Update all non-major dependencies by renovate[bot] · Pull Request #417 · openradx/adit

renovate · 2026-09-21T02:37:47Z

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action	action	patch	`v1.0.223` → `v1.0.231`
astral-sh/setup-uv	action	minor	`v10.1.0` → `v10.2.0`
astral-sh/uv	uses-with	patch	`0.12.13` → `0.12.18`
docker/build-push-action	action	minor	`v7.3.0` → `v7.4.0`
docker/setup-buildx-action	action	minor	`v4.3.0` → `v4.4.1`
ghcr.io/astral-sh/uv	final	patch	`0.12.13` → `0.12.18`

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

astral-sh/setup-uv (astral-sh/setup-uv)

`v10.2.0`

Compare Source

astral-sh/uv (astral-sh/uv)

`v0.12.18`

Compare Source

Released on 2026-09-22.

Enhancements

Add --output-format json to uv pip install and uv pip sync, including for --dry-run and --check (#21893)
Add --check to uv pip install and uv pip sync to report planned changes without modifying the environment (#21844)
Identify failures from get_requires_for_build_* hooks correctly in build errors (#21881)

Preview features

Validate build requirements for uv build --no-build-isolation with --preview-features build-dependency-check; use --skip-dependency-check to opt out (#21880)

Performance

Speed up uv_build editable wheel creation by omitting compression from temporary wheels (#21918)

Bug fixes

Select package versions with wheels compatible with each Python resolution fork, correctly interpreting generic and stable-ABI wheel tags (#21835, #21836)
Restore project, script, and lock files when uv add, uv remove, or uv version fails or is interrupted (#21860, #21856)
Use configured dependency-metadata when checking whether installed requirements are satisfied (#21843)
Reject archive entries that normalize to absolute Windows paths (#21923)
Recognize distribution filenames and archive extensions when URL fragments contain ? (#21920)
Generate correctly lowercased platform tags for BSD and Haiku releases (#21853)
Avoid rebuilding a Windows relative path into an absolute form (#21923)

`v0.12.17`

Compare Source

Released on 2026-09-18.

Enhancements

Reject unsupported Git archive paths in lockfiles with a clear error instead of panicking during frozen exports (#21780)

Preview features

Set minimum glibc and musl versions that universal resolutions must support with minimum-libc-version (#21651)
Reject pylock.toml files whose wheel filenames do not match their declared package names or versions (#20746)
Keep uv workspace metadata read-only unless --sync is provided (#21821)
Apply uv check lock modes when retrieving workspace metadata (#21821)

Performance

Speed up builds with many exclusion patterns by avoiding quadratic deduplication (#21650)
Reduce resolver allocations when deduplicating package and distribution requests (#21810)

Bug fixes

Prevent required-environments from selecting package versions whose wheels require a newer macOS version than the configured Darwin baseline (#21825)

Documentation

Clarify the 0.12.14 and 0.12.15 release notes (#21817)

`v0.12.16`

Compare Source

Released on 2026-09-17.

Python

Add Pyodide 314.0.7, 0.29.5, and 0.27.8 (#21741)

Enhancements

Verify downloaded wheels and source distributions against hashes supplied by package indexes (#21562)
Allow build-constraint-dependencies entries to include hashes for verifying downloaded build dependencies (#21467)
Honor Darwin platform_release markers in required-environments using macOS wheel deployment targets (#21766)
Reject unsupported Git URL schemes while parsing lockfiles instead of panicking during frozen exports (#21779)

Preview features

Support lock-without-metadata across all dependency types while retaining package.metadata for remote URL dependencies to enable offline validation (#21163)
Honor configured and command-line index settings, including credentials, in uv upgrade (#21776)
Allow uv check to run in projects that are not managed by uv and outside workspaces (#21777)
Respect --python and UV_PYTHON when selecting the Python version for uv check (#21744)

Bug fixes

Redact Azure shared access signatures from displayed and logged URLs (#21755)
Check archive sizes from pylock.toml before reusing cached distributions (#21609)
Keep user-authored local dependency paths relative in lockfiles when backend metadata reports absolute paths (#20631)
Use the bundled uv_build backend only when its version matches active version pins (#21742)
Handle malformed index URLs without panicking when credentials are configured (#21784)
Report a configuration error instead of panicking for proxy URLs without a host (#21781)
Return a credential-redacted error instead of panicking when a URL cannot be converted to a path (#21783)

`v0.12.15`

Compare Source

Released on 2026-09-15.

