Skip to content

fix(deps): pin dependencies#330

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/dev-deps
Open

fix(deps): pin dependencies#330
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/dev-deps

Conversation

@renovate
Copy link

@renovate renovate bot commented Mar 12, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
@types/lodash (source) devDependencies pin ^4.17.7 → 4.17.21 age confidence
@typescript-eslint/eslint-plugin (source) devDependencies pin ^5.9.0 → 5.62.0 age confidence
@typescript-eslint/parser (source) devDependencies pin ^5.62.0 → 5.62.0 age confidence
@typescript-eslint/typescript-estree (source) devDependencies pin ^6.21.0 → 6.21.0 age confidence
@vitejs/plugin-vue (source) devDependencies pin ^6.0.1 → 6.0.3 age confidence
@vue/eslint-config-typescript devDependencies pin ^9.1.0 → 9.1.0 age confidence
celery-types dependency-groups minor ==0.24.0 → ==0.26.0 age confidence
django-stubs (changelog) dependency-groups patch ==5.2.8 → ==5.2.9 age confidence
django-stubs-ext (changelog) project.dependencies patch ==5.2.8 → ==5.2.9 age confidence
djangorestframework-stubs (changelog) dependency-groups patch ==3.16.6 → ==3.16.8 age confidence
eslint (source) devDependencies pin ^8.52.0 → 8.57.1 age confidence
eslint-config-prettier devDependencies pin ^8.3.0 → 8.10.2 age confidence
eslint-plugin-prettier devDependencies pin ^4.0.0 → 4.2.5 age confidence
eslint-plugin-vue (source) devDependencies pin ^8.0.3 → 8.7.1 age confidence
prettier (source) devDependencies pin ^2.4.1 → 2.8.8 age confidence
pytest-django (changelog) dependency-groups minor ==4.11.1 → ==4.12.0 age confidence
ruff (source, changelog) dependency-groups patch ==0.15.2 → ==0.15.6 age confidence
sass devDependencies pin ^1.32.7 → 1.96.0 age confidence
tox (changelog) dependency-groups minor ==4.33.0 → ==4.49.1 age confidence
tox-uv (changelog) dependency-groups minor ==1.29.0 → ==1.33.4 age confidence
typescript (source) devDependencies minor 5.6.2 → 5.9.3 age confidence
unplugin-vue-components devDependencies pin ^28.8.0 → 28.8.0 age confidence
vite (source) devDependencies pin ^7.0.6 → 7.3.0 age confidence
vite-plugin-node-polyfills devDependencies pin ^0.24.0 → 0.24.0 age confidence
vite-plugin-vuetify (source) devDependencies pin ^2.1.1 → 2.1.2 age confidence

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

Release Notes

typeddjango/django-stubs (django-stubs)

v5.2.9

Compare Source

Version 5.2.9 will be the last version to target Django 5.2 -- the next version will be updating to 6.0!

🚀 We need your help: Adding Django 6.0 stubs

Many new Django 6.0 APIs are still missing stubs coverage, and changes to existing APIs are not covered.
If you are interested in contributing, please help by opening PRs (check that a PR does not exist already for your topic).

👉 Starting points

And by the way, we are still missing some things from previous Django versions too! Check earlier release note, other allowlist_todo*.txt files and #​1493 (comment)

🤝 You help us, we help you

If want to help but you are not sure how to implement something in stubs:

What's Changed

Housekeeping

New Contributors

Full Changelog: typeddjango/django-stubs@5.2.8...5.2.9

typeddjango/djangorestframework-stubs (djangorestframework-stubs)

v3.16.8

Compare Source

What's Changed

  • Make types-requests an optional dependency -- add requests extra by @​bluetech in #​900

    The types-request dependency is now optional. If you use rest_framework.test.RequestsClient, consider installing the requests extra: djangorestframework-stubs[requests].

  • Fix Request stub allowing arbitrary attribute access by @​emmanuel-ferdman in #​904

    Type checkers would previously ignore when accessing non-existant Request attributes.

Housekeeping

Full Changelog: typeddjango/djangorestframework-stubs@3.16.7...3.16.8

v3.16.7

Compare Source

What's Changed

Housekeeping

New Contributors

Full Changelog: typeddjango/djangorestframework-stubs@3.16.6...3.16.7

pytest-dev/pytest-django (pytest-django)

v4.12.0

Compare Source

astral-sh/ruff (ruff)

v0.15.6

Compare Source

Released on 2026-03-12.

Preview features
  • Add support for lazy import parsing (#​23755)
  • Add support for star-unpacking of comprehensions (PEP 798) (#​23788)
  • Reject semantic syntax errors for lazy imports (#​23757)
  • Drop a few rules from the preview default set (#​23879)
  • [airflow] Flag Variable.get() calls outside of task execution context (AIR003) (#​23584)
  • [airflow] Flag runtime-varying values in DAG/task constructor arguments (AIR304) (#​23631)
  • [flake8-bugbear] Implement delattr-with-constant (B043) (#​23737)
  • [flake8-tidy-imports] Add TID254 to enforce lazy imports (#​23777)
  • [flake8-tidy-imports] Allow users to ban lazy imports with TID254 (#​23847)
  • [isort] Retain lazy keyword when sorting imports (#​23762)
  • [pyupgrade] Add from __future__ import annotations automatically (UP006) (#​23260)
  • [refurb] Support newline parameter in FURB101 for Python 3.13+ (#​23754)
  • [ruff] Add os-path-commonprefix (RUF071) (#​23814)
  • [ruff] Add unsafe fix for os-path-commonprefix (RUF071) (#​23852)
  • [ruff] Limit RUF036 to typing contexts; make it unsafe for non-typing-only (#​23765)
  • [ruff] Use starred unpacking for RUF017 in Python 3.15+ (#​23789)
Bug fixes
  • Fix --add-noqa creating unwanted leading whitespace (#​23773)
  • Fix --add-noqa breaking shebangs (#​23577)
  • [formatter] Fix lambda body formatting for multiline calls and subscripts (#​23866)
  • [formatter] Preserve required annotation parentheses in annotated assignments (#​23865)
  • [formatter] Preserve type-expression parentheses in the formatter (#​23867)
  • [flake8-annotations] Fix stack overflow in ANN401 on quoted annotations with escape sequences (#​23912)
  • [pep8-naming] Check naming conventions in match pattern bindings (N806, N815, N816) (#​23899)
  • [perflint] Fix comment duplication in fixes (PERF401, PERF403) (#​23729)
  • [pyupgrade] Properly trigger super change in nested class (UP008) (#​22677)
  • [ruff] Avoid syntax errors in RUF036 fixes (#​23764)
Rule changes
  • [flake8-bandit] Flag S501 with requests.request (#​23873)
  • [flake8-executable] Fix WSL detection in non-Docker containers (#​22879)
  • [flake8-print] Ignore pprint calls with stream= (#​23787)
Documentation
  • Update docs for Markdown code block formatting (#​23871)
  • [flake8-bugbear] Fix misleading description for B904 (#​23731)
Contributors

v0.15.5

Compare Source

Released on 2026-03-05.

Preview features
  • Discover Markdown files by default in preview mode (#​23434)
  • [perflint] Extend PERF102 to comprehensions and generators (#​23473)
  • [refurb] Fix FURB101 and FURB103 false positives when I/O variable is used later (#​23542)
  • [ruff] Add fix for none-not-at-end-of-union (RUF036) (#​22829)
  • [ruff] Fix false positive for re.split with empty string pattern (RUF055) (#​23634)
Bug fixes
  • [fastapi] Handle callable class dependencies with __call__ method (FAST003) (#​23553)
  • [pydocstyle] Fix numpy section ordering (D420) (#​23685)
  • [pyflakes] Fix false positive for names shadowing re-exports (F811) (#​23356)
  • [pyupgrade] Avoid inserting redundant None elements in UP045 (#​23459)
Documentation
  • Document extension mapping for Markdown code formatting (#​23574)
  • Update default Python version examples (#​23605)
Other changes
  • Publish releases to Astral mirror (#​23616)
Contributors

v0.15.4

Compare Source

Released on 2026-02-26.

This is a follow-up release to 0.15.3 that resolves a panic when the new rule PLR1712 was enabled with any rule that analyzes definitions, such as many of the ANN or D rules.

