Skip to content

chore(deps): update all non-major dependencies - #3449

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
codecov/codecov-action action patch v7.1.0 → v7.1.1 age confidence
commitizen (changelog) minor ==4.18.1 → ==4.19.0 age confidence
commitizen-tools/commitizen repository minor v4.18.1 → v4.19.0 age confidence
flake8 (changelog) minor ==7.3.0 → ==7.4.1 age confidence
maxbrunet/pre-commit-renovate repository minor 44.90.3 → 44.115.5 44.132.2 (+36) age confidence
pycqa/flake8 repository minor 7.3.0 → 7.4.1 age confidence
pycqa/pylint repository patch v4.0.8 → v4.0.9 v4.1.1 (+2) age confidence
pylint (changelog) patch ==4.0.8 → ==4.0.9 4.1.1 (+1) age confidence
python-semantic-release/publish-action action minor v10.6.2 → v10.7.0 age confidence
python-semantic-release/python-semantic-release action minor v10.6.2 → v10.7.0 age confidence

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

codecov/codecov-action (codecov/codecov-action)

v7.1.1

Compare Source

commitizen-tools/commitizen (commitizen)

v4.19.0

Compare Source

Feat
  • add extensible commit filters
pycqa/flake8 (flake8)

v7.4.1

Compare Source

v7.4.0

Compare Source

maxbrunet/pre-commit-renovate (maxbrunet/pre-commit-renovate)

v44.115.5

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.115.5 for more changes

v44.115.4

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.115.4 for more changes

v44.115.3

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.115.3 for more changes

v44.115.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.115.2 for more changes

v44.115.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.115.1 for more changes

v44.115.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.115.0 for more changes

v44.114.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.114.0 for more changes

v44.113.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.113.0 for more changes

v44.112.3

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.112.3 for more changes

v44.111.4

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.111.4 for more changes

v44.111.3

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.111.3 for more changes

v44.111.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.111.2 for more changes

v44.110.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.110.0 for more changes

v44.109.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.109.1 for more changes

v44.109.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.109.0 for more changes

v44.108.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.108.2 for more changes

v44.108.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.108.1 for more changes

v44.108.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.108.0 for more changes

v44.107.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.107.2 for more changes

v44.107.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.107.0 for more changes

v44.106.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.106.0 for more changes

v44.105.4

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.105.4 for more changes

v44.105.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.105.2 for more changes

v44.105.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.105.1 for more changes

v44.105.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.105.0 for more changes

v44.104.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.104.2 for more changes

v44.104.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.104.1 for more changes

v44.104.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.104.0 for more changes

v44.103.7

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.103.7 for more changes

v44.103.6

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.103.6 for more changes

v44.103.5

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.103.5 for more changes

v44.103.4

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.103.4 for more changes

v44.103.3

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.103.3 for more changes

v44.103.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.103.2 for more changes

v44.103.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.103.1 for more changes

v44.103.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.103.0 for more changes

v44.101.3

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.101.3 for more changes

v44.101.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.101.2 for more changes

v44.101.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.101.0 for more changes

v44.100.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.100.0 for more changes

v44.97.6

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.97.6 for more changes

v44.97.5

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.97.5 for more changes

v44.97.4

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.97.4 for more changes

v44.97.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.97.2 for more changes

v44.97.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.97.1 for more changes

v44.96.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.96.2 for more changes

v44.96.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.96.1 for more changes

v44.95.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.95.0 for more changes

v44.94.4

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.94.4 for more changes

v44.94.3

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.94.3 for more changes

v44.94.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.94.2 for more changes

v44.94.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.94.1 for more changes

v44.94.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.94.0 for more changes

v44.93.8

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.93.8 for more changes

v44.93.7

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.93.7 for more changes

v44.93.6

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.93.6 for more changes

v44.93.5

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.93.5 for more changes

v44.93.4

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.93.4 for more changes

v44.93.3

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.93.3 for more changes

v44.93.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.93.2 for more changes

v44.93.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.93.1 for more changes

v44.93.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.93.0 for more changes

v44.91.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/44.91.0 for more changes

pycqa/pylint (pycqa/pylint)

v4.0.9

Compare Source

What's new in Pylint 4.0.9?

Release date: 2026-09-23

Security Fixes

  • Someone without access to the configuration or linted code, but with access
    to the cache directory (predictable PYLINT_HOME on a multi-user host) can no
    longer write a crafted pickle that will runs arbitrary code when pylint access its
    stat cache. The result cache is now stored as JSON instead of pickle,
    preventing code-execution. The workaround is upgrading or not pointing PYLINT_HOME
    to an untrusted, shared, or group-writable directory. The default value, ~/.cache/pylint,
    is writable only by the user running pylint. (CVE with the same information pending)

False Positives Fixed

  • Fixed a false positive for no-self-use on a method that only uses
    self before a locally defined class (or other nested method), because
    the checker's could-be-a-function tracking state was not restored after
    visiting the nested method.

    Closes #​3705

  • Fix a false positive for :ref:not-callable when calling functions constructed with
    types.FunctionType or types.LambdaType.

    Closes #​7500

  • Fix a false positive for unnecessary-direct-lambda-call when a directly called
    lambda in a class body wraps a comprehension containing an assignment expression.
    PEP 572 makes that a SyntaxError without the lambda's scope, so following the
    message produced code that would not compile.

    Closes #​9294

  • Fix a false positive for :ref:unnecessary-ellipsis when an ellipsis is the
    sole body statement of a method defined on a Protocol.

    Closes #​9319

  • Fix a false positive for :ref:bad-exception-cause when the bases of the class
    being raised from cannot be inferred, such as an exception deriving from a
    C extension class. :ref:raising-non-exception and
    :ref:catching-non-exception already guard the same inherit_from_std_ex
    helper with has_known_bases.

    Refs #​11399

False Negatives Fixed

  • method-hidden is no longer silenced when the hidden method shares its name with
    a builtin function or with a function defined at module level. Only members of the
    ancestor classes themselves can excuse the method now.

    Refs #​11361

Other Bug Fixes

  • Fix a block-scoped # pylint: disable= directive placed inside an if
    body leaking into sibling elif/else blocks for messages such as
    stop-iteration-return, which default to a line-based (rather than
    node-based) message scope.

    Closes #​3136

  • Fix a false positive for declare-non-slot when a class variable is
    annotated with ClassVar without an initial value.

    Closes #​9950

  • Fix a crash in the no-member checker when attribute lookup raises an
    InferenceError.

    Closes #​11356

  • Fix a crash in the unnecessary-default-type-args check when a Generator
    or AsyncGenerator subscript holds an empty tuple, such as Generator[()].

    Closes #​11357

  • Fix a crash in method-hidden when a method shadows a name that builtins
    binds to a node without a statement, such as help or license. Every class
    inherits from object, which lives in the builtins module, so no base class
    was needed to trigger it.

    Closes #​11361
    Closes #​8079

pylint-dev/pylint (pylint)

v4.0.9

Compare Source

What's new in Pylint 4.0.9?

Release date: 2026-09-23

Security Fixes

  • Someone without access to the configuration or linted code, but with access
    to the cache directory (predictable PYLINT_HOME on a multi-user host) can no
    longer write a crafted pickle that will runs arbitrary code when pylint access its
    stat cache. The result cache is now stored as JSON instead of pickle,
    preventing code-execution. The workaround is upgrading or not pointing PYLINT_HOME
    to an untrusted, shared, or group-writable directory. The default value, ~/.cache/pylint,
    is writable only by the user running pylint. (CVE with the same information pending)

False Positives Fixed

  • Fixed a false positive for no-self-use on a method that only uses
    self before a locally defined class (or other nested method), because
    the checker's could-be-a-function tracking state was not restored after
    visiting the nested method.

    Closes #​3705

  • Fix a false positive for :ref:not-callable when calling functions constructed with
    types.FunctionType or types.LambdaType.

