build(deps): update bugfixes (hotfix/2.7)
Metadata
Current evaluation
Merged PR #2422 into hotfix/2.7, bumping Jinja2 3.1.6, Pydantic 1.10.24, PyYAML 6.0.3, Requests 2.32.5, and types-PyYAML 20250915.
Resolution: closed resolved
Reason: PR #2422 was merged after approval by two reviewers, with no unresolved review comments. Its diff applied the five dependency updates to hotfix/2.7.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [jinja2](https://redirect.github.com/pallets/jinja) ([changelog](https://jinja.palletsprojects.com/changes/)) | `==3.1.5` -> `==3.1.6` |  |  |
| [pydantic](https://redirect.github.com/pydantic/pydantic) ([changelog](https://docs.pydantic.dev/latest/changelog/)) | `==1.10.21` -> `==1.10.24` |  |  |
| [pyyaml](https://pyyaml.org/) ([source](https://redirect.github.com/yaml/pyyaml)) | `==6.0.2` -> `==6.0.3` |  |  |
| [requests](https://requests.readthedocs.io) ([source](https://redirect.github.com/psf/requests), [changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md)) | `==2.32.3` -> `==2.32.5` |  |  |
| [types-pyyaml](https://redirect.github.com/python/typeshed) ([changelog](https://redirect.github.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/PyYAML.md)) | `==6.0.12.20241230` -> `==6.0.12.20250915` |  |  |
---
### Release Notes
<details>
<summary>pallets/jinja (jinja2)</summary>
### [`v3.1.6`](https://redirect.github.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-316)
[Compare Source](https://redirect.github.com/pallets/jinja/compare/3.1.5...3.1.6)
Released 2025-03-05
- The `|attr` filter does not bypass the environment's attribute lookup,
allowing the sandbox to apply its checks. :ghsa:`cpwx-vrp4-4pq7`
</details>
<details>
<summary>pydantic/pydantic (pydantic)</summary>
### [`v1.10.24`](https://redirect.github.com/pydantic/pydantic/blob/HEAD/HISTORY.md#v2120-2025-10-07)
[Compare Source](https://redirect.github.com/pydantic/pydantic/compare/v1.10.23...v1.10.24)
[GitHub release](https://redirect.github.com/pydantic/pydantic/releases/tag/v2.12.0)
##### What's Changed
This is the final 2.12 release. It features the work of 20 external contributors and provides useful new features, along with initial Python 3.14 support.
Several minor changes (considered non-breaking changes according to our [versioning policy](https://docs.pydantic.dev/2.12/version-policy/#pydantic-v2))
are also included in this release. Make sure to look into them before upgrading.
**Note that Pydantic V1 is not compatible with Python 3.14 and greater**.
Changes (see the alpha and beta releases for additional changes since 2.11):
##### Packaging
- Update V1 copy to v1.10.24 by [@​Viicos](https://redirect.github.com/Viicos) in [#​12338](https://redirect.github.com/pydantic/pydantic/pull/12338)
##### New Features
- Add `extra` parameter to the validate functions by [@​anvilpete](https://redirect.github.com/anvilpete) in [#​12233](https://redirect.github.com/pydantic/pydantic/pull/12233)
- Add `exclude_computed_fields` serialization option by [@​Viicos](https://redirect.github.com/Viicos) in [#​12334](https://redirect.github.com/pydantic/pydantic/pull/12334)
- Add `preverse_empty_path` URL options by [@​Viicos](https://redirect.github.com/Viicos) in [#​12336](https://redirect.github.com/pydantic/pydantic/pull/12336)
- Add `union_format` parameter to JSON Schema generation by [@​Viicos](https://redirect.github.com/Viicos) in [#​12147](https://redirect.github.com/pydantic/pydantic/pull/12147)
- Add `__qualname__` parameter for `create_model` by [@​Atry](https://redirect.github.com/Atry) in [#​12001](https://redirect.github.com/pydantic/pydantic/pull/12001)
##### Fixes
- Do not try to infer name from lambda definitions in pipelines API by [@​Viicos](https://redirect.github.com/Viicos) in [#​12289](https://redirect.github.com/pydantic/pydantic/pull/12289)
- Use proper namespace for functions in `TypeAdapter` by [@​Viicos](https://redirect.github.com/Viicos) in [#​12324](https://redirect.github.com/pydantic/pydantic/pull/12324)
- Use `Any` for context type annotation in `TypeAdapter` by [@​inducer](https://redirect.github.com/inducer) in [#​12279](https://redirect.github.com/pydantic/pydantic/pull/12279)
- Expose `FieldInfo` in `pydantic.fields.__all__` by [@​Viicos](https://redirect.github.com/Viicos) in [#​12339](https://redirect.github.com/pydantic/pydantic/pull/12339)
- Respect `validation_alias` in `@validate_call` by [@​Viicos](https://redirect.github.com/Viicos) in [#​12340](https://redirect.github.com/pydantic/pydantic/pull/12340)
- Use `Any` as context annotation in plugin API by [@​Viicos](https://redirect.github.com/Viicos) in [#​12341](https://redirect.github.com/pydantic/pydantic/pull/12341)
- Use proper `stacklevel` in warnings when possible by [@​Viicos](https://redirect.github.com/Viicos) in [#​12342](https://redirect.github.com/pydantic/pydantic/pull/12342)
##### New Contributors
- [@​anvilpete](https://redirect.github.com/anvilpete) made their first contribution in [#​12233](https://redirect.github.com/pydantic/pydantic/pull/12233)
- [@​JonathanWindell](https://redirect.github.com/JonathanWindell) made their first contribution in [#​12327](https://redirect.github.com/pydantic/pydantic/pull/12327)
- [@​inducer](https://redirect.github.com/inducer) made their first contribution in [#​12279](https://redirect.github.com/pydantic/pydantic/pull/12279)
- [@​Atry](https://redirect.github.com/Atry) made their first contribution in [#​12001](https://redirect.github.com/pydantic/pydantic/pull/12001)
### [`v1.10.23`](https://redirect.github.com/pydantic/pydantic/blob/HEAD/HISTORY.md#v11023-2025-09-13)
[Compare Source](https://redirect.github.com/pydantic/pydantic/compare/v1.10.22...v1.10.23)
- Fix mypy plugin for mypy 1.18 by [@​cdce8p](https://redirect.github.com/cdce8p) in [#​12207](https://redirect.github.com/pydantic/pydantic/pull/12207)
### [`v1.10.22`](https://redirect.github.com/pydantic/pydantic/blob/HEAD/HISTORY.md#v11022-2025-04-17)
[Compare Source](https://redirect.github.com/pydantic/pydantic/compare/v1.10.21...v1.10.22)
- Fix compatibility with `typing-extensions` by [@​Viicos](https://redirect.github.com/Viicos) in [#​11764](https://redirect.github.com/pydantic/pydantic/pull/11764)
</details>
<details>
<summary>yaml/pyyaml (pyyaml)</summary>
### [`v6.0.3`](https://redirect.github.com/yaml/pyyaml/releases/tag/6.0.3)
[Compare Source](https://redirect.github.com/yaml/pyyaml/compare/6.0.2...6.0.3)
#### What's Changed
- Support for Python 3.14 and free-threading (experimental).
**Full Changelog**: <https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3>
</details>
<details>
<summary>psf/requests (requests)</summary>
### [`v2.32.5`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2325-2025-08-18)
[Compare Source](https://redirect.github.com/psf/requests/compare/v2.32.4...v2.32.5)
**Bugfixes**
- The SSLContext caching feature originally introduced in 2.32.0 has created
a new class of issues in Requests that have had negative impact across a number
of use cases. The Requests team has decided to revert this feature as long term
maintenance of it is proving to be unsustainable in its current iteration.
**Deprecations**
- Added support for Python 3.14.
- Dropped support for Python 3.8 following its end of support.
### [`v2.32.4`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2324-2025-06-10)
[Compare Source](https://redirect.github.com/psf/requests/compare/v2.32.3...v2.32.4)
**Security**
- CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted
environment will retrieve credentials for the wrong hostname/machine from a
netrc file.
**Improvements**
- Numerous documentation improvements
**Deprecations**
- Added support for pypy 3.11 for Linux and macOS.
