Update all dependencies

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
PyCQA/flake8	repository	minor	7.0.0 -> 7.3.0
actions/cache	action	major	v4 -> v5
actions/checkout	action	major	v4 -> v6
actions/download-artifact	action	major	v4 -> v7
actions/setup-python	action	major	v5 -> v6
actions/upload-artifact	action	major	v4 -> v6
autoflake	dev	pin	^2.2.1 -> 2.3.1
autopep8	dev	pin	^2.0.4 -> 2.3.1
black (changelog)	dev	pin	^24.0.0 -> 24.4.2
cbor2 (changelog)	dependencies	minor	~5.6.0 -> ~5.7.0
coverage	dev	pin	^7.0.0 -> 7.5.4
docformatter	dev	pin	^1.7.5 -> 1.7.5
flake8 (changelog)	dev	pin	^7.0.0 -> 7.1.0
html2text	dev	pin	^2024.0.0 -> 2024.2.26
igorshubovych/markdownlint-cli	repository	minor	v0.40.0 -> v0.47.0
isort (changelog)	dev	pin	^5.12.0 -> 5.13.2
pre-commit	dev	pin	^3.0.0 -> 3.7.1
pre-commit/pre-commit-hooks	repository	major	v4.6.0 -> v6.0.0
pycqa/isort	repository	major	5.13.2 -> 7.0.0
pytest-repeat	dev	pin	^0.9.3 -> 0.9.3
python-poetry/poetry	repository	major	1.8.3 -> 2.2.1
python/black	repository	major	24.4.2 -> 25.12.0
sphinx (changelog)	dev	pin	^7.0.0 -> 7.3.7
sphinx-rtd-theme	dev	pin	^2.0.0 -> 2.0.0

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

PyCQA/flake8 (PyCQA/flake8)

v7.3.0

Compare Source

v7.2.0

Compare Source

v7.1.2

Compare Source

v7.1.1

Compare Source

v7.1.0

Compare Source

actions/cache (actions/cache)

v5

Compare Source

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

actions/download-artifact (actions/download-artifact)

v7

Compare Source

v6

Compare Source

v5

Compare Source

actions/setup-python (actions/setup-python)

v6

Compare Source

actions/upload-artifact (actions/upload-artifact)

v6

Compare Source

v5

Compare Source

agronholm/cbor2 (cbor2)

v5.7.1

Compare Source

• Improved performance on decoding large definite bytestrings (#​240 <#​240>_; PR by @​dwpaley)
• Fixed a read(-1) vulnerability caused by boundary handling error (#​264 <#​264>_; PR by @​tylzh97)

v5.7.0

Compare Source

• Added support for Python 3.14 (no free-threading support yet, sorry)
• Dropped support for Python 3.8 (#​247 <#​247>_; PR by @​hugovk)
• Added support for encoding indefinite containers (#​256 <#​256>_; PR by @​CZDanol)
• Added complex number support (tag 43000) (#​249 <#​249>_; PR by @​chillenb)

v5.6.5

Compare Source

• Published binary wheels for Python 3.13

igorshubovych/markdownlint-cli (igorshubovych/markdownlint-cli)

v0.47.0

Compare Source

• Add output and exit code support for warnings
• Update markdownlint dependency to 0.40.0
  • Improve MD011/MD013/MD051/MD060
• Update all dependencies via Dependabot

v0.46.0

Compare Source

• Replace glob dependency with tinyglobby (smaller and fewer dependencies)
• Update markdownlint dependency to 0.39.0
  • Add MD060/table-column-style
  • Improve MD001/MD007/MD009/MD010/MD029/MD033/MD037/MD059
• Update all dependencies via Dependabot

v0.45.0

Compare Source

• Update markdownlint dependency to 0.38.0
  • Add MD059/descriptive-link-text
  • Improve MD025/MD027/MD036/MD038/MD041/MD043/MD045/MD051/MD052
  • Remove support for end-of-life Node version 18
• Update all dependencies via Dependabot

