fix(deps): update all non-major dependencies #737

renovate · 2025-12-21T17:03:28Z

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/uv	uses-with	patch	`0.9.3` -> `0.9.18`
black (changelog)	dependency-groups	minor	`==24.8.0` -> `==24.10.0`
click (changelog)	project.dependencies	minor	`>=8.1,<8.2` -> `>=8.3,<8.4`
gitpython	dependency-groups	patch	`==3.1.44` -> `==3.1.45`
python		minor	`3.8.18` -> `3.14.2`

Release Notes

astral-sh/uv (astral-sh/uv)

`v0.9.18`

Compare Source

Released on 2025-12-16.

Enhancements

Add value hints to command line arguments to improve shell completion accuracy (#17080)
Improve error handling in uv publish (#17096)
Improve rendering of multiline error messages (#17132)
Support redirects in uv publish (#17130)
Include Docker images with the alpine version, e.g., python3.x-alpine3.23 (#17100)

Configuration

Accept --torch-backend in [tool.uv] (#17116)

Performance

Speed up uv cache size (#17015)
Initialize S3 signer once (#17092)

Bug fixes

Avoid panics due to reads on failed requests (#17098)
Enforce latest-version in @latest requests (#17114)
Explicitly set EntryType for file entries in tar (#17043)
Ignore pyproject.toml index username in lockfile comparison (#16995)
Relax error when using uv add with UV_GIT_LFS set (#17127)
Support file locks on ExFAT on macOS (#17115)
Change schema for exclude-newer into optional string (#17121)

Documentation

Drop arm musl caveat from Docker documentation (#17111)
Fix version reference in resolver example (#17085)
Better documentation for exclude-newer* (#17079)

`v0.9.17`

Compare Source

Released on 2025-12-09.

Enhancements

Add torch-tensorrt and torchao to the PyTorch list (#17053)
Add hint for misplaced --verbose in uv tool run (#17020)
Add support for relative durations in exclude-newer (a.k.a., dependency cooldowns) (#16814)
Add support for relocatable nushell activation script (#17036)

Bug fixes

Respect dropped (but explicit) indexes in dependency groups (#17012)

Documentation

Improve source-exclude reference docs (#16832)
Recommend UV_NO_DEV in Docker installs (#17030)
Update UV_VERSION in docs for GitLab CI/CD (#17040)

`v0.9.16`

Compare Source

Released on 2025-12-06.

Python

Add CPython 3.14.2
Add CPython 3.13.11

Enhancements

Add a 5m default timeout to acquiring file locks to fail faster on deadlock (#16342)
Add a stub debug subcommand to uv pip announcing its intentional absence (#16966)
Add bounds in uv add --script (#16954)
Add brew specific message for uv self update (#16838)
Error when built wheel is for the wrong platform (#16074)
Filter wheels from PEP 751 files based on --no-binary et al in uv pip compile (#16956)
Support --target and --prefix in uv pip list, uv pip freeze, and uv pip show (#16955)
Tweak language for build backend validation errors (#16720)
Use explicit credentials cache instead of global static (#16768)
Enable SIMD in HTML parsing (#17010)

Preview features

Fix missing preview warning in uv workspace metadata (#16988)
Add a uv auth helper --protocol bazel command (#16886)

Bug fixes

Fix Pyston wheel compatibility tags (#16972)
Allow redundant entries in tool.uv.build-backend.module-name but emit warnings (#16928)
Fix infinite loop in non-attribute re-treats during HTML parsing (#17010)

Documentation

Clarify --project flag help text to indicate project discovery (#16965)
Regenerate the crates.io READMEs on release (#16992)
Update Docker integration guide to prefer COPY over ADD for simple cases (#16883)
Update PyTorch documentation to include information about supporting CUDA 13.0.x (#16957)
Update the versioning policy (#16710)
Upgrade PyTorch documentation to latest versions (#16970)

`v0.9.15`

Compare Source

Released on 2025-12-02.