- Dropped support for pypy 3.9 following its end of support.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS43MS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzIuMiIsInRhcmdldEJyYW5jaCI6ImhvdGZpeC8yLjciLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #2422 into hotfix/2.7, bumping Jinja2 3.1.6, Pydantic 1.10.24, PyYAML 6.0.3, Requests 2.32.5, and types-PyYAML 20250915. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #2422 updated hotfix/2.7 dependencies: Jinja2 3.1.6, Pydantic 1.10.24, PyYAML 6.0.3, Requests 2.32.5, and newer types-PyYAML. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged into hotfix/2.7 via #2422, updating Jinja2 3.1.6, Pydantic 1.10.24, PyYAML 6.0.3, Requests 2.32.5, and types-PyYAML. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate bugfix dependency updates for hotfix/2.7 were merged via PR #1846, including Jinja2 3.1.6, Pydantic 1.10.24, PyYAML 6.0.3, Requests 2.32.5, and newer types-PyYAML. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency updates for jinja2, pydantic, pyyaml, requests, and types-pyyaml to hotfix/2.7. The Renovate-generated request included security and bugfix releases, passed CI checks, and was automerged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Automated dependency updates for jinja2, pydantic, pyyaml, requests, and types-pyyaml were merged into hotfix/2.7 via Renovate bot. The merge applies security patches, bug fixes, and Python 3.14 compatibility improvements. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1846 build(deps): update bugfixes (hotfix/2.7) | charmcraft | merged | Renovate bugfix dependency updates merged into hotfix/2.7 as commit b92c6d62, bumping Jinja2, MarkupSafe, PyYAML, pyright, pytest-subprocess, tox-gh, and type stubs. | |
| #4974 build(deps): update bugfixes (hotfix/7.5) | snapcraft | merged | Renovate bugfix dependency updates were merged into hotfix/7.5 via #4974 (commit 654871d45), including Jinja2, PyYAML, MarkupSafe, click, and pylint upgrades. | |
| #2922 build(deps): update bugfixes (hotfix/2.7) | charmcraft | merged | Merged dependency update PR #2922 by Renovate, upgrading protobuf to 4.25.9, pydantic to 1.10.26, and types-pyyaml to 6.0.12.20260906 on the hotfix/2.7 branch. | |
| #843 build(deps): update bugfixes (hotfix/2.1) | craft-providers | closed | Merged Renovate PR #843 into hotfix/2.1, updating freezegun, pytest-subprocess, responses, types-pyyaml, and types-requests. | |
| #2000 build(deps): update dependency pydantic to v1.10.19 (hotfix/2.7) | charmcraft | merged | Merged PR #2000 into hotfix/2.7, updating pinned pydantic from 1.10.14 to 1.10.19 in two files. | |
| #5308 build(deps): update dependency jinja2 to v3.1.6 [security] (hotfix/8.6) | snapcraft | closed | Merged into hotfix/8.6, upgrading Jinja2 from 3.1.5 to 3.1.6 to address CVE-2025-27516. | |
| #5307 build(deps): update dependency jinja2 to v3.1.6 [security] (hotfix/7.5) - autoclosed | snapcraft | closed | Autoclosed unmerged as the hotfix/7.5 update aged out; Jinja2 3.1.6 later reached main through merged PR #5312 (8bc044979). | |
| #696 build(deps): update bugfixes (hotfix/1.20) | craft-providers | merged | Renovate PR #696 merged into hotfix/1.20, updating coverage to 7.6.3, pyright to 1.1.385, and sphinx-tabs to 3.4.7. | |
| #5309 build(deps): update dependency jinja2 to v3.1.6 [security] (hotfix/8.7) - autoclosed | snapcraft | closed | Renovate PR #5309 was autoclosed unmerged; Jinja2 3.1.6 reached Snapcraft 8.7.2 through merged hotfix PR #5311, backporting the update from #5305. | |
| #700 build(deps): update bugfixes (hotfix/1.20) | craft-providers | merged | Renovate updates for coverage 7.6.4 and pyright 1.1.386 were merged into hotfix/1.20 via PR #700 (commit 5e43791). |