Skip to content

fix(deps): update all non-major dependencies#186

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#186
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Nov 27, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
ansible-compat (changelog) ==25.12.0 → ==25.12.1 age confidence patch
ansible-core ==2.19.5 → ==2.20.5 age confidence minor
ansible-lint (changelog) ==25.11.1 → ==25.12.2 age confidence project.optional-dependencies minor
ansible-lint (changelog) ==25.11.1 → ==25.12.2 age confidence minor
anywidget >=0.9.18,<0.10 → >=0.11,<0.12 age confidence project.dependencies minor
anywidget ==0.9.21 → ==0.11.0 age confidence minor
aws-sam-translator ==1.106.0 → ==1.109.0 age confidence minor
babel (source) ==2.17.0 → ==2.18.0 age confidence minor
boto3 ==1.42.30 → ==1.43.2 age confidence minor
botocore ==1.42.30 → ==1.43.2 age confidence minor
certifi ==2026.1.4 → ==2026.4.22 age confidence minor
cfn-lint (changelog) ==1.41.0 → ==1.50.1 age confidence project.optional-dependencies minor
cfn-lint (changelog) ==1.41.0 → ==1.50.1 age confidence minor
charset-normalizer (changelog) ==3.4.4 → ==3.4.7 age confidence patch
click (changelog) ==8.3.0 → ==8.3.3 age confidence patch
coverage ==7.13.1 → ==7.13.5 age confidence patch
coveralls (changelog) ==4.0.2 → ==4.1.0 age confidence minor
dash (source) ==3.3.0 → ==3.4.0 age confidence minor
docutils (changelog) ==0.21.2 → ==0.22.4 age confidence minor
filelock ==3.20.3 → ==3.29.0 age confidence minor
fonttools ==4.61.1 → ==4.62.1 age confidence minor
gef-file-to-map ==1.0.0 → ==1.0.1 age confidence patch
identify ==2.6.16 → ==2.6.19 age confidence patch
idna (changelog) ==3.11 → ==3.13 age confidence minor
imagesize ==1.4.1 → ==1.5.0 age confidence minor
importlib-metadata ==8.7.1 → ==8.9.0 age confidence minor
ipython ==9.7.0 → ==9.13.0 age confidence project.optional-dependencies minor
ipython ==9.7.0 → ==9.13.0 age confidence minor
jedi ==0.19.2 → ==0.20.0 age confidence minor
jmespath ==1.0.1 → ==1.1.0 age confidence minor
jsonpointer ==3.0.0 → ==3.1.1 age confidence minor
jsonschema-path ==0.3.4 → ==0.4.6 age confidence minor
kiwisolver (changelog) ==1.4.9 → ==1.5.0 age confidence minor
matplotlib ==3.10.8 → ==3.10.9 age confidence patch
mpmath ==1.3.0 → ==1.4.1 age confidence minor
mypy (changelog) ==1.18.2 → ==1.20.2 age confidence project.optional-dependencies minor
mypy (changelog) ==1.18.2 → ==1.20.2 age confidence minor
narwhals ==2.15.0 → ==2.20.0 age confidence minor
numpy (changelog) ==2.4.1 → ==2.4.4 age confidence patch
openapi-core ==0.22.0 → ==0.23.1 age confidence minor
openapi-schema-validator ==0.6.3 → ==0.9.0 age confidence minor
openapi-spec-validator ==0.7.2 → ==0.8.5 age confidence minor
parso ==0.8.5 → ==0.8.7 age confidence patch
pathable ==0.4.4 → ==0.5.0 age confidence minor
pathspec (changelog) ==1.0.3 → ==1.1.1 age confidence minor
platformdirs (changelog) ==4.5.1 → ==4.9.6 age confidence minor
plotly (changelog) ==6.5.2 → ==6.7.0 age confidence minor
polars (changelog) ==1.37.1 → ==1.40.1 age confidence minor
polars-runtime-32 (changelog) ==1.37.1 → ==1.40.1 age confidence minor
pre-commit ==4.5.0 → ==4.6.0 age confidence project.optional-dependencies minor
pre-commit ==4.5.0 → ==4.6.0 age confidence minor
pydantic (changelog) ==2.12.5 → ==2.13.3 age confidence minor
pydantic-core ==2.41.5 → ==2.46.3 age confidence minor
pyparsing ==3.3.1 → ==3.3.2 age confidence patch
python 3.11 → 3.14 age confidence uses-with minor
pytokens ==0.4.0 → ==0.4.1 age confidence patch
referencing (changelog) ==0.36.2 → ==0.37.0 age confidence minor
regex ==2026.1.15 → ==2026.4.4 age confidence minor
s3transfer ==0.16.0 → ==0.17.0 age confidence minor
scipy ==1.17.0 → ==1.17.1 age confidence patch
setuptools (changelog) ==80.9.0 → ==80.10.2 age confidence minor
sphinx-autodoc-typehints (changelog) ==3.5.2 → ==3.10.2 age confidence project.optional-dependencies minor
sphinx-autodoc-typehints (changelog) ==3.5.2 → ==3.10.2 age confidence minor
sphinx-rtd-theme ==3.0.2 → ==3.1.0 age confidence project.optional-dependencies minor
sphinx-rtd-theme ==3.0.2 → ==3.1.0 age confidence minor
sqlfluff (changelog) ==3.4.2 → ==3.5.0 age confidence project.optional-dependencies minor
sqlfluff (changelog) ==3.4.2 → ==3.5.0 age confidence minor
tomli (changelog) ==2.4.0 → ==2.4.1 age confidence patch
tqdm (changelog) ==4.67.1 → ==4.67.3 age confidence patch
virtualenv ==20.36.1 → ==20.39.1 age confidence minor
wcwidth ==0.2.14 → ==0.6.0 age confidence minor
xmltodict ==1.0.2 → ==1.0.4 age confidence patch
yamllint ==1.37.1 → ==1.38.0 age confidence project.optional-dependencies minor
yamllint ==1.37.1 → ==1.38.0 age confidence minor
zipp ==3.23.0 → ==3.23.1 age confidence patch
zizmor (source) ==1.17.0 → ==1.24.1 age confidence project.optional-dependencies minor
zizmor (source) ==1.17.0 → ==1.24.1 age confidence minor

Release Notes

ansible/ansible-compat (ansible-compat)

v25.12.1

Compare Source

Fixes

Maintenance

ansible/ansible-lint (ansible-lint)

v25.12.2

Compare Source

Fixes

Maintenance

v25.12.1

Compare Source

Features
Fixes
Maintenance

v25.12.0

Compare Source

Maintenance

manzt/anywidget (anywidget)

v0.11.0

Compare Source

This release implements the widget composition RFC shared earlier this year. All changes are additive: existing widgets keep working without modification.

Background

For the past year, anywidget has predominantly been in maintenance mode. The library works, and the community has been expanding on both ends (more host platforms and more widgets shipped on top of it).

A stretch of stability also tends to surface what's still missing. One pattern that kept coming up (#​28, #​193, #​855) was a different kind of widget than the AFM had been designed around.

Prior to v0.11, anywidget was a good fit for widgets that own a self-contained piece of the screen (a chart, a map, a control). Two limitations got in the way of anything else:

  • Composition was left to the host. A widget that wanted to lay out other widgets had to be expressed using whatever container the host provides (ipywidgets.HBox / ipywidgets.VBox in Jupyter, mo.hstack / mo.vstack in marimo). Container widgets that ship as a single anywidget primitive were not expressible.
  • Shared interfaces were limited to model state. The only thing one widget could know about another was what was exposed on the synced model. Calling panTo(lat, lng) or highlight(rowId) on another widget on the page had to round-trip through a synced trait.

v0.11 closes both gaps with three additions to the front-end contract.

For the full narrative, see the blog post: anywidgets All the Way Down.

For the formal spec, see the updated AFM specification.

What's new
signal (AbortSignal) on initialize and render (#​974)

Both initialize and render now receive an AbortSignal via the signal prop. The host aborts it when the widget is destroyed (or during HMR). This is the preferred way to manage cleanup going forward, since it composes with web platform APIs that already accept an AbortSignal (addEventListener, fetch, child widgets):

// before
export default {
  render({ model, el }) {
    let handler = () => { /* ... */ };
    el.addEventListener("click", handler);
    return () => el.removeEventListener("click", handler);
  },
};

// after
export default {
  render({ model, el, signal }) {
    el.addEventListener("click", () => { /* ... */ }, { signal });
  },
};

Returning a cleanup callback from render (or initialize) still works, so existing widgets need no changes. New code is encouraged to prefer signal.

initialize MAY return an exports object (#​974)

initialize runs once per widget instance. In v0.11, it MAY return a plain object: the widget's exports. The host stores it and exposes it to other widgets that resolve this one as a reference (next section).

export default {
  initialize({ model, signal }) {
    return {
      getValue: () => model.get("value"),
      setValue: (v) => {
        model.set("value", v);
        model.save_changes();
      },
      onChange: (cb) => model.on("change:value", cb),
    };
  },
  render({ model, el, signal }) {
    /* ... */
  },
};

The return type is distinguished by typeof: functions are still treated as cleanup callbacks (existing behavior), objects are treated as exports, and void means neither.

There is no schema and no validation. Widget authors define their own interfaces and consumers duck-type at the boundary.

host.getWidget and host.getModel for widget composition (#​974)

render now receives a host prop with two methods that resolve a child widget by reference:

  • host.getWidget(ref) awaits the child's initialize and returns { exports, render }.
  • host.getModel(ref) returns the child's underlying AnyModel for direct event subscriptions or get / set / send access without participating in rendering.
export default {
  async render({ model, el, signal, host }) {
    let slider = await host.getWidget(model.get("control"));
    if (typeof slider.exports?.onChange === "function") {
      slider.exports.onChange(() =>
        console.log("value:", slider.exports.getValue()),
      );
    }
    let div = document.createElement("div");
    el.appendChild(div);
    await slider.render({ el: div, signal });
  },
};

Passing the parent's signal through to the child's render ties their lifecycles together: aborting the parent's view tears the child's view down too.

On the Python side, widget references are serialized as "anywidget:<model_id>" strings. A new WidgetTrait traitlet validates anywidget-compatible objects, and a Widget type alias is provided for annotations:

import anywidget

class Dashboard(anywidget.AnyWidget):
    _esm = "dashboard.js"
    control = anywidget.WidgetTrait().tag(sync=True)

Dashboard(control=Slider(value=50))

References work at any depth in synced state (top-level traits, values inside dicts, items inside lists).

Backward compatibility

Nothing is required to migrate. Existing widgets, including those returning cleanup callbacks from render or initialize, continue to work unchanged. New widgets can opt into signal, exports, and host incrementally, hook by hook.

If you maintain a host runtime, the host requirements for composition support are documented in the AFM spec. Hosts that do not (yet) implement composition should expose host on render and have its methods reject with a descriptive error rather than omitting the prop.

Patch Changes
  • Updated dependencies: @anywidget/types@0.4.0

v0.10.0

Compare Source

Minor Changes

  • Drop Python 3.8 and 3.9 support, require Python >=3.10 (#​949)

    Python 3.8 and 3.9 have reached end-of-life. Bumping the minimum to 3.10 aligns anywidget with the broader ecosystem and allows us to upgrade dependencies (like watchfiles) that have already dropped older Python support, which is needed for Python 3.14 compatibility.

awslabs/serverless-application-model (aws-sam-translator)

v1.109.0: SAM v1.109.0 Release

Compare Source

What's Changed

New Contributors

Full Changelog: aws/serverless-application-model@v1.108.0...v1.109.0

v1.108.0: SAM v1.108.0 Release

Compare Source

What's Changed

New Contributors

Full Changelog: aws/serverless-application-model@v1.107.0...v1.108.0

v1.107.0: SAM v1.107.0 Release

Compare Source

What's Changed

Full Changelog: aws/serverless-application-model@v1.106.0...v1.107.0

python-babel/babel (babel)

v2.18.0

Compare Source

Happy 2026! This release is, coincidentally, also being made from FOSDEM.

We will aspire for a slightly less glacial release cadence in this year;
there are interesting features in the pipeline.

Features


* Core: Add `babel.core.get_cldr_version()` by @&#8203;akx in :gh:`1242`
* Core: Use CLDR 47 by @&#8203;tomasr8 in :gh:`1210`
* Core: Use canonical IANA zone names in zone_territories by @&#8203;akx in :gh:`1220`
* Messages: Improve extract performance via ignoring directories early during os.walk by @&#8203;akx in :gh:`968`
* Messages: Merge in per-format keywords and auto_comments by @&#8203;akx in :gh:`1243`
* Messages: Update keywords for extraction of dpgettext and dnpgettext by @&#8203;mardiros in :gh:`1235`
* Messages: Validate all plurals in Python format checker by @&#8203;tomasr8 in :gh:`1188`
* Time: Use standard library `timezone` instead of `FixedOffsetTimezone` by @&#8203;akx in :gh:`1203`

Bugfixes
  • Core: Fix formatting for "Empty locale identifier" exception added in #​1164 by @​akx in :gh:1184
  • Core: Improve handling of no-inheritance-marker in timezone data by @​akx in :gh:1194
  • Core: Make the number pattern regular expression more efficient by @​akx in :gh:1213
  • Messages: Keep translator comments next to the translation function call by @​akx in :gh:1196
  • Numbers: Fix KeyError that occurred when formatting compact currencies of exactly one thousand in several locales by @​bartbroere in :gh:1246

Other improvements


* Core: Avoid unnecessary uses of `map()` by @&#8203;akx in :gh:`1180`
* Messages: Have init-catalog create directories too by @&#8203;akx in :gh:`1244`
* Messages: Optimizations for read_po by @&#8203;akx in :gh:`1200`
* Messages: Use pathlib.Path() in catalog frontend; improve test coverage by @&#8203;akx in :gh:`1204`

Infrastructure and documentation
  • CI: Renovate CI & lint tools by @​akx in :gh:1228
  • CI: Tighten up CI with Zizmor by @​akx in :gh:1230
  • CI: make job permissions explicit by @​akx in :gh:1227
  • Docs: Add SECURITY.md by @​akx in :gh:1229
  • Docs: Remove u string prefix from docs by @​verhovsky in :gh:1174
  • Docs: Update dates.rst with current unicode.org tr35 link by @​clach04 in :gh:1189
  • General: Add some PyPI classifiers by @​tomasr8 in :gh:1186
  • General: Apply reformatting by hand and with Ruff by @​akx in :gh:1202
  • General: Test on and declare support for Python 3.14 by @​akx in :gh:1233
  • Tests: Convert Unittest testcases with setup/teardown to fixtures by @​akx in :gh:1240
  • Tests: Mark PyPy CI flake as xfail by @​akx in :gh:1197
  • Tests: Move pytest config to pyproject.toml by @​tomasr8 in :gh:1187
  • Tests: Unwrap most unittest test cases to bare functions by @​akx in :gh:1241
boto/boto3 (boto3)

v1.43.2

Compare Source

======

  • api-change:appstream: [botocore] Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail.
  • api-change:cloudwatch: [botocore] This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources.
  • api-change:entityresolution: [botocore] Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels.
  • api-change:iam: [botocore] Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates
  • api-change:iot: [botocore] AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests.
  • api-change:logs: [botocore] Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter.
  • api-change:qconnect: [botocore] Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics.
  • api-change:quicksight: [botocore] Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API.

v1.43.1

Compare Source

======

  • api-change:bedrock-agentcore: [botocore] AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records.
  • api-change:bedrock-agentcore-control: [botocore] AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records.
  • api-change:datazone: [botocore] Adds support for asynchronous notebook runs
  • api-change:eks: [botocore] Vended logs update param for capability vended logs feature
  • api-change:kafka: [botocore] Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity.
  • api-change:observabilityadmin: [botocore] Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement.
  • api-change:payment-cryptography: [botocore] Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations.
  • api-change:route53globalresolver: [botocore] Adds support for regions in the UpdateGlobalResolver input.
  • api-change:sagemaker: [botocore] Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations.
  • api-change:sso-admin: [botocore] Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API

v1.43.0

Compare Source

======

  • api-change:account: [botocore] Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes.
  • api-change:bedrock-agentcore: [botocore] Adds batch evaluation for running evaluators against multiple agent sessions with server-side orchestration, AI-powered recommendations for optimizing system prompts and tool descriptions, and AB testing with controlled traffic splitting and statistical significance reporting
  • api-change:bedrock-agentcore-control: [botocore] Adds configuration bundles for versioned, immutable agent configuration snapshots with branch-based lineage
  • api-change:cloudfront: [botocore] Amazon CloudFront now supports cache tag. Tag objects via response headers and invalidate all matching objects in a single request, replacing manual URL tracking and broad wildcards.
  • api-change:deadline: [botocore] Adds support for rtx-pro-server-6000 GPU accelerator for service-managed fleets.
  • api-change:ecr: [botocore] Removes support for registry policy V1
  • api-change:gamelift: [botocore] Amazon GameLift Servers adds a new DescribeContainerGroupPortMappings API for container fleets, making it easy to discover which connection ports map to your container ports without needing to remotely access the compute.
  • api-change:mediapackagev2: [botocore] This feature adds configuration for specifying SCTE marker handlin

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coveralls
Copy link
Copy Markdown

coveralls commented Nov 27, 2025

Pull Request Test Coverage Report for Build 19743226991

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 85.355%
Totals Coverage Status
Change from base Build 19743217912: 0.0%
Covered Lines: 2308
Relevant Lines: 2704
💛 - Coveralls

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 15 times, most recently from 0ce9187 to f982391 Compare December 3, 2025 19:43
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from 8d4f733 to 639392b Compare December 10, 2025 16:45
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 835f819 to 6e9cf42 Compare December 23, 2025 21:51
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 8db7bcb to a18bb9e Compare January 2, 2026 17:33
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from c745721 to 0afdcef Compare January 9, 2026 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@coveralls