This release fixes a regression in 0.12.14 that lead to rejecting valid installation commands such as using
uv pip install --system in python:* docker images or when using uv pip install --target .. (#21699)

Performance

Speed up cold-cache resolution and HTTP cache revalidation by batching cache writes (#21675)

Bug fixes

Revert "Reject symlinked wheel installation destinations" (#21699)

`v0.12.14`

Compare Source

Released on 2026-09-15.

Package-operation errors now use uv's standard diagnostics, with consistent hints and compact, labeled cause chains. (#17110, #21599, #21603)

Package-operation exit codes now reflect the underlying cause: expected failures return 1, while recognized operational and internal failures return 2. (#17110)

Enhancements

Resume interrupted downloads with HTTP Range requests when supported (#21570)
Show underlying causes and hints in user warnings (#21565)
Show resolver hints for failed uv tool upgrade operations (#21566)

Preview features

Export multiple dependency selections from a shared lockfile in one uv export --batch invocation with the batch-export preview feature (#21618)

Performance

Speed up dependency resolution from local wheelhouses by reading wheel metadata in a single blocking task (#21619)
Speed up cold resolution against large package indexes by parsing Simple API responses in bounded background workers (#21593)
Speed up warm-cache resolution by decoding fresh HTTP cache entries in the cache-read task (#21621)

Bug fixes

Select releases that satisfy required-environments within each resolver fork instead of combining incompatible wheel coverage across forks (#21672)
Install packages with paths longer than MAX_PATH on Windows systems without long-path support enabled (#21625)
Prevent uv python install from overwriting valid unmanaged Python symlinks with relative targets on Unix (#21639)
Redact credentials and signatures from missing-path-segment URL errors (#21616)
Avoid exceeding the configured retry budget when cached HTTP responses fail revalidation (#21640)
Prefer bin/python over bin/python3 when discovering interpreters in Unix environments (#21559)
Suppress managed-Python fallback warnings under --quiet (#21565)
Keep failed uv tool upgrade errors visible with -q while suppressing them with -qq (#21566)

docker/build-push-action (docker/build-push-action)

`v7.4.0`

Compare Source

Use the shared error helper for Buildx commands by @crazy-max in #1620
Prevent workflow command injection in metadata logs by @crazy-max in #1617
Bump @docker/actions-toolkit from 0.92.0 to 0.100.0 in #1614 #1618 #1621
Bump @humanfs/node from 0.16.7 to 0.16.8 in #1609
Bump brace-expansion from 1.1.13 to 1.1.18 in #1592
Bump csv-parse from 7.0.0 to 7.0.2 in #1613
Bump js-yaml from 4.3.0 to 4.3.2 in #1605 #1615
Bump nanoid from 3.3.16 to 3.3.18 in #1611
Bump postcss from 8.5.10 to 8.5.25 in #1590
Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #1606
Bump sigstore from 4.1.0 to 4.1.1 in #1577
Bump undici from 6.27.0 to 6.28.0 in #1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.4.1`

Compare Source

`v4.4.0`

Compare Source

Use official Buildx releases for cloud driver by @crazy-max in #606
Pull BuildKit image before builder creation by @crazy-max in #609
Use shared error helpers for Buildx and Docker commands by @crazy-max in #620
Bump @docker/actions-toolkit from 0.95.0 to 0.100.0 in #610 #618 #619
Bump @humanfs/node from 0.16.7 to 0.16.8 in #614
Bump js-yaml from 5.3.0 to 5.4.2 in #608 #617
Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2026-09-21T02:37:53Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: a636ca30-f04c-48c8-a583-083b5d02af62

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 470a7ba to b9b94df Compare September 21, 2026 13:45

Update all non-major dependencies

461232d

renovate Bot force-pushed the renovate/all-minor-patch branch from b9b94df to 461232d Compare September 23, 2026 01:32

renovate Bot merged commit f30d498 into main Sep 23, 2026
2 checks passed

renovate Bot deleted the renovate/all-minor-patch branch September 23, 2026 04:46

Navigation Menu

Update all non-major dependencies - #417

Update all non-major dependencies#417
renovate[bot] merged 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Sep 21, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 21, 2026 •

edited

Loading

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Enhancements

Preview features

Performance

Bug fixes

Enhancements

Preview features

Performance

Bug fixes

Documentation

Python

Enhancements

Preview features

Bug fixes

Performance

Bug fixes

Enhancements

Preview features

Performance

Bug fixes

Configuration

Uh oh!

coderabbitai Bot commented Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 21, 2026 •

edited

Loading

coderabbitai Bot commented Sep 21, 2026 •

edited

Loading