build(deps): update bugfixes (main)
Metadata
Current evaluation
Renovate bugfix deps PR merged to main (commit 20ab7392): ruff-pre-commit v0.11.5→v0.11.6 and beautifulsoup4 4.13.3→4.13.4; OSV/spread failures judged unrelated h11 CVE.
Resolution: closed resolved
Reason: The pull request itself was merged into snapcraft's main branch as commit 20ab7392, landing the two dependency bumps (.pre-commit-config.yaml and the beautifulsoup4 test/dev requirement). The failing 'Security scan / OSV-scanner' and integration-spread-tests (ubuntu-24.04) checks were triaged by @mr-cal as an unrelated pre-existing h11 CVE from a pinned transitive dependency, and the PR was approved and merged anyway.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change | Pending | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|---|---|---|
| [astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit) | repository | patch | `v0.11.5` -> `v0.11.6` | `v0.11.7` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| beautifulsoup4 ([changelog](https://git.launchpad.net/beautifulsoup/tree/CHANGELOG)) | | patch | `==4.13.3` -> `==4.13.4` | | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
Note: The `pre-commit` manager in Renovate is not supported by the `pre-commit` maintainers or community. Please do not report any problems there, instead [create a Discussion in the Renovate repository](https://redirect.github.com/renovatebot/renovate/discussions/new) if you have any questions.
---
### Release Notes
<details>
<summary>astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)</summary>
### [`v0.11.6`](https://redirect.github.com/astral-sh/ruff-pre-commit/releases/tag/v0.11.6)
[Compare Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.11.5...v0.11.6)
See: https://github.com/astral-sh/ruff/releases/tag/0.11.6
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/snapcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNTcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjI1Ny4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate bugfix deps PR merged to main (commit 20ab7392): ruff-pre-commit v0.11.5→v0.11.6 and beautifulsoup4 4.13.3→4.13.4; OSV/spread failures judged unrelated h11 CVE. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate bugfix dependency PR merged into main (commit 20ab7392), bumping ruff-pre-commit v0.11.5→v0.11.6 and beautifulsoup4 4.13.3→4.13.4; failing OSV/spread checks judged unrelated h11 CVE. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged into main in commit 20ab73922 via Renovate PR #5433, updating ruff-pre-commit v0.11.5→v0.11.6 and beautifulsoup4 4.13.3→4.13.4. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #5433, updating ruff-pre-commit from v0.11.5 to v0.11.6 and beautifulsoup4 from 4.13.3 to 4.13.4. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged dependency updates for astral-sh/ruff-pre-commit to v0.11.6 and beautifulsoup4 to v4.13.4. Automated CI checks passed, and changes were merged into main. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged to main. Automated dependency updates applied via Renovate: astral-sh/ruff-pre-commit upgraded to v0.11.6 and beautifulsoup4 to 4.13.4. Automerge enabled. An unrelated h11 CVE failure was noted but did not block the merge. |
Update history
No update history recorded yet.
Related work
-
Related To:
snapcraft#5279
(confidence 55%)
Sibling Renovate 'update bugfixes (main)' PR in the same recurring dependency-update series.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #970 build(deps): update bugfixes (main) | craft-application | merged | Renovate dependency PR merged as commit 96d2a759: bumped ruff-pre-commit v0.14.6->v0.14.8 and pytest-check 2.6.0->2.6.2 (+6/-6 in 3 files). All test/lint jobs passed; only OSV-scanner failed. | |
| #238 build(deps): update bugfixes (main) | imagecraft | merged | Renovate bugfix PR merged into main via commit d7df295, bumping ruff-pre-commit v0.14.5→v0.14.6 and sphinx-lint 1.0.1→1.0.2 across 3 files after 2 approvals. | |
| #639 build(deps): update bugfixes (main) | craft-application | merged | Renovate PR #639 merged into main, updating ruff-pre-commit v0.9.3→v0.9.5 and setuptools 75.2.0→75.8.0. | |
| #799 build(deps): update bugfixes (main) | craft-providers | merged | Renovate 'update bugfixes (main)' PR merged into main as commit 0945027, bumping ruff-pre-commit 0.12.4→0.12.8, freezegun 1.5.2→1.5.5, responses 0.25.7→0.25.8, setuptools 75.9.1→80.9.0, types-pyyaml and types-requests stubs (+23/-23 across 3 files). | |
| #317 build(deps): update bugfixes (main) | craft-store | merged | Renovate dependency PR merged via commit 9752ca4: ruff-pre-commit v0.12.10→v0.12.12, coverage 7.10.4→7.10.6, pytest 8.4.1→8.4.2; all CI checks passed. | |
| #957 build(deps): update bugfixes (main) | craft-application | merged | Renovate bugfix PR #957 merged into main (commit eff6085a): ruff-pre-commit v0.14.0 -> v0.14.5 in .pre-commit-config.yaml and sphinx-lint 1.0.0 -> 1.0.1; all CI checks green. | |
| #651 build(deps): update bugfixes (main) | craft-application | merged | Renovate bugfix dependency PR merged into main as commit cf0598fe (approved, 2 reviewers), bumping ruff-pre-commit v0.9.5→v0.9.7 and coverage 7.6.10→7.6.12. | |
| #229 build(deps): update bugfixes (main) | imagecraft | merged | Renovate's automated bugfix dependency update merged into main via commit 02df250, bumping ruff-pre-commit v0.14.2→v0.14.3 and sphinx-lint 1.0.0→1.0.1 across 3 files (+6/-6). | |
| #668 build(deps): update bugfixes (main) | craft-application | merged | Renovate dependency bump PR merged into main via automerge (commit 8c842604): ruff-pre-commit v0.9.7->v0.9.10 and pytest 8.3.4->8.3.5. | |
| #817 build(deps): update bugfixes (main) | craft-application | merged | Renovate PR #817 merged into main as commit 1b004aa8, bumping ruff-pre-commit v0.12.3→v0.12.4 in .pre-commit-config.yaml and build-system setuptools 75.9.1→80.9.0 in pyproject.toml. |