Bug fixes
  • Fix panic on access to definitions after analyzing definitions (#​23588)
  • [pyflakes] Suppress false positive in F821 for names used before del in stub files (#​23550)
Documentation
  • Clarify first-party import detection in Ruff (#​23591)
  • Fix incorrect import-heading example (#​23568)
Contributors

v0.15.3

Compare Source

Released on 2026-02-26.

Preview features

  • Drop explicit support for .qmd file extension (#​23572)

    This can now be enabled instead by setting the extension option:

    # ruff.toml
extension = { qmd = "markdown" }

# pyproject.toml
[tool.ruff]
extension = { qmd = "markdown" }

  • Include configured extensions in file discovery (#​23400)

  • [flake8-bandit] Allow suspicious imports in TYPE_CHECKING blocks (S401-S415) (#​23441)

  • [flake8-bugbear] Allow B901 in pytest hook wrappers (#​21931)

  • [flake8-import-conventions] Add missing conventions from upstream (ICN001, ICN002) (#​21373)

  • [pydocstyle] Add rule to enforce docstring section ordering (D420) (#​23537)

  • [pylint] Implement swap-with-temporary-variable (PLR1712) (#​22205)

  • [ruff] Add unnecessary-assign-before-yield (RUF070) (#​23300)

  • [ruff] Support file-level noqa in RUF102 (#​23535)

  • [ruff] Suppress diagnostic for invalid f-strings before Python 3.12 (RUF027) (#​23480)

  • [flake8-bandit] Don't flag BaseLoader/CBaseLoader as unsafe (S506) (#​23510)

Bug fixes
  • Avoid infinite loop between I002 and PYI025 (#​23352)
  • [pyflakes] Fix false positive for @overload from lint.typing-modules (F811) (#​23357)
  • [pyupgrade] Fix false positive for TypeVar default before Python 3.12 (UP046) (#​23540)
  • [pyupgrade] Fix handling of \N in raw strings (UP032) (#​22149)
Rule changes

  • Render sub-diagnostics in the GitHub output format (#​23455)

  • [flake8-bugbear] Tag certain B007 diagnostics as unnecessary (#​23453)

  • [ruff] Ignore unknown rule codes in RUF100 (#​23531)

    These are now flagged by RUF102 instead.

Documentation
  • Fix missing settings links for several linters (#​23519)
  • Update isort action comments heading (#​23515)
  • [pydocstyle] Fix double comma in description of D404 (#​23440)
Other changes
  • Update the Python module (notably find_ruff_bin) for parity with uv (#​23406)
Contributors
tox-dev/tox (tox)

v4.49.1

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.49.0...4.49.1

v4.49.0

Compare Source

What's Changed
New Contributors

Full Changelog: tox-dev/tox@4.48.1...4.49.0

v4.48.1

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.48.0...4.48.1

v4.48.0

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.47.3...4.48.0

v4.47.3

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.47.2...4.47.3

v4.47.2

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.47.1...4.47.2

v4.47.1

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.47.0...4.47.1

v4.47.0

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.46.3...4.47.0

v4.46.3

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.46.2...4.46.3

v4.46.2

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.46.1...4.46.2

v4.46.1

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.46.0...4.46.1

v4.46.0

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.45.0...4.46.0

v4.45.0

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.44.0...4.45.0

v4.44.0

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.43.0...4.44.0

v4.43.0

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.42.0...4.43.0

v4.42.0

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.41.0...4.42.0

v4.41.0

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.40.0...4.41.0

v4.40.0

Compare Source

What's Changed

Full Changelog: tox-dev/tox@4.39.0...4.40.0

v4.39.0

Compare Source

What's Changed

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Mar 12, 2026 •
edited
Loading

Deploying geodatalytics with  Cloudflare Pages  Cloudflare Pages

Latest commit: 3646d56
Status: ✅  Deploy successful!
Preview URL: https://2113c109.geodatalytics.pages.dev
Branch Preview URL: https://renovate-dev-deps.geodatalytics.pages.dev

View logs

@renovate renovate bot force-pushed the renovate/dev-deps branch 2 times, most recently from 739ac0c to ca19725 Compare March 16, 2026 15:49
@renovate renovate bot force-pushed the renovate/dev-deps branch from ca19725 to 3646d56 Compare March 16, 2026 15:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants