Skip to content

fix(deps): update all dependencies - #397

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all
Oct 25, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action major v6 → v7 age confidence
canonical/operator-workflows (changelog) workflow digest 030c5b2 → c81a9cd
cosl project.dependencies minor ==1.9.2 → ==1.11.3 age confidence
juju (source) required_provider major ~> 1.0 → ~> 2.0 age confidence
mysql-connector-python (changelog) project.dependencies major ==9.7.0 → ==26.10.0 age confidence
ops (changelog) project.dependencies minor ==3.7.1 → ==3.9.0 age confidence
pydantic (changelog) project.dependencies minor ==2.13.4 → ==2.14.1 age confidence
pytest (changelog) dependency-groups patch ==9.1.0 → ==9.1.1 age confidence
ubuntu github-runner major 24.04 → 26.04 age confidence
websockets (changelog) dependency-groups major <17 → <18 age confidence

Release Notes

actions/checkout

v7.0.1

Compare Source

v7.0.0

Compare Source

  • Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
  • Various dependency updates
canonical/cos-lib (cosl)

v1.11.3

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.11.2...1.11.3

v1.11.2

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.11.1...1.11.2

v1.11.1

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.11.0...1.11.1

v1.11.0

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.10.3...1.11.0

v1.10.3

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.10.2...1.10.3

v1.10.2

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.10.1...1.10.2

v1.10.1

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.9.2...1.10.1

juju/terraform-provider-juju (juju)

v2.4.1

Compare Source

What's Changed

Full Changelog: juju/terraform-provider-juju@v2.4.0...v2.4.1

v2.4.0

Compare Source

What's Changed

Full Changelog: juju/terraform-provider-juju@v2.3.1...v2.4.0

v2.3.1

Compare Source

What's Changed

Full Changelog: juju/terraform-provider-juju@v2.3.0...v2.3.1

v2.3.0

Compare Source

NOTES:

  • This release requires Juju controller version 3 or higher. This version doesn't support 2.9.
  • If using JAAS, this release requires Juju controller version 3.6.5 or higher.
  • This release uses Juju client api code from the latest Juju.

ENHANCEMENTS

BUG FIXES

CI & MAINTENANCE

NEW CONTRIBUTORS

Full Changelog: juju/terraform-provider-juju@v2.2.1...v2.3.0

v2.2.1

Compare Source

What's Changed

Full Changelog: juju/terraform-provider-juju@v2.1.1...v2.2.1

v2.1.1

Compare Source

NOTES:

  • This release requires Juju controller version 3 or higher. This version drops support for 2.9.
  • If using JAAS, this release requires Juju controller version 3.6.5 or higher.
  • This release uses Juju client api code from the tip of the Juju 4.0 branch.

ENHANCEMENTS

BUG FIXES

DOCUMENTATION

CI & MAINTENANCE

Full Changelog: juju/terraform-provider-juju@v2.1.0...v2.1.1

v2.1.0

Compare Source

NOTES:

  • This release requires Juju controller version 3 or higher. This version drops support for 2.9.
  • If using JAAS, this release requires Juju controller version 3.6.5 or higher.
  • This release uses Juju client api code from the tip of the Juju 4.0 branch.

ENHANCEMENTS

CI & MAINTENANCE

Full Changelog: juju/terraform-provider-juju@v2.0.1...v2.1.0

v2.0.1

Compare Source

What's Changed

Full Changelog: juju/terraform-provider-juju@v2.0.0...v2.0.1

v2.0.0

Compare Source

NOTES:

  • This release requires Juju controller version 3 or higher. This version drops support for 2.9.
  • If using JAAS, this release requires Juju controller version 3.6.5 or higher.
  • This release uses Juju client api code from the tip of the Juju 4.0 branch.

BREAKING CHANGES

  • Drop support for 2.9 controllers. We will keep supporting 2.9 controllers in the v1 track for security updates and bug fixes.

ENHANCEMENTS

  • Enable the Terraform provider to run against Juju 3 & 4 controllers.
  • If you are running against a Juju 3 controller, upgrading from the latest v1 of the Terraform Provider to v2 should require no changes. See the upgrade to v2 guide for more information.

JUJU 4 COMPATIBILITY CHANGES

CI & MAINTENANCE

Full Changelog: juju/terraform-provider-juju@v1.5.1...v2.0.0

mysql/mysql-connector-python (mysql-connector-python)

v26.10.0

Compare Source

=======

  • WL#17362: Upgrade third-party dependencies
  • BUG#40010859: Correct parameter serialization for selected character sets
  • BUG#39923843: Test certificates have expired
  • BUG#39912002: Upgrade zstandard to latest version (0.25.0)

v26.7.0

Compare Source

=======

This release contains no functional changes.

canonical/operator (ops)

v3.9.0

Compare Source

Features

  • Add an exception note when ModelError is raised (#​2786)

Fixes

  • Make _CharmSpec covariant in its charm type (#​2715)
  • Say which tracing destination rejected the data (#​2714)
  • Detect Pydantic dataclasses from before 2.11 when mapping aliases (#​2768)
  • Enforce relation databag read permissions on all access paths (#​2738)
  • Use cached leadership in security logging, renew lease on success by @​cristiangirlea (#​2778)
  • A gone relation raises RelationNotFoundError, not "permission denied" (#​2748)
  • Treat an _Abort(0) from the charm's __init__ as success in ops.testing (#​2780)
  • Record trace data in every ops.testing run with opentelemetry-sdk 1.45 (#​2787)
  • Let charms and libraries set on without a type: ignore (#​2775)

Documentation

  • Surface the tool versions page (#​2712)
  • Update Concierge links and intersphinx URLs in doc source (#​2725)
  • Add retry loop to version check in K8s tutorial charm (#​2689)
  • Merge HACKING.md into CONTRIBUTING.md, fewer files in root (#​2734)
  • Add a how-to guide for securing a charm (#​2721)
  • Condense and trim CONTRIBUTING.md (#​2754)
  • Fix the self-review command in the discoverability how-to (#​2764)
  • Mount the project directory to a target relative to the home directory (#​2765)
  • Pull tutorial code snippets from examples/ (#​2544)

Tests

  • Add conformance tests for the tracing and certificate_transfer interfaces (#​2711)
  • Make pyright check whole trees rather than a list of directories (#​2779)

Refactoring

  • Drop typing.cast where narrowing can do the work (#​2723)
  • Only import pdb when a debugger is actually requested (#​2740)

CI

  • Enrich scheduled-failure issues with an LLM triage pass (#​2663, #​2781)
  • Stop tox writing a .venv redirect file in the examples (#​2769)
  • Move the release process from release.py to workflows (#​2772)

v3.8.3

Compare Source

Security Fixes

  • Stop recording secret content, relation data, pod specs, and action results and log messages in trace data (GHSA-4356-5g33-3qrp)
  • Stop including action results and action log messages in hook command errors

v3.8.2

Compare Source

Fixes

  • Compare full event paths when skipping duplicate notices (#​2684)
  • In ops.testing, don't pass a message when converting an unknown status by name (#​2700)

Documentation

  • Give each best-practice admonition a stable anchor (#​2524)
  • Reword text that vale 3.17 flags as misspelled (#​2695)
  • Stop styling page references as blockquotes (#​2666)
  • Make the custom-endpoint-name sample test actually test something (#​2664)
  • Replace requests by urllib in K8s tutorial integration tests (#​2687)
  • Recommend spread directly, rather than charmcraft test (#​2706)
  • Extract sections in "how to write integration tests" to their own how-to guide (#​2662)

CI

  • Point DB charm CI at the moved mysql-operators repo (#​2551)
  • Switch example charm integration tests to Concierge k8s preset (#​2696)
  • Use the upstream concierge presets again (#​2699)

v3.8.1

Compare Source

Fixes

  • Align Juju naming rules with testing class rules (#​2570)
  • Do not attempt to mutate secret data in grant/revoke during tests (#​2614)
  • Allow IdentityDict to be assigned IdentityAccess (#​2628)
  • Only decode fields used by the data class in Relation.load() (#​2636)
  • Use juju.wait for workload version tests in Kubernetes tutorial (#​2650)

Documentation

  • Wait longer for Loki data in Kubernetes tutorial integration tests (#​2611)
  • Add more guidance about charm naming (#​2610)
  • Fix tempo test_deploy URL (#​2631)
  • Add how-to guide for debugging Kubernetes charms (#​2498)
  • Revert to installed charmcraft for initing charms (#​2635)
  • Grab workload version in Kubernetes tutorial (#​2559)
  • Separate test_workload_version_is_set in Kubernetes tutorial chapter 3 (#​2638)
  • Add how-to guide to configure jubilant logs (#​2619)
  • Use autofunction for layer_from_rockcraft (#​2648)
  • Remove log_cli and log_file ini options; keep them as CLI arguments for integration tests (#​2654)
  • Fix typo in explanation of mock_version fixture usage (#​2647)
  • Switch Kubernetes tutorial charms to rock version of demo server (#​2649)

Tests

  • Type-check testing/src/scenario and fix uncovered errors (#​2615)

CI

  • Add dependency-review-action on PRs (#​2587)
  • Re-enable the tracing integration tests (#​2586)
  • Adopt new dependabot conventions (#​2609)
  • Drop unsupported cooldown.semver-major-days from github-actions block (#​2617)
  • Open an issue if a scheduled workflow fails (#​2627)
  • Hash-pin actions and drop zizmor config (#​2612)
  • Use uv-venv-lock-runner in tracing tox, align deps (#​2651)

v3.8.0

Compare Source

Features

  • Note the socket path in Pebble tracing spans (#​2555)

Fixes

  • Treat remote unit zero as explicit (#​2454)
  • Ensure resources are cleaned up in testing.Context (#​2506)
  • Close SQLite storage in Harness.cleanup() (#​2507)
  • Restore sys.breakpointhook on _Manager teardown (#​2542)
  • Avoid errors in finalisation due to already-closed websocket (#​2548)
  • Use the correct value for JUJU_HOOK_NAME when objects contain dashes (#​2552)
  • Avoid double-closing the framework in testing teardown (#​2561)
  • Don't leak exec I/O threads when waiting on the change fails (#​2558)
  • Take Pebble defaults into consideration when consistency checking Checks (#​2567)
  • Tear down Runtime.exec() when the charm raises (#​2581)

Documentation

  • Fix small issues in K8s tutorial (#​2540)
  • Document user-secret observer lifecycle and secret-changed semantics (#​2522)
  • Replace CoC with link to Ubuntu Code of Conduct (#​2564)
  • Add a small note about -W error in the unit test how-to (#​2560)
  • Add doc about subordinate charms (#​2455)
  • Add 26.04 to the versions page and mark 2.23 as LTS (#​2517)
  • Clarify storage-detaching applies to both machine and K8s charms (#​2554)
  • Add guidance about names of workload-less charms (#​2496)
  • Fix first unit tests command in machine charm tutorial (#​2574)
  • Extend security explanation page to cover SEC0030 V1.3 gaps (#​2571)
  • Move docs to canonical.com/juju/docs/ops (#​2545)
  • Fix docstring of _Event._is_action_event (#​2580)

Tests

  • Treat warnings as errors when running unit tests (#​2541)
  • Fix mock_temp_dir fixture's open() patch (#​2553)
  • Add integration tests for ops.hookcmds (#​2520, #​2562)
  • Fix integration test flakes on Juju 3 k8s and Juju 4 secrets (#​2584)

Refactoring

  • Avoid yaml.load() to silence security scanner false positives (#​2523)
  • Replace jsonpatch with an inline dict-diff (#​2578)
  • Move the otlp-json package to be a regular ops-tracing module (#​2585)
  • Distinguish between init and attribute types in testing state classes (#​2331)

CI

  • Remove obsolete containerd workaround from integration workflow (#​2519)
  • Use the sys.monitoring coverage core (#​2518)
pydantic/pydantic (pydantic)

v2.14.1

Compare Source

GitHub release

The code released in v2.5.0 is functionally identical to that of v2.5.0b1.

What's Changed
Packaging
  • Update pydantic-core from 2.10.1 to 2.14.1, significant changes from these updates are described below, full changelog here
  • Update to pyright==1.1.335 by @​Viicos in #​8075
New Features
Changes
  • Significant Change: replace ultra_strict with new smart union implementation, the way unions are validated has changed significantly to improve performance and correctness, we have worked hard to absolutely minimise the number of cases where behaviour has changed, see the PR for details - by @​davidhewitt in pydantic/pydantic-core#867
  • Add support for instance method reassignment when extra='allow' by @​sydney-runkle in #​7683
  • Support JSON schema generation for Enum types with no cases by @​sydney-runkle in #​7927
  • Warn if a class inherits from Generic before BaseModel by @​alexmojaki in #​7891
Performance
Fixes

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 24, 2026 01:05
@renovate
renovate Bot enabled auto-merge (squash) October 24, 2026 01:05
@renovate
renovate Bot merged commit bf582b1 into main Oct 25, 2026
45 of 47 checks passed
@renovate
renovate Bot deleted the renovate/all branch October 25, 2026 07:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants