chore(deps): update all dependencies by renovate[bot] · Pull Request #713 · ansible/ansible-dev-tools

renovate · 2026-03-30T00:33:24Z

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/uv-pre-commit	repository	minor	`0.10.12` → `0.11.2`
biomejs/pre-commit	repository	patch	`v2.4.8` → `v2.4.9`
build (changelog)	dependency-groups	patch	`1.4.0` → `1.4.2`
gunicorn (changelog)	project.optional-dependencies	minor	`25.1.0` → `25.3.0`
pipx (changelog)	dependency-groups	minor	`1.10.1` → `1.11.0`
prek (source, changelog)	dependency-groups	patch	`0.3.6` → `0.3.8`
ruff (source, changelog)	dependency-groups	patch	`0.15.7` → `0.15.8`
tox (changelog)	dependency-groups	minor	`4.50.3` → `4.51.0`
types-requests (changelog)	dependency-groups	minor	`2.32.4.20260107` → `2.33.0.20260327`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

biomejs/pre-commit (biomejs/pre-commit)

`v2.4.9`

Compare Source

pypa/build (build)

`v1.4.2`

Compare Source

What's Changed

fix(uv): always pass the python to use by @henryiii in #996
🐛 fix(release): detect pre-commit environment inconsistencies by @gaborbernat in #1001
🔧 fix(towncrier): match docstrfmt RST formatting expectations by @gaborbernat in #1002
Fix _has_valid_outer_pip when pip is missing by @notatallshaw in #1003
fix: release changelog issue by @henryiii in #1006

New Contributors

@notatallshaw made their first contribution in #1003

Full Changelog: pypa/build@1.4.1...1.4.2

`v1.4.1`

Compare Source

What's Changed

Fix documentation grammar and typos by @DimitriPapadopoulos in #979
Allow setting build constraints by @layday in #963
fix: pip hack workaround by @henryiii in #980
📚 docs: reorganize using Diataxis framework by @gaborbernat in #988
✨ feat(ci): automate releases and harden workflows by @gaborbernat in #991
chore: avoid template injection zizmor issue by @henryiii in #994
chore: fix PR template by @henryiii in #995
chore: fix fix job by @henryiii in #997
🐛 fix(ci): resolve pre-release auth failure and change detection by @gaborbernat in #999
🐛 fix(deps): add pre-commit to release dependency group by @gaborbernat in #1000

Full Changelog: pypa/build@1.4.0...1.4.1

benoitc/gunicorn (gunicorn)

`v25.3.0`: Gunicorn 25.3.0

Compare Source

Bug Fixes

HTTP/2 ASGI Body Duplication: Fix request body being received twice in HTTP/2
ASGI requests, causing JSON parsing errors with "Extra data" messages
(#3558)
ASGI Chunked EOF Handling: Add finish() method to callback parser to handle
chunked encoding edge case where connection closes before final CRLF after zero-chunk
HTTP/2 Documentation: Fix http_protocols examples to use comma-separated string
instead of list syntax (#3561)
Chunked Encoding: Reject chunk extensions containing bare CR bytes per RFC 9112
(#3556)
Request Line Limit: Fix --limit-request-line 0 to mean unlimited as documented,
instead of using default maximum. Works with both Python and fast C parser.
(#3563)

Security

ASGI Parser Header Validation: Add security checks per RFC 9110/9112:
- Reject duplicate Content-Length headers
- Reject requests with both Content-Length and Transfer-Encoding
- Reject chunked transfer encoding in HTTP/1.0
- Reject stacked chunked encoding
- Validate Transfer-Encoding values
- Strict chunk size validation

Changes

Fast HTTP Parser: Update to gunicorn_h1c >= 0.6.3 for asgi_headers property
and InvalidChunkExtension validation for bare CR rejection
ASGI PROXY Protocol: Add PROXY protocol v1/v2 support to callback parser
Docker Images: Update to Python 3.14

`v25.2.0`: Gunicorn 25.2.0

Compare Source

New Features

Fast HTTP Parser (gunicorn_h1c 0.4.1): Integrate new exception types and limit parameters from gunicorn_h1c 0.4.1 for both WSGI and ASGI workers
- Requires gunicorn_h1c >= 0.4.1 for http_parser='fast'
- Falls back to Python parser in auto mode if version not met
- Proper HTTP status codes for limit errors (414, 431)

Bug Fixes

uWSGI Async Workers: Fix InvalidUWSGIHeader: incomplete header error when using gevent or gthread workers with uwsgi protocol behind nginx. (#3552, PR #3554)
FileWrapper Iterator Protocol: Add __iter__ and __next__ methods to FileWrapper for full PEP 3333 compliance. (#3396, PR #3550)

Performance

ASGI HTTP Parser Optimizations: Improve ASGI worker HTTP parsing performance
- Callback-based parsing with direct bytearray buffer operations
- Use bytearray.find() directly instead of converting to bytes first
- Use index-based iteration for header parsing instead of list.pop(0) (O(1) vs O(n))

pypa/pipx (pipx)

