chore(deps): update all dependencies #2488
Conversation
trusted-contributions-gcf
bot
added
the
kokoro:force-run
Summary of ChangesHello @renovate-bot, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request focuses on maintaining the project's health and security by updating a comprehensive set of dependencies. It ensures that the development and CI/CD environments leverage the latest stable versions of Python packages, Bazel build rules, and GitHub Actions runners, thereby benefiting from recent bug fixes, performance enhancements, and security patches across the board. Highlights
Ignored Files
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates several dependencies. Most are patch-level updates and appear to be safe. However, the update for rules_cc from 0.1.1 to 0.2.14 is a significant jump and is missing a required configuration change in the WORKSPACE file, which could cause the build to fail. I have added a critical comment with a suggestion to fix this. Additionally, this PR includes major updates to the Ubuntu runner version (22.04 to 24.04) and a minor but significant update to the Python version used in CI (3.10 to 3.14). These changes should be tested thoroughly to ensure compatibility.
| urls = ["https://github.com/bazelbuild/rules_cc/releases/download/0.2.14/rules_cc-0.2.14.tar.gz"], | ||
| sha256 = "a2fdfde2ab9b2176bd6a33afca14458039023edb1dd2e73e6823810809df4027", | ||
| strip_prefix = "rules_cc-0.2.14", | ||
| ) |
There was a problem hiding this comment.
According to the rules_cc v0.2.14 release notes, you need to load and call compatibility_proxy_repo to complete the setup for this new version. Without this, the build may fail.
| ) | |
| ) | |
| load("@rules_cc//cc:extensions.bzl", "compatibility_proxy_repo") | |
| compatibility_proxy_repo() |
renovate-bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
9df0405 to
b2a3a65
Compare
renovate-bot
force-pushed
the
renovate/all
branch
from
b2a3a65 to
9ae4071
Compare
2 participants
This PR contains the following updates:
v5->v6==6.2.1->==6.2.2==2025.10.5->==2025.11.12==8.3.0->==8.3.1==1.3.0->==1.3.1==6.33.0->==6.33.1==1.16->==1.16.2==9.0.0->==9.0.13.10->3.140.1.1->0.2.1422.04->24.04==2.5.0->==2.6.0Release Notes
actions/checkout (actions/checkout)
v6Compare Source
tkem/cachetools (cachetools)
v6.2.2Compare Source
===================
Minor improvements from GitHub Copilot code review.
Improve documentation.
certifi/python-certifi (certifi)
v2025.11.12Compare Source
pallets/click (click)
v8.3.1Compare Source
Released 2025-11-15
subprocess.Popen. :issue:3039:pr:
3055Sentinel.UNSETdefault values byNoneas they're passed throughthe
Context.invoke()method. :issue:3066:issue:3065:pr:3068Sentinel.UNSEThappening too early, which caused incorrectbehavior for multiple parameters using the same name. :issue:
3071:pr:3079Sentinel.UNSETvalues asNonewhen looking up for other parametersthrough the context inside parameter callbacks. :issue:
3136:pr:3137promptandconfirmparameterprompt_suffixisempty. :issue:
3019:pr:3021Sentinel.UNSETis found during parsing, it will skip calls totype_cast_value. :issue:3069:pr:3090agronholm/exceptiongroup (exceptiongroup)
v1.3.1Compare Source
AttributeError: 'TracebackException' object has no attribute 'exceptions'when formatting unpickled TBEs from another Python process which did not apply theexceptiongrouppatches (#144)JessicaTegner/pypandoc (pypandoc)
v1.16.2Compare Source
pytest-dev/pytest (pytest)
v9.0.1Compare Source
pytest 9.0.1 (2025-11-12)
Bug fixes
raise unittest.SkipTest.Packaging updates and notes for downstreams
version string can be passed into its
package_envthroughthe
SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTESTenvironmentvariable as a part of the release process -- by
webknjaz.Contributor-facing changes
creating GitHub Releases without having a Git checkout on
disk -- by
bluetechandwebknjaz.version string can be passed into its
package_envthroughthe
SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTESTenvironmentvariable as a part of the release process -- by
webknjaz.actions/python-versions (python)
v3.14.1: 3.14.1Compare Source
Python 3.14.1
v3.14.0: 3.14.0Compare Source
Python 3.14.0
v3.13.10: 3.13.10Compare Source
Python 3.13.10
v3.13.9: 3.13.9Compare Source
Python 3.13.9
v3.13.8: 3.13.8Compare Source
Python 3.13.8
v3.13.7: 3.13.7Compare Source
Python 3.13.7
v3.13.6: 3.13.6Compare Source
Python 3.13.6
v3.13.5: 3.13.5Compare Source
Python 3.13.5
v3.13.4: 3.13.4Compare Source
Python 3.13.4
v3.13.3: 3.13.3Compare Source
Python 3.13.3
v3.13.2: 3.13.2Compare Source
Python 3.13.2
v3.13.1: 3.13.1Compare Source
Python 3.13.1
v3.13.0: 3.13.0Compare Source
Python 3.13.0
v3.12.12: 3.12.12Compare Source
Python 3.12.12
v3.12.11: 3.12.11Compare Source
Python 3.12.11
v3.12.10: 3.12.10Compare Source
Python 3.12.10
v3.12.9: 3.12.9Compare Source
Python 3.12.9
v3.12.8: 3.12.8Compare Source
Python 3.12.8
v3.12.7: 3.12.7Compare Source
Python 3.12.7
v3.12.6: 3.12.6Compare Source
Python 3.12.6
v3.12.5: 3.12.5Compare Source
Python 3.12.5
v3.12.4: 3.12.4Compare Source
Python 3.12.4
v3.12.3: 3.12.3Compare Source
Python 3.12.3
v3.12.2: 3.12.2Compare Source
Python 3.12.2
v3.12.1: 3.12.1Compare Source
Python 3.12.1
v3.12.0: 3.12.0Compare Source
Python 3.12.0
v3.11.14: 3.11.14Compare Source
Python 3.11.14
v3.11.13: 3.11.13Compare Source
Python 3.11.13
v3.11.12: 3.11.12Compare Source
Python 3.11.12
v3.11.11: 3.11.11Compare Source
Python 3.11.11
v3.11.10: 3.11.10Compare Source
Python 3.11.10
v3.11.9: 3.11.9Compare Source
Python 3.11.9
v3.11.8: 3.11.8Compare Source
Python 3.11.8
v3.11.7: 3.11.7Compare Source
Python 3.11.7
v3.11.6: 3.11.6Compare Source
Python 3.11.6
v3.11.5: 3.11.5Compare Source
Python 3.11.5
v3.11.4: 3.11.4Compare Source
Python 3.11.4
v3.11.3: 3.11.3Compare Source
Python 3.11.3
v3.11.2: 3.11.2Compare Source
Python 3.11.2
v3.11.1: 3.11.1Compare Source
Python 3.11.1
v3.11.0: 3.11.0Compare Source
Python 3.11.0
bazelbuild/rules_cc (rules_cc)
v0.2.14Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.13...0.2.14
v0.2.13Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.12...0.2.13
v0.2.12Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.11...0.2.12
v0.2.11Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.10...0.2.11
v0.2.10Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.9...0.2.10
v0.2.9Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.8...0.2.9
v0.2.8Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.7...0.2.8
v0.2.7Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.6...0.2.7
v0.2.6Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.5...0.2.6
v0.2.5Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.4...0.2.5
v0.2.4Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.3...0.2.4
v0.2.3Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.2...0.2.3
v0.2.2Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.1...0.2.2
v0.2.1Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.2.0...0.2.1
v0.2.0Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.1.4...0.2.0
v0.1.5Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
What's Changed
Full Changelog: bazelbuild/rules_cc@0.1.4...0.1.5
v0.1.4Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.1.3...0.1.4
v0.1.3Compare Source
Using bzlmod with Bazel 6 or later:
[Bazel 6] Add
common --enable_bzlmodto.bazelrc.Add to your
MODULE.bazelfile:Using WORKSPACE:
Full Changelog: bazelbuild/rules_cc@0.1.2...0.1.3
v0.1.2Compare Source
Incompatible changes
Full Changelog: bazelbuild/rules_cc@0.1.1...0.1.2
urllib3/urllib3 (urllib3)
v2.6.0Compare Source
==================
Security
compressed HTTP content ("decompression bombs") leading to excessive resource
consumption even when a small amount of data was requested. Reading small
chunks of compressed data is safer and much more efficient now.
(
GHSA-2xpw-w6gg-jr37 <https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37>__)virtually unlimited links in the
Content-Encodingheader, potentiallyleading to a denial of service (DoS) attack by exhausting system resources
during decoding. The number of allowed chained encodings is now limited to 5.
(
GHSA-gm62-xv2j-4w53 <https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53>__).. caution::
If urllib3 is not installed with the optional
urllib3[brotli]extra, butyour environment contains a Brotli/brotlicffi/brotlipy package anyway, make
sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to
benefit from the security fixes and avoid warnings. Prefer using
urllib3[brotli]to install a compatible Brotli package automatically.If you use custom decompressors, please make sure to update them to
respect the changed API of
urllib3.response.ContentDecoder.Features
HTTPHeaderDictusing bytes keys. (#​3653 <https://github.com/urllib3/urllib3/issues/3653>__)HTTPConnection. (#​3666 <https://github.com/urllib3/urllib3/issues/3666>__)#​3696 <https://github.com/urllib3/urllib3/issues/3696>__)Removals
HTTPResponse.getheaders()method in favor ofHTTPResponse.headers.Removed the
HTTPResponse.getheader(name, default)method in favor ofHTTPResponse.headers.get(name, default). (#​3622 <https://github.com/urllib3/urllib3/issues/3622>__)Bugfixes
urllib3.PoolManagerwhen an integer is passedfor the retries parameter. (
#​3649 <https://github.com/urllib3/urllib3/issues/3649>__)HTTPConnectionPoolwhen used in Emscripten with no explicit port. (#​3664 <https://github.com/urllib3/urllib3/issues/3664>__)SSLKEYLOGFILEwith expandable variables. (#​3700 <https://github.com/urllib3/urllib3/issues/3700>__)Misc
zstdextra to installbackports.zstdinstead ofzstandardon Python 3.13 and before. (#​3693 <https://github.com/urllib3/urllib3/issues/3693>__)BytesQueueBufferclass. (#​3710 <https://github.com/urllib3/urllib3/issues/3710>__)#​3652 <https://github.com/urllib3/urllib3/issues/3652>__)#​3638 <https://github.com/urllib3/urllib3/issues/3638>__)Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.