Python

Add CPython 3.14.1
Add CPython 3.13.10

Enhancements

Add ROCm 6.4 to --torch-backend=auto (#16919)
Add a Windows manifest to uv binaries (#16894)
Add LFS toggle to Git sources (#16143)
Cache source reads during resolution (#16888)
Include PEP 740 attestations when publishing uv to PyPI (#16910)
Allow reading requirements from scripts without an extension (#16923)
Allow reading requirements from scripts with HTTP(S) paths (#16891)

Bug fixes

Fix uv-trampoline-builder builds from crates.io by moving bundled executables (#16922)
Respect NO_COLOR and always show the command as a header when paging uv help output (#16908)
Use 0o666 permissions for flock files instead of 0o777 (#16845)
Revert "Bump astral-tl to v0.7.10 (#16887)" to narrow down a regression causing hangs in metadata retrieval (#16938)

Documentation

Link to the uv version in crates.io member READMEs (#16939)

`v0.9.14`

Compare Source

Released on 2025-12-01.

Performance

Bump astral-tl to v0.7.10 to enable SIMD for HTML parsing (#16887)

Bug fixes

Allow earlier post releases with exclusive ordering (#16881)
Prefer updating existing .zshenv over creating a new one in tool update-shell (#16866)
Respect -e flags in uv add (#16882)

Enhancements

Attach subcommand to User-Agent string (#16837)
Prefer UV_WORKING_DIR over UV_WORKING_DIRECTORY for consistency (#16884)

`v0.9.13`

Compare Source

Released on 2025-11-26.

Bug fixes

Revert "Allow --with-requirements to load extensionless inline-metadata scripts" to fix reading of requirements files from streams (#16861)
Validate URL wheel tags against Requires-Python and required environments (#16824)

Documentation

Drop unpublished crates from the uv crates.io README (#16847)
Fix the links to uv in crates.io member READMEs (#16848)

`v0.9.12`

Compare Source

Released on 2025-11-24.

Enhancements

Allow --with-requirements to load extensionless inline-metadata scripts (#16744)
Collect and upload PEP 740 attestations during uv publish (#16731)
Prevent uv export from overwriting pyproject.toml (#16745)

Documentation

Add a crates.io README for uv (#16809)
Add documentation for intermediate Docker layers in a workspace (#16787)
Enumerate workspace members in the uv crate README (#16811)
Fix documentation links for crates (#16801)
Generate a crates.io README for uv workspace members (#16812)
Move the "Export" guide to the projects concept section (#16835)
Update the cargo install recommendation to use crates (#16800)
Use the word "internal" in crate descriptions (#16810)

`v0.9.11`

Compare Source

Released on 2025-11-20.

Python

Add CPython 3.15.0a2

See the python-build-standalone release notes for details.

Enhancements

Add SBOM support to uv export (#16523)
Publish to crates.io (#16770)

Preview features

Add uv workspace list --paths (#16776)
Fix the preview warning on uv workspace dir (#16775)

Bug fixes

Fix uv init author serialization via toml_edit inline tables (#16778)
Fix status messages without TTY (#16785)
Preserve end-of-line comment whitespace when editing pyproject.toml (#16734)
Disable always-authenticate when running under Dependabot (#16773)

Documentation

Document the new behavior for free-threaded python versions (#16781)
Improve note about build system in publish guide (#16788)
Move do not upload publish note out of the guide into concepts (#16789)

`v0.9.10`

Compare Source

Released on 2025-11-17.

Enhancements

Add support for SSL_CERT_DIR (#16473)
Enforce UTF‑8-encoded license files during uv build (#16699)
Error when a project.license-files glob matches nothing (#16697)
pip install --target (and sync) install Python if necessary (#16694)
Account for python_downloads_json_url in pre-release Python version warnings (#16737)
Support HTTP/HTTPS URLs in uv python --python-downloads-json-url (#16542)

Preview features

Add support for --upgrade in uv python install (#16676)
Fix handling of python install --default for pre-release Python versions (#16706)
Add uv workspace list to list workspace members (#16691)

Bug fixes

Don't check file URLs for ambiguously parsed credentials (#16759)

Documentation

Add a "storage" reference document (#15954)

`v0.9.9`

Compare Source

Released on 2025-11-12.