    Closes #​7500

  • Fix a false positive for unnecessary-direct-lambda-call when a directly called
    lambda in a class body wraps a comprehension containing an assignment expression.
    PEP 572 makes that a SyntaxError without the lambda's scope, so following the
    message produced code that would not compile.

    Closes #​9294

  • Fix a false positive for :ref:unnecessary-ellipsis when an ellipsis is the
    sole body statement of a method defined on a Protocol.

    Closes #​9319

  • Fix a false positive for :ref:bad-exception-cause when the bases of the class
    being raised from cannot be inferred, such as an exception deriving from a
    C extension class. :ref:raising-non-exception and
    :ref:catching-non-exception already guard the same inherit_from_std_ex
    helper with has_known_bases.

    Refs #​11399

False Negatives Fixed

  • method-hidden is no longer silenced when the hidden method shares its name with
    a builtin function or with a function defined at module level. Only members of the
    ancestor classes themselves can excuse the method now.

    Refs #​11361

Other Bug Fixes

  • Fix a block-scoped # pylint: disable= directive placed inside an if
    body leaking into sibling elif/else blocks for messages such as
    stop-iteration-return, which default to a line-based (rather than
    node-based) message scope.

    Closes #​3136

  • Fix a false positive for declare-non-slot when a class variable is
    annotated with ClassVar without an initial value.

    Closes #​9950

  • Fix a crash in the no-member checker when attribute lookup raises an
    InferenceError.

    Closes #​11356

  • Fix a crash in the unnecessary-default-type-args check when a Generator
    or AsyncGenerator subscript holds an empty tuple, such as Generator[()].

    Closes #​11357

  • Fix a crash in method-hidden when a method shadows a name that builtins
    binds to a node without a statement, such as help or license. Every class
    inherits from object, which lives in the builtins module, so no base class
    was needed to trigger it.

    Closes #​11361
    Closes #​8079

python-semantic-release/publish-action (python-semantic-release/publish-action)

v10.7.0

Compare Source

v10.7.0 (2026-09-22)

Build System
  • deps: Bump python-semantic-release from 10.6.2 to 10.7.0 (#​111, 99d4062)

Detailed Changes: v10.6.2...v10.7.0

python-semantic-release/python-semantic-release (python-semantic-release/python-semantic-release)

v10.7.0

Compare Source

====================

✨ Features

  • cmd-stamp: Expand version stamp mechanism to support typed python variables, closes #1443_
    (PR#1485, 947c57b)

  • cmd-version: Add optional git --signoff to version commits, closes #1441_ (PR#1492,
    3cecbeb
    )

📖 Documentation

  • configuration: Added signoff_commit setting definition (PR#1492, 3cecbeb)

  • configuration: Document Python type annotation support for version_variables (PR#1485,
    947c57b
    )

⚙️ Build System

  • deps: Correct click range specification for python3.10+ (PR#1486, e4b3bad)

  • deps: Expand click dependency range to include v8.5.* (PR#1489, fa87c95)

💡 Additional Release Information

  • cmd-version: With this release, we added a boolean flag, semantic_release.signoff_commit,
    as an available configuration option to toggle the addition of the Signed-off-by git
    trailer/footer message to release commits made by Python Semantic Release. Default is currently
    set to False but if you want to try this option, set this configuration setting to True.
    In a future major release, this setting will be set to True by default.

.. _#1441: #​1441
.. _#1443: #​1443
.. _3cecbeb: 3cecbeb
.. _947c57b: 947c57b
.. _e4b3bad: e4b3bad
.. _fa87c95: fa87c95
.. _PR#1485: #​1485
.. _PR#1486: #​1486
.. _PR#1489: #​1489
.. _PR#1492: #​1492

.. _changelog-v10.6.2:


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from c23d7bb to 8a43f86 Compare October 2, 2026 13:35
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 8a43f86 to 63d216b Compare October 2, 2026 16:52

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants