build(deps): update bugfixes (hotfix/2.0)
Metadata
Current evaluation
Closed without merging after CI test failures. A maintainer requested removing the obsolete hotfix/2.0 branch, indicating the dependency update was abandoned or superseded.
Suggested action: —
No scores available.
Issue body
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more [here](https://redirect.github.com/renovatebot/renovate/discussions/37842).
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [pytest](https://redirect.github.com/pytest-dev/pytest) ([changelog](https://docs.pytest.org/en/stable/changelog.html)) | `==7.4.2` -> `==7.4.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [python-gnupg](https://redirect.github.com/vsajip/python-gnupg) | `==0.5.1` -> `==0.5.5` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>pytest-dev/pytest (pytest)</summary>
### [`v7.4.4`](https://redirect.github.com/pytest-dev/pytest/releases/tag/7.4.4): pytest 7.4.4 (2023-12-31)
[Compare Source](https://redirect.github.com/pytest-dev/pytest/compare/7.4.3...7.4.4)
##### Bug Fixes
- [#​11140](https://redirect.github.com/pytest-dev/pytest/issues/11140): Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
- [#​11572](https://redirect.github.com/pytest-dev/pytest/issues/11572): Handle an edge case where `sys.stderr`{.interpreted-text role="data"} and `sys.__stderr__`{.interpreted-text role="data"} might already be closed when `faulthandler`{.interpreted-text role="ref"} is tearing down.
- [#​11710](https://redirect.github.com/pytest-dev/pytest/issues/11710): Fixed tracebacks from collection errors not getting pruned.
- [#​7966](https://redirect.github.com/pytest-dev/pytest/issues/7966): Removed unhelpful error message from assertion rewrite mechanism when exceptions are raised in `__iter__` methods. Now they are treated un-iterable instead.
##### Improved Documentation
- [#​11091](https://redirect.github.com/pytest-dev/pytest/issues/11091): Updated documentation to refer to hyphenated options: replaced `--junitxml` with `--junit-xml` and `--collectonly` with `--collect-only`.
### [`v7.4.3`](https://redirect.github.com/pytest-dev/pytest/releases/tag/v7.4.3): pytest 7.4.3 (2023-10-24)
[Compare Source](https://redirect.github.com/pytest-dev/pytest/compare/7.4.2...7.4.3)
## Bug Fixes
- [#​10447](https://redirect.github.com/pytest-dev/pytest/issues/10447): Markers are now considered in the reverse mro order to ensure base class markers are considered first -- this resolves a regression.
- [#​11239](https://redirect.github.com/pytest-dev/pytest/issues/11239): Fixed `:=` in asserts impacting unrelated test cases.
- [#​11439](https://redirect.github.com/pytest-dev/pytest/issues/11439): Handled an edge case where :data:`sys.stderr` might already be closed when :ref:`faulthandler` is tearing down.
</details>
<details>
<summary>vsajip/python-gnupg (python-gnupg)</summary>
### [`v0.5.5`](https://redirect.github.com/vsajip/python-gnupg/releases/tag/0.5.5): Enhancement and bug-fix release 0.5.5
[Compare Source](https://redirect.github.com/vsajip/python-gnupg/compare/0.5.4...0.5.5)
This is an enhancement and bug-fix release, and all users are encouraged to upgrade.
Brief summary:
- Fix [#​249](https://redirect.github.com/vsajip/python-gnupg/issues/249): Handle fetching GPG version when not the first item in the configuration.
- Fix [#​250](https://redirect.github.com/vsajip/python-gnupg/issues/250): Capture uid info in a uid\_map attribute of ScanKeys/ListKeys.
- Fix [#​255](https://redirect.github.com/vsajip/python-gnupg/issues/255): Improve handling of exceptions raised in background threads.
This release has been signed with my code signing key:
Vinay Sajip (CODE SIGNING KEY) \<vinay\_sajip at yahoo.co.uk>
Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86
### [`v0.5.4`](https://redirect.github.com/vsajip/python-gnupg/releases/tag/0.5.4): Enhancement and bug-fix release
[Compare Source](https://redirect.github.com/vsajip/python-gnupg/compare/0.5.3...0.5.4)
This is an enhancement and bug-fix release, and all users are encouraged to upgrade.
Brief summary:
- Fix [#​242](https://redirect.github.com/vsajip/python-gnupg/issues/242): Handle exceptions in the `on_data` callable.
This release has been signed with my code signing key:
Vinay Sajip (CODE SIGNING KEY) \<vinay\_sajip at yahoo.co.uk>
Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86
### [`v0.5.3`](https://redirect.github.com/vsajip/python-gnupg/releases/tag/0.5.3): Enhancement and bug-fix release
[Compare Source](https://redirect.github.com/vsajip/python-gnupg/compare/0.5.2...0.5.3)
This is an enhancement and bug-fix release, and all users are encouraged to upgrade.
