build(deps): update bugfixes (hotfix/2.0)
Metadata
Current evaluation
Abandoned after CI checks failed and a maintainer noted version 2.0 is deprecated. Dependency updates for pytest and python-gnupg targeting hotfix/2.0 were closed without merging.
Suggested action: —
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [pytest](https://redirect.github.com/pytest-dev/pytest) ([changelog](https://docs.pytest.org/en/stable/changelog.html)) | `==7.4.2` -> `==7.4.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [python-gnupg](https://redirect.github.com/vsajip/python-gnupg) | `==0.5.1` -> `==0.5.5` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>pytest-dev/pytest (pytest)</summary>
### [`v7.4.4`](https://redirect.github.com/pytest-dev/pytest/releases/tag/7.4.4): pytest 7.4.4 (2023-12-31)
[Compare Source](https://redirect.github.com/pytest-dev/pytest/compare/7.4.3...7.4.4)
#### Bug Fixes
- [#​11140](https://redirect.github.com/pytest-dev/pytest/issues/11140): Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
- [#​11572](https://redirect.github.com/pytest-dev/pytest/issues/11572): Handle an edge case where `sys.stderr`{.interpreted-text role="data"} and `sys.__stderr__`{.interpreted-text role="data"} might already be closed when `faulthandler`{.interpreted-text role="ref"} is tearing down.
- [#​11710](https://redirect.github.com/pytest-dev/pytest/issues/11710): Fixed tracebacks from collection errors not getting pruned.
- [#​7966](https://redirect.github.com/pytest-dev/pytest/issues/7966): Removed unhelpful error message from assertion rewrite mechanism when exceptions are raised in `__iter__` methods. Now they are treated un-iterable instead.
#### Improved Documentation
- [#​11091](https://redirect.github.com/pytest-dev/pytest/issues/11091): Updated documentation to refer to hyphenated options: replaced `--junitxml` with `--junit-xml` and `--collectonly` with `--collect-only`.
### [`v7.4.3`](https://redirect.github.com/pytest-dev/pytest/releases/tag/v7.4.3): pytest 7.4.3 (2023-10-24)
[Compare Source](https://redirect.github.com/pytest-dev/pytest/compare/7.4.2...7.4.3)
## Bug Fixes
- [#​10447](https://redirect.github.com/pytest-dev/pytest/issues/10447): Markers are now considered in the reverse mro order to ensure base class markers are considered first -- this resolves a regression.
- [#​11239](https://redirect.github.com/pytest-dev/pytest/issues/11239): Fixed `:=` in asserts impacting unrelated test cases.
- [#​11439](https://redirect.github.com/pytest-dev/pytest/issues/11439): Handled an edge case where :data:`sys.stderr` might already be closed when :ref:`faulthandler` is tearing down.
</details>
<details>
<summary>vsajip/python-gnupg (python-gnupg)</summary>
### [`v0.5.5`](https://redirect.github.com/vsajip/python-gnupg/releases/tag/0.5.5): Enhancement and bug-fix release 0.5.5
[Compare Source](https://redirect.github.com/vsajip/python-gnupg/compare/0.5.4...0.5.5)
This is an enhancement and bug-fix release, and all users are encouraged to upgrade.
Brief summary:
- Fix [#​249](https://redirect.github.com/vsajip/python-gnupg/issues/249): Handle fetching GPG version when not the first item in the configuration.
- Fix [#​250](https://redirect.github.com/vsajip/python-gnupg/issues/250): Capture uid info in a uid\_map attribute of ScanKeys/ListKeys.
- Fix [#​255](https://redirect.github.com/vsajip/python-gnupg/issues/255): Improve handling of exceptions raised in background threads.
This release has been signed with my code signing key:
Vinay Sajip (CODE SIGNING KEY) \<vinay\_sajip at yahoo.co.uk>
Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86
### [`v0.5.4`](https://redirect.github.com/vsajip/python-gnupg/releases/tag/0.5.4): Enhancement and bug-fix release
[Compare Source](https://redirect.github.com/vsajip/python-gnupg/compare/0.5.3...0.5.4)
This is an enhancement and bug-fix release, and all users are encouraged to upgrade.
Brief summary:
- Fix [#​242](https://redirect.github.com/vsajip/python-gnupg/issues/242): Handle exceptions in the `on_data` callable.
This release has been signed with my code signing key:
Vinay Sajip (CODE SIGNING KEY) \<vinay\_sajip at yahoo.co.uk>
Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86
### [`v0.5.3`](https://redirect.github.com/vsajip/python-gnupg/releases/tag/0.5.3): Enhancement and bug-fix release
[Compare Source](https://redirect.github.com/vsajip/python-gnupg/compare/0.5.2...0.5.3)
This is an enhancement and bug-fix release, and all users are encouraged to upgrade.
Brief summary:
- Fix [#​117](https://redirect.github.com/vsajip/python-gnupg/issues/117): Add WKD (Web Key Directory) support for auto-locating keys. Thanks to Myzel394
for the patch.
- Fix [#​237](https://redirect.github.com/vsajip/python-gnupg/issues/237): Ensure local variable is initialized even when an exception occurs.
- Fix [#​239](https://redirect.github.com/vsajip/python-gnupg/issues/239): Remove logging of decryption result.
This release has been signed with my code signing key:
Vinay Sajip (CODE SIGNING KEY) \<vinay\_sajip at yahoo.co.uk>
Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86
### [`v0.5.2`](https://redirect.github.com/vsajip/python-gnupg/releases/tag/0.5.2): Enhancement and bug-fix release
[Compare Source](https://redirect.github.com/vsajip/python-gnupg/compare/0.5.1...0.5.2)
This is an enhancement and bug-fix release, and all users are encouraged to upgrade.
Brief summary:
- Fix [#​228](https://redirect.github.com/vsajip/python-gnupg/issues/228): Clarify documentation for encryption/decryption.
- Make I/O buffer size configurable via `buffer_size` attribute on a `GPG` instance.
This release has been signed with my code signing key:
Vinay Sajip (CODE SIGNING KEY) \<vinay\_sajip at yahoo.co.uk>
Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-archives).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS43MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNzEuMSIsInRhcmdldEJyYW5jaCI6ImhvdGZpeC8yLjAiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Abandoned after CI checks failed and a maintainer noted version 2.0 is deprecated. Dependency updates for pytest and python-gnupg targeting hotfix/2.0 were closed without merging. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Abandoned after maintainer noted the hotfix/2.0 branch is deprecated. The PR updated pytest and python-gnupg dependencies. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #201 build(deps): update bugfixes (hotfix/2.0) | craft-archives | closed | Closed without merging due to failing CI tests. Automated dependency updates for pytest and python-gnupg were abandoned. | |
| #202 build(deps): update bugfixes (hotfix/2.0) | craft-archives | closed | Closed without merging after CI test failures. A maintainer requested removing the obsolete hotfix/2.0 branch, indicating the dependency update was abandoned or superseded. | |
| #326 build(deps): update bugfixes (hotfix/3.2) | craft-store | closed | Closed without merging due to failing CI checks, including OSV-scanner and tests on Noble. The dependency updates for myst-parser, sphinx-lint, and sphinx-reredirects were abandoned and not applied to the hotfix branch. | |
| #130 build(deps): update bugfixes (main) | craft-archives | merged | Merged to main via Renovate automerge. Updated pytest to 7.4.4 and python-gnupg to 0.5.4 to apply upstream bug fixes. Approved by two reviewers, passed CI checks, and committed. | |
| #1517 build(deps): update dependency requests to v2.33.0 [security] (hotfix/2.20) | craft-parts | closed | Updating requests to v2.33.0 for security was closed without merging. Multiple CI checks failed across tests, linters, and scanners, resulting in the PR being abandoned. | |
| #338 build(deps): update bugfixes (hotfix/3.2) | craft-store | closed | Dependency updates were closed as stale. Failing OSV-scanner and minimum dependency checks led a maintainer to mark the branch stale, resulting in the pull request being abandoned without merging. | |
| #1921 build(deps): update dependency requests to v2.32.2 [security] (hotfix/2.7) - autoclosed | charmcraft | closed | Renovate bot pull request updating requests to v2.32.2 to address CVE-2024-35195 was autoclosed. The dependency update was not merged and remains abandoned, likely due to branch deletion or being superseded by another resolution. | |
| #253 build(deps): update bugfixes (hotfix/3.2) - autoclosed | craft-store | closed | Automatically closed by Renovate bot without merging. The PR updated coverage, pytest, and sphinx-toolbox dependencies for the hotfix/3.2 branch. It was closed as outdated or conflicting, and will be automatically recreated. | |
| #6126 build(deps): update dependency requests to v2.33.0 [security] (hotfix/8.14) - autoclosed | snapcraft | closed | Automated dependency update to requests v2.33.0 was abandoned and autoclosed without merging due to failing CI checks and unreviewed status. | |
| #5066 build(deps): update dependency requests to v2.32.2 [security] (hotfix/8.3) | snapcraft | closed | Closed without merging. The requests security update to v2.32.2 was abandoned due to inactivity, with no reviewer comments or CI checks. Likely superseded by a newer dependency update. |