Deprecations

Deprecate use of --project in uv init (#16674)

Enhancements

Add iOS support to Python interpreter discovery (#16686)
Reject ambiguously parsed URLs (#16622)
Allow explicit values in uv version --bump (#16555)
Warn on use of managed pre-release Python versions when a stable version is available (#16619)
Allow signing trampolines on Windows by using .rcdata to store metadata (#15068)
Add --only-emit-workspace and similar variants to uv export (#16681)

Preview features

Add uv workspace dir command (#16678)
Add uv workspace metadata command (#16516)

Configuration

Add UV_NO_DEFAULT_GROUPS environment variable (#16645)

Bug fixes

Remove torch-model-archiver and torch-tb-profiler from PyTorch backend (#16655)
Fix Pixi environment detection (#16585)

Documentation

Fix CMD path in FastAPI Dockerfile (#16701)

`v0.9.8`

Compare Source

Released on 2025-11-07.

Enhancements

Accept multiple packages in uv export (#16603)
Accept multiple packages in uv sync (#16543)
Add a uv cache size command (#16032)
Add prerelease guidance for build-system resolution failures (#16550)
Allow Python requests to include +gil to require a GIL-enabled interpreter (#16537)
Avoid pluralizing 'retry' for single value (#16535)
Enable first-class dependency exclusions (#16528)
Fix inclusive constraints on available package versions in resolver errors (#16629)
Improve uv init error for invalid directory names (#16554)
Show help on uv build -h (#16632)
Include the Python variant suffix in "Using Python ..." messages (#16536)
Log most recently modified file for cache-keys (#16338)
Update Docker builds to use nightly Rust toolchain with musl v1.2.5 (#16584)
Add GitHub attestations for uv release artifacts (#11357)

Configuration

Expose UV_NO_GROUP as an environment variable (#16529)
Add UV_NO_SOURCES as an environment variable (#15883)

Bug fixes

Allow --check and --locked to be used together in uv lock (#16538)
Allow for unnormalized names in the METADATA file (#16547) (#16548)
Fix missing value_type for default-groups in schema (#16575)
Respect multi-GPU outputs in nvidia-smi (#15460)
Fix DNS lookup errors in Docker containers (#8450)

Documentation

Fix typo in uv tool list doc (#16625)
Note uv pip list name normalization in docs (#13210)

Other changes

Update Rust toolchain to 1.91 and MSRV to 1.89 (#16531)

`v0.9.7`

Compare Source

Released on 2025-10-30.

Enhancements

Add Windows x86-32 emulation support to interpreter architecture checks (#13475)
Improve readability of progress bars (#16509)

Bug fixes

Drop terminal coloring from uv auth token output (#16504)
Don't use UV_LOCKED to enable --check flag (#16521)

`v0.9.6`

Compare Source

Released on 2025-10-29.

This release contains an upgrade to Astral's fork of async_zip, which addresses potential sources of ZIP parsing differentials between uv and other Python packaging tooling. See GHSA-pqhf-p39g-3x64 for additional details.

Security

Address ZIP parsing differentials (GHSA-pqhf-p39g-3x64)

Python

Upgrade GraalPy to 25.0.1 (#16401)

Enhancements

Add --clear to uv build to remove old build artifacts (#16371)
Add --no-create-gitignore to uv build (#16369)
Do not error when a virtual environment directory cannot be removed due to a busy error (#16394)
Improve hint on pip install --system when externally managed (#16392)
Running uv lock --check with outdated lockfile will print that --check was passed, instead of --locked (#16322)
Update uv init template for Maturin (#16449)
Improve ordering of Python sources in logs (#16463)
Restore DockerHub release images and annotations (#16441)

Bug fixes

Check for matching Python implementation during uv python upgrade (#16420)
Deterministically order --find-links distributions (#16446)
Don't panic in uv export --frozen when the lockfile is outdated (#16407)
Fix root of uv tree when --package is used with circular dependencies (#15908)
Show package list with pip freeze --quiet (#16491)
Limit uv auth login pyx.dev retries to 60s (#16498)
Add an empty group with uv add --group ... -r ... (#16490)

Documentation

Update docs for maturin build backend init template (#16469)
Update docs to reflect previous changes to signal forwarding semantics (#16430)
Add instructions for installing via MacPorts (#16039)

`v0.9.5`

Compare Source

Released on 2025-10-21.

This release contains an upgrade to astral-tokio-tar, which addresses a vulnerability in tar extraction on malformed archives with mismatching size information between the ustar header and PAX extensions. While the astral-tokio-tar advisory has been graded as "high" due its potential broader impact, the specific impact to uv is low due to a lack of novel attacker capability. Specifically, uv only processes tar archives from source distributions, which already possess the capability for full arbitrary code execution by design, meaning that an attacker gains no additional capabilities through astral-tokio-tar.

Regardless, we take the hypothetical risk of parser differentials very seriously. Out of an abundance of caution, we have assigned this upgrade an advisory: GHSA-w476-p2h3-79g9

Security

Upgrade astral-tokio-tar to 0.5.6 to address a parsing differential (#16387)

Enhancements

Add required environment marker example to hint (#16244)
Fix typo in MissingTopLevel warning (#16351)
Improve 403 Forbidden error message to indicate package may not exist (#16353)
Add a hint on uv pip install failure if the --system flag is used to select an externally managed interpreter (#16318)

Bug fixes

Fix backtick escaping for PowerShell (#16307)

Documentation

Document metadata consistency expectation (#15683)
Remove outdated aarch64 musl note (#16385)

`v0.9.4`

Compare Source

Released on 2025-10-17.

Enhancements

Add CUDA 13.0 support (#16321)
Add auto-detection for Intel GPU on Windows (#16280)
Implement display of RFC 9457 HTTP error contexts (#16199)

Bug fixes

Avoid obfuscating pyx tokens in uv auth token output (#16345)

psf/black (black)

`v24.10.0`

Compare Source

Highlights

Black is now officially tested with Python 3.13 and provides Python 3.13
mypyc-compiled wheels. (#4436) (#4449)
Black will issue an error when used with Python 3.12.5, due to an upstream memory
safety issue in Python 3.12.5 that can cause Black's AST safety checks to fail. Please
use Python 3.12.6 or Python 3.12.4 instead. (#4447)
Black no longer supports running with Python 3.8 (#4452)

Stable style

Fix crashes involving comments in parenthesised return types or X | Y style unions.
(#4453)
Fix skipping Jupyter cells with unknown %% magic (#4462)

Preview style

Fix type annotation spacing between * and more complex type variable tuple (i.e. def fn(*args: *tuple[*Ts, T]) -> None: pass) (#4440)

Caching

Fix bug where the cache was shared between runs with and without --unstable (#4466)

Packaging

Upgrade version of mypyc used to 1.12 beta (#4450) (#4449)
blackd now requires a newer version of aiohttp. (#4451)

Output

Added Python target version information on parse error (#4378)
Add information about Black version to internal error messages (#4457)

pallets/click (click)

`v8.3.1`

Compare Source

Released 2025-11-15

Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039
:pr:3055
Replace Sentinel.UNSET default values by None as they're passed through
the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
Fix conversion of Sentinel.UNSET happening too early, which caused incorrect
behavior for multiple parameters using the same name. :issue:3071 :pr:3079
Hide Sentinel.UNSET values as None when looking up for other parameters
through the context inside parameter callbacks. :issue:3136 :pr:3137
Fix rendering when prompt and confirm parameter prompt_suffix is
empty. :issue:3019 :pr:3021
When Sentinel.UNSET is found during parsing, it will skip calls to
type_cast_value. :issue:3069 :pr:3090

`v8.3.0`

Compare Source

Released 2025-09-17

Improved flag option handling: Reworked the relationship between flag_value
and default parameters for better consistency:
- The default parameter value is now preserved as-is and passed directly
  to CLI functions (no more unexpected transformations)
- Exception: flag options with default=True maintain backward compatibility
  by defaulting to their flag_value
- The default parameter can now be any type (bool, None, etc.)
- Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610
  :issue:3024 :pr:3030
Allow default to be set on Argument for nargs = -1. :issue:2164
:pr:3030
Show correct auto complete value for nargs option in combination with flag
option :issue:2813
Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013
Lazily import shutil. :pr:3023
Properly forward exception information to resources registered with
click.core.Context.with_resource(). :issue:2447 :pr:3058
Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

