.20250612. Approved by two reviewers, the dependency update was merged despite minor CI failures and a rebase notification. | |
| #510 build(deps): update bugfixes (main) | craft-application | merged | Merged automatically via Renovate bot following two approvals and passing CI. Updated pytest to 8.3.3 and setuptools to 74.1.3 to apply upstream bug fixes. Single file changed with minimal diff. |