Brief summary:
- Fix [#​117](https://redirect.github.com/vsajip/python-gnupg/issues/117): Add WKD (Web Key Directory) support for auto-locating keys. Thanks to Myzel394
for the patch.
- Fix [#​237](https://redirect.github.com/vsajip/python-gnupg/issues/237): Ensure local variable is initialized even when an exception occurs.
- Fix [#​239](https://redirect.github.com/vsajip/python-gnupg/issues/239): Remove logging of decryption result.
This release has been signed with my code signing key:
Vinay Sajip (CODE SIGNING KEY) \<vinay\_sajip at yahoo.co.uk>
Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86
### [`v0.5.2`](https://redirect.github.com/vsajip/python-gnupg/releases/tag/0.5.2): Enhancement and bug-fix release
[Compare Source](https://redirect.github.com/vsajip/python-gnupg/compare/0.5.1...0.5.2)
This is an enhancement and bug-fix release, and all users are encouraged to upgrade.
Brief summary:
- Fix [#​228](https://redirect.github.com/vsajip/python-gnupg/issues/228): Clarify documentation for encryption/decryption.
- Make I/O buffer size configurable via `buffer_size` attribute on a `GPG` instance.
This release has been signed with my code signing key:
Vinay Sajip (CODE SIGNING KEY) \<vinay\_sajip at yahoo.co.uk>
Fingerprint: CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-archives).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44MS4yIiwidXBkYXRlZEluVmVyIjoiNDEuOTcuMTAiLCJ0YXJnZXRCcmFuY2giOiJob3RmaXgvMi4wIiwibGFiZWxzIjpbIlBSOiBEZXBlbmRlbmNpZXMiXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Closed without merging after CI test failures. A maintainer requested removing the obsolete hotfix/2.0 branch, indicating the dependency update was abandoned or superseded. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Closed. The hotfix/2.0 branch is obsolete, and the pytest and python-gnupg updates were abandoned. The branch is recommended for removal. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #198 build(deps): update bugfixes (hotfix/2.0) | craft-archives | closed | Abandoned after CI checks failed and a maintainer noted version 2.0 is deprecated. Dependency updates for pytest and python-gnupg targeting hotfix/2.0 were closed without merging. | |
| #326 build(deps): update bugfixes (hotfix/3.2) | craft-store | closed | Closed without merging due to failing CI checks, including OSV-scanner and tests on Noble. The dependency updates for myst-parser, sphinx-lint, and sphinx-reredirects were abandoned and not applied to the hotfix branch. | |
| #338 build(deps): update bugfixes (hotfix/3.2) | craft-store | closed | Dependency updates were closed as stale. Failing OSV-scanner and minimum dependency checks led a maintainer to mark the branch stale, resulting in the pull request being abandoned without merging. | |
| #201 build(deps): update bugfixes (hotfix/2.0) | craft-archives | closed | Closed without merging due to failing CI tests. Automated dependency updates for pytest and python-gnupg were abandoned. | |
| #1223 build(deps): update bugfixes (hotfix/1.5) | rockcraft | closed | Closed unmerged due to failing CI checks across multiple test suites and linters. Dependency updates were not applied. The automated bot will recreate the request. | |
| #743 build(deps): update github actions (hotfix/1.5) (major) | rockcraft | closed | Closed without merging. CI checks failed because test environments did not match the updated runners. A maintainer questioned the ongoing maintenance of the hotfix/1.5 branch, indicating the PR was abandoned. | |
| #1229 build(deps): update dependency backports.tarfile to v1.2.0 (hotfix/1.5) | rockcraft | closed | Closed without merging. The backports.tarfile dependency update to v1.2.0 was abandoned, likely due to CI test failures or inactivity. | |
| #5066 build(deps): update dependency requests to v2.32.2 [security] (hotfix/8.3) | snapcraft | closed | Closed without merging. The requests security update to v2.32.2 was abandoned due to inactivity, with no reviewer comments or CI checks. Likely superseded by a newer dependency update. | |
| #1080 build(deps): update dependency responses to ~=0.26.1 (hotfix/5.11) | craft-application | closed | Closed without merging due to failing CI checks, including OSV-scanner, test failures, and lint errors. The responses dependency update to 0.26.1 was abandoned. | |
| #971 build(deps): lock file maintenance (hotfix/5.10) | craft-application | closed | Closed without merging. The automated lock file maintenance PR for hotfix/5.10 was abandoned, likely superseded by newer dependency updates. CI checks showed failing security and lint scans. |