`v1.11.0`

Compare Source

What's Changed

🐛 fix(install): enable keyring auth for private indexes by @gaborbernat in #1758
🐛 fix(install): preserve URL constraints in pip-args by @gaborbernat in #1760
🐛 fix(install): keyring auth and URL constraint handling by @gaborbernat in #1759
🐛 fix(upgrade): allow --pip-args in upgrade-all by @gaborbernat in #1761
Make list_installed_packages handle pip errors (#1698) by @absolutely-vivid in #1699
Remove outdated experimental note from --suffix help text by @sedat4ras in #1764
Add MAX_PIPX_LOGS environment variable support by @joewanko in #1763
♻️ refactor(config): rename MAX_PIPX_LOGS to PIPX_MAX_LOGS by @gaborbernat in #1765

New Contributors

@absolutely-vivid made their first contribution in #1699
@sedat4ras made their first contribution in #1764
@joewanko made their first contribution in #1763

Full Changelog: pypa/pipx@1.10.1...1.11.0

j178/prek (prek)

`v0.3.8`

Compare Source

Released on 2026-03-23.

Enhancements

Add experimental language: deno support (#1516)
Add pretty-format-json as builtin hook (#915)
Add check-vcs-permalinks as builtin hook (#1842)
Add check-illegal-windows-names as builtin hook (#1841)
Add check-shebang-scripts-are-executable builtin hook (#1847)
Add destroyed-symlinks builtin hook (#1851)
Add file-contents-sorter as builtin hook (#1846)
Add --all flag to prek uninstall (#1817)
Improve file pattern parse errors (#1829)
Validate uv binary after download (#1825)

Bug fixes

Fix workspace-relative added file paths (#1852)
Relax alias-anchor ratio check for check-yaml (#1839)

Contributors

astral-sh/ruff (ruff)

`v0.15.8`

Compare Source

Released on 2026-03-26.

Preview features

[ruff] New rule unnecessary-if (RUF050) (#24114)
[ruff] New rule useless-finally (RUF072) (#24165)
[ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
[pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

[flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
[flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
[pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
Fix %foo? parsing in IPython assignment expressions (#24152)
analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

[eradicate] ignore ty: ignore comments in ERA001 (#24192)
[flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
[flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
[pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
[refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

Speed up diagnostic rendering (#24146)

Server

Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

Clarify extend-ignore and extend-select settings documentation (#24064)
Mention AI policy in PR template (#24198)

Other changes

Use trusted publishing for NPM packages (#24171)

Contributors

tox-dev/tox (tox)

`v4.51.0`

Compare Source

What's Changed

🔒 ci(workflows): add zizmor security auditing by @gaborbernat in #3896
Add base_python_file config option by @rahuldevikar in #3899
prevent machine ISA from overriding explicit env factors by @rahuldevikar in #3904
🐛 fix(config): fix handling of env_list in nested contexts by @Daverball in #3905
fix: enable persist-credentials for release workflow by @rahuldevikar in #3907

New Contributors

@Daverball made their first contribution in #3905

Full Changelog: tox-dev/tox@4.50.3...4.51.0

Configuration

📅 Schedule: Branch creation - "before 4am on monday" in timezone UTC, Automerge - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone UTC.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@NilashishC

@NilashishC

chore(deps): update all dependencies

c1eaa3d

renovate Bot added chore dependencies labels Mar 30, 2026

renovate Bot requested a review from a team as a code owner March 30, 2026 00:33

github-project-automation Bot added this to 🧰 devtools project board Mar 30, 2026

renovate Bot added dependencies chore labels Mar 30, 2026

renovate Bot enabled auto-merge (squash) March 30, 2026 00:33

renovate Bot had a problem deploying to ack March 30, 2026 00:33 Error

renovate Bot temporarily deployed to ack March 30, 2026 00:33 Inactive

github-actions Bot added chore and removed chore labels Mar 30, 2026

ansibuddy approved these changes Mar 30, 2026

View reviewed changes

github-project-automation Bot moved this to Review in 🧰 devtools project board Mar 30, 2026

renovate Bot merged commit 0d3d9b1 into main Mar 30, 2026
30 of 31 checks passed

renovate Bot deleted the renovate/all branch March 30, 2026 00:44

github-project-automation Bot moved this from Review to Done in 🧰 devtools project board Mar 30, 2026

Navigation Menu

Repository navigation

chore(deps): update all dependencies - #713

chore(deps): update all dependencies#713
renovate[bot] merged 1 commit into
mainfrom
renovate/all

renovate Bot commented Mar 30, 2026

Uh oh!

Uh oh!

This branch was previously deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Mar 30, 2026

Release Notes

What's Changed

New Contributors

What's Changed

v25.3.0: Gunicorn 25.3.0

Bug Fixes

Security

Changes

v25.2.0: Gunicorn 25.2.0

New Features

Bug Fixes

Performance

What's Changed

New Contributors

Enhancements

Bug fixes

Contributors

Preview features

Bug fixes

Rule changes

Performance

Server

Documentation

Other changes

Contributors

What's Changed

New Contributors

Configuration

Uh oh!

Uh oh!

This branch was previously deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v25.3.0`: Gunicorn 25.3.0

`v25.2.0`: Gunicorn 25.2.0