`v8.2.2`

Compare Source

Released 2025-07-31

Fix reconciliation of default, flag_value and type parameters for
flag options, as well as parsing and normalization of environment variables.
:issue:2952 :pr:2956
Fix typing issue in BadParameter and MissingParameter exceptions for the
parameter param_hint that did not allow for a sequence of string where the
underlying function _join_param_hints allows for it. :issue:2777 :pr:2990
Use the value of Enum choices to render their default value in help
screen. Refs :issue:2911 :pr:3004
Fix completion for the Z shell (zsh) for completion items containing
colons. :issue:2703 :pr:2846
Don't include envvar in error hint when not configured. :issue:2971 :pr:2972
Fix a rare race in click.testing.StreamMixer's finalization that manifested
as a ValueError on close in a multi-threaded test session.
:issue:2993 :pr:2991

`v8.2.1`

Compare Source

Released 2025-05-20

Fix flag value handling for flag options with a provided type. :issue:2894
:issue:2897 :pr:2930
Fix shell completion for nested groups. :issue:2906 :pr:2907
Flush sys.stderr at the end of CliRunner.invoke. :issue:2682
Fix EOF handling for stdin input in CliRunner. :issue:2787

`v8.2.0`

Compare Source

Released 2025-05-10

Drop support for Python 3.7, 3.8, and 3.9. :pr:2588 :pr:2893
Use modern packaging metadata with pyproject.toml instead of setup.cfg.
:pr:2438
Use flit_core instead of setuptools as build backend. :pr:2543
Deprecate the __version__ attribute. Use feature detection, or
importlib.metadata.version("click"), instead. :issue:2598
BaseCommand is deprecated. Command is the base class for all
commands. :issue:2589
MultiCommand is deprecated. Group is the base class for all group
commands. :issue:2590
The current parser and related classes and methods, are deprecated.
:issue:2205
- OptionParser and the parser module, which is a modified copy of
  optparse in the standard library.
- Context.protected_args is unneeded. Context.args contains any
  remaining arguments while parsing.
- Parameter.add_to_parser (on both Argument and Option) is
  unneeded. Parsing works directly without building a separate parser.
- split_arg_string is moved from parser to shell_completion.
Enable deferred evaluation of annotations with
from __future__ import annotations. :pr:2270
When generating a command's name from a decorated function's name, the
suffixes _command, _cmd, _group, and _grp are removed.
:issue:2322
Show the types.ParamType.name for types.Choice options within
--help message if show_choices=False is specified.
:issue:2356
Do not display default values in prompts when Option.show_default is
False. :pr:2509
Add get_help_extra method on Option to fetch the generated extra
items used in get_help_record to render help text. :issue:2516
:pr:2517
Keep stdout and stderr streams independent in CliRunner. Always
collect stderr output and never raise an exception. Add a new
output stream to simulate what the user sees in its terminal. Removes
the mix_stderr parameter in CliRunner. :issue:2522 :pr:2523
Option.show_envvar now also shows environment variable in error messages.
:issue:2695 :pr:2696
Context.close will be called on exit. This results in all
Context.call_on_close callbacks and context managers added via
Context.with_resource to be closed on exit as well. :pr:2680
Add ProgressBar(hidden: bool) to allow hiding the progressbar. :issue:2609
A UserWarning will be shown when multiple parameters attempt to use the
same name. :issue:2396
When using Option.envvar with Option.flag_value, the flag_value
will always be used instead of the value of the environment variable.
:issue:2746 :pr:2788
Add Choice.get_invalid_choice_message method for customizing the
invalid choice message. :issue:2621 :pr:2622
If help is shown because no_args_is_help is enabled (defaults to True
for groups, False for commands), the exit code is 2 instead of 0.
:issue:1489 :pr:1489
Contexts created during shell completion are closed properly, fixing
a ResourceWarning when using click.File. :issue:2644 :pr:2800
:pr:2767
click.edit(filename) now supports passing an iterable of filenames in
case the editor supports editing multiple files at once. Its return type
is now also typed: AnyStr if text is passed, otherwise None.
:issue:2067 :pr:2068
Specialized typing of progressbar(length=...) as ProgressBar[int].
:pr:2630
Improve echo_via_pager behaviour in face of errors.
:issue:2674
- Terminate the pager in case a generator passed to echo_via_pager
  raises an exception.
- Ensure to always close the pipe to the pager process and wait for it
  to terminate.
- echo_via_pager will not ignore KeyboardInterrupt anymore. This
  allows the user to search for future output of the generator when
  using less and then aborting the program using ctrl-c.
deprecated: bool | str can now be used on options and arguments. This
previously was only available for Command. The message can now also be
customised by using a str instead of a bool. :issue:2263 :pr:2271
- Command.deprecated formatting in --help changed from
  (Deprecated) help to help (DEPRECATED).
- Parameters cannot be required nor prompted or an error is raised.
- A warning will be printed when something deprecated is used.
Add a catch_exceptions parameter to CliRunner. If
catch_exceptions is not passed to CliRunner.invoke, the value
from CliRunner is used. :issue:2817 :pr:2818
Option.flag_value will no longer have a default value set based on
Option.default if Option.is_flag is False. This results in
Option.default not needing to implement __bool__. :pr:2829
Incorrect click.edit typing has been corrected. :pr:2804
Choice is now generic and supports any iterable value.
This allows you to use enums and other non-str values. :pr:2796
:issue:605
Fix setup of help option's defaults when using a custom class on its
decorator. Removes HelpOption. :issue:2832 :pr:2840

gitpython-developers/GitPython (gitpython)

`v3.1.45`

Compare Source

What's Changed

Fix various version-related CI breakages by @EliahKagan in #1987
Do some CI cleanup to make reports clearer and future changes easier by @EliahKagan in #1989
Affirm that gitdb and smmap advisories can also be created by @EliahKagan in #1991
Fix links to gitdb and smmap SECURITY.md files by @EliahKagan in #1992
Test Python 3.13 regularly on Ubuntu and macOS on CI by @EliahKagan in #1990
Repo.rev_parse: Handle ^{commit} correctly by @flichtenheld in #1996
Fuzzing: Fix Broken Fuzz Test for Git Submodule Handling by @DaveLak in #1997
Work around Cygwin CI failure #2004, except for test_installation by @EliahKagan in #2007
Mark test_installation xfail on Cygwin CI by @EliahKagan in #2009
IndexFile._to_relative_path - fix case where absolute path gets stripped of trailing slash by @kamilkozik7 in #2012
Use WSL1 on CI by @EliahKagan in #2010
Test free-threaded Python (but only on Linux) by @EliahKagan in #2011
Use property decorator to support typing by @Andrej730 in #2015
Fix some incorrect sphinx markups in the docstrings by @koyuki7w in #2018
replace quansight-labs/setup-python with actions/setup-python by @ngoldbaum in #2019
remove type assertions from util.py by @gcmarx in #2028
correctly handle uname-cmd that doesn't point to an executable file by @gcmarx in #2026
Use newer ruff style by @EliahKagan in #2031
Have CodeQL scan GitHub Actions workflows as well as Python code by @EliahKagan in #2032
Specify explicit contents: read workflow permissions by @EliahKagan in #2033
Fix GitConfigParser not removing quotes from values by @betaboon in #2035
Preserve quoted leading and trailing single-line config var whitespace by @EliahKagan in #2036
Refactor Git.{AutoInterrupt,CatFileContentStream} nesting by @EliahKagan in #2037
Fix Git.{AutoInterrupt,CatFileContentStream} static typing by @EliahKagan in #2039
Fix CI mypy command on free-threaded Python by @EliahKagan in #2040
Split Cygwin CI into non-performance and performance test jobs by @EliahKagan in #2042
Express conditional setuptools requirement statically by @EliahKagan in #2043
Fix ambiguous _safer_popen_windows comment by @EliahKagan in #2044
Clarify USE_SHELL warning helper signature by @EliahKagan in #2045
Test ConfigParser with whitespace outside the value by @EliahKagan in #2046
Remove explicit empty "" handling in ConfigParser by @EliahKagan in #2047
Various style improvements by @EliahKagan in #2049
Don't remove quotes if \ or " are present inside by @EliahKagan in #2048
fix updating submodules with relative urls by @david0 in #2051
Run cat_file.py fixture without site customizations by @EliahKagan in #2052
Fix Cygwin installation on CI for pip by @EliahKagan in #2053
Fail test_installation on warnings, and remove deprecated license classifier by @EliahKagan in #2054
Add clearer error version for unsupported index error by @tombedor in #2055
Fix name collision by @NMertsch in #2060
Allow relative path url in submodules for submodule_update by @t-webber in #2062

New Contributors

@flichtenheld made their first contribution in #1996
@kamilkozik7 made their first contribution in #2012
@koyuki7w made their first contribution in #2018
@ngoldbaum made their first contribution in #2019
@gcmarx made their first contribution in #2028
@betaboon made their first contribution in #2035
@david0 made their first contribution in #2051
@tombedor made their first contribution in #2055
@NMertsch made their first contribution in #2060
@t-webber made their first contribution in #2062

Full Changelog: gitpython-developers/GitPython@3.1.44...3.1.45

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-12-21T17:03:30Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package black --upgrade-package black --upgrade-package black --upgrade-package click --upgrade-package gitpython --upgrade-package gitpython
Using CPython 3.14.2 interpreter at: /opt/containerbase/tools/python/3.14.2/bin/python3.14
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version == '3.9.*'):
  ╰─▶ Because the requested Python version (>=3.8, <3.15) does not satisfy
      Python>=3.10 and click>=8.3.0 depends on Python>=3.10, we can conclude
      that click>=8.3.0 cannot be used.
      And because only the following versions of click are available:
          click<=8.3.0
          click==8.3.1
      we can conclude that click>=8.3.0 cannot be used.
      And because your project depends on click>=8.3 and your project
      requires shandy-sqlfmt[jinjafmt], we can conclude that your project's
      requirements are unsatisfiable.

      hint: The `requires-python` value (>=3.8, <3.15) includes Python
      versions that are not supported by your dependencies (e.g.,
      click>=8.3.0 only supports >=3.10). Consider using a more restrictive
      `requires-python` value (like >=3.10).

      hint: While the active Python version is 3.14, the resolution failed for
      other Python versions supported by your project. Consider limiting your
      project's supported Python versions using `requires-python`.

renovate · 2025-12-21T17:23:10Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

fix(deps): update all non-major dependencies

511307e

renovate bot enabled auto-merge (squash) December 21, 2025 17:03

tconbeer added 2 commits December 21, 2025 10:21

fix,breaking: drop 3.8, 3.9 support; bump deps

2629788

fix: remove 3.9 from test matrix

f2d6496

renovate bot merged commit 64284c4 into main Dec 21, 2025
17 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(deps): update all non-major dependencies #737

fix(deps): update all non-major dependencies #737

Uh oh!

renovate bot commented Dec 21, 2025

Uh oh!

renovate bot commented Dec 21, 2025

Uh oh!

renovate bot commented Dec 21, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

fix(deps): update all non-major dependencies #737

fix(deps): update all non-major dependencies #737

Uh oh!

Conversation

renovate bot commented Dec 21, 2025

Release Notes

Enhancements

Configuration

Performance

Bug fixes

Documentation

Enhancements

Bug fixes

Documentation

Python

Enhancements

Preview features

Bug fixes

Documentation

Python

Enhancements

Bug fixes

Documentation

Performance

Bug fixes

Enhancements

Bug fixes

Documentation

Enhancements

Documentation

Python

Enhancements

Preview features

Bug fixes

Documentation

Enhancements

Preview features

Bug fixes

Documentation

Deprecations

Enhancements

Preview features

Configuration

Bug fixes

Documentation

Enhancements

Configuration

Bug fixes

Documentation

Other changes

Enhancements

Bug fixes

Security

Python

Enhancements

Bug fixes

Documentation

Security

Enhancements

Bug fixes

Documentation

Enhancements

Bug fixes

Highlights

Stable style

Preview style

Caching

Packaging

Output

What's Changed

New Contributors

Configuration

Uh oh!

renovate bot commented Dec 21, 2025

⚠️ Artifact update problem

File name: uv.lock

Uh oh!

renovate bot commented Dec 21, 2025

Edited/Blocked Notification