v0.44.0

Compare Source

• Update markdownlint dependency to 0.37.4
  • Convert module to ECMAScript (breaking change)
  • Stop using require, convert to import
  • Improve MD032
• Update all dependencies via Dependabot

v0.43.0

Compare Source

• Update markdownlint dependency to 0.36.1
  • Improve MD051
  • Make micromark parser available to custom rules
  • Improve performance
• Update all dependencies via Dependabot

v0.42.0

Compare Source

• Update markdownlint dependency to 0.35.0
  • Add MD058/blanks-around-tables
  • Use micromark in MD001/MD003/MD009/MD010/MD013/MD014/MD019/MD021/MD023/MD024/MD025/MD039/MD042/MD043
  • Improve MD018/MD020/MD031/MD034/MD044
  • markdown-it parser no longer invoked by default
  • Improve performance
• Update all dependencies via Dependabot

v0.41.0: 0.41.0

Compare Source

• Change TOML parser to smol-toml which supports v1.0.0 of the specification
• Update all dependencies via Dependabot

pre-commit/pre-commit-hooks (pre-commit/pre-commit-hooks)

v6.0.0: pre-commit-hooks v6.0.0

Compare Source

Fixes

• check-shebang-scripts-are-executable: improve error message.
  • #​1115 PR by @​homebysix.

Migrating

• now requires python >= 3.9.
  • #​1098 PR by @​asottile.
• file-contents-sorter: disallow --unique and --ignore-case at the same
  time.
  • #​1095 PR by @​nemacysts.
  • #​794 issue by @​teksturi.
• Removed check-byte-order-marker and fix-encoding-pragma.
  • check-byte-order-marker: migrate to fix-byte-order-marker.
  • fix-encoding-pragma: migrate to pyupgrade.
  • #​1034 PR by @​mxr.
  • #​1032 issue by @​mxr.
  • #​522 PR by @​jgowdy.

v5.0.0: pre-commit-hooks v5.0.0

Compare Source

Features

• requirements-txt-fixer: also remove pkg_resources==....
  • #​850 PR by @​ericfrederich.
  • #​1030 issue by @​ericfrederich.
• check-illegal-windows-names: new hook!
  • #​1044 PR by @​ericfrederich.
  • #​589 issue by @​ericfrederich.
  • #​1049 PR by @​Jeffrey-Lim.
• pretty-format-json: continue processing even if a file has a json error.
  • #​1039 PR by @​amarvin.
  • #​1038 issue by @​amarvin.

Fixes

• destroyed-symlinks: set stages to [pre-commit, pre-push, manual]
  • PR #​1085 by @​AdrianDC.

Migrating

• pre-commit-hooks now requires pre-commit>=3.2.0.
• use non-deprecated names for stages.
  • #​1093 PR by @​asottile.

pycqa/isort (pycqa/isort)

v7.0.0

Compare Source

Changes

💥 Breaking Changes

• Drop support for Python 3.9 (#​2430) @​DanielNoord

🚀 Features

• Show absolute paths in skipped file messages (#​2416) @​pranlawate

🪲 Fixes

• Some fixes for Python 3.14 (#​2433) @​DanielNoord
• Test on 3.14 and fix any bugs (#​2425) @​DanielNoord
• Update CHANGELOG.md + Fix Formatting and Grammar (#​2419) @​lukbrew25
• Fix output of hanging indent for long lines with noqa (#​2407) @​matan1008

👷 Continuous Integration

• Format with ruff instead of black (#​2432) @​DanielNoord
• Target 3.10 for ruff (#​2431) @​DanielNoord
• Update development dependencies to latest version (#​2426) @​DanielNoord
• docs: update pre-commit examples to version 6.1.0 (#​2413) @​pranlawate
• Small cleanup for developer environment (#​2418) @​DanielNoord

📦 Dependencies

• Bump actions/setup-python from 5 to 6 in the github-actions group (#​2411) @​dependabot[bot]

v6.1.0

Compare Source

• Add python 3.14 classifier and badge (#​2409) @​staticdev
  • Drop use of non-standard pkg_resources API (#​2405) @​dvarrazzo

v6.0.1

Compare Source

• Add OSError handling in find_imports_in_file (#​2331) @​kobarity

v6.0.0

Compare Source

• Remove support for Python 3.8 (#​2327) @​DanielNoord
  • Python 3.13 support (#​2306) @​mayty
  • Speed up exists_case_sensitive calls (#​2264) @​correctmost
  • Ensure that split_on_trailing_comma works with as imports (#​2340) @​DanielNoord
  • Black profile: enable magic comma (#​2236) @​MrMino
  • Update line_length and single_line_exclusions in google profile (#​2149) @​jagapiou
  • Allow --diff to be used with --jobs (#​2302) @​mnakama
  • Fix wemake profile to have correct character limit (#​2241) @​sobolevn
  • Fix sort_reexports code mangling (#​2283) @​Helveg
  • Fix correct group by package tokenization (#​2136) @​glasnt

python-poetry/poetry (python-poetry/poetry)

v2.2.1

Compare Source

Fixed

• Fix an issue where poetry self show failed with a message about an invalid output format (#​10560).

Docs

• Remove outdated statements about dependency groups (#​10561).

poetry-core (2.2.1)

• Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#​888).

v2.2.0

Compare Source

Added

• Add support for nesting dependency groups (#​10166).
• Add support for PEP 735 dependency groups (#​10130).
• Add support for PEP 639 license clarity (#​10413).
• Add a --format option to poetry show to alternatively output json format (#​10487).
• Add official support for Python 3.14 (#​10514).

Changed

• Normalize dependency group names (#​10387).
• Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#​10278).
• Improve log output during poetry install when a wheel is built from source (#​10404).
• Improve error message in case a file lock could not be acquired while cloning a git repository (#​10535).
• Require dulwich>=0.24.0 (#​10492).
• Allow virtualenv>=20.33 again (#​10506).
• Allow findpython>=0.7 (#​10510).
• Allow importlib-metadata>=8.7 (#​10511).

Fixed

• Fix an issue where poetry new did not create the project structure in an existing empty directory (#​10431).
• Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#​10516).

poetry-core (2.2.0)

• Deprecate table values and values that are not valid SPDX expressions for [project.license] (#​870).
• Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#​874).
• Fix an issue where marker operations could result in invalid markers (#​875).

v2.1.4

Compare Source

Changed

• Require virtualenv<20.33 to work around an issue where Poetry uses the wrong Python version (#​10491).
• Improve the error messages for the validation of the pyproject.toml file (#​10471).

Fixed

• Fix an issue where project plugins were installed even though poetry install was called with --no-plugins (#​10405).
• Fix an issue where dependency resolution failed for self-referential extras with duplicate dependencies (#​10488).

Docs

• Clarify how to include files that were automatically excluded via VCS ignore settings (#​10442).
• Clarify the behavior of poetry add if no version constraint is explicitly specified (#​10445).

v2.1.3

Compare Source

Changed

• Require importlib-metadata<8.7 for Python 3.9 because of a breaking change in importlib-metadata 8.7 (#​10374).

Fixed

• Fix an issue where re-locking failed for incomplete multiple-constraints dependencies with explicit sources (#​10324).
• Fix an issue where the --directory option did not work if a plugin, which accesses the poetry instance during its activation, was installed (#​10352).
• Fix an issue where poetry env activate -v printed additional information to stdout instead of stderr so that the output could not be used as designed (#​10353).
• Fix an issue where the original error was not printed if building a git dependency failed (#​10366).
• Fix an issue where wheels for the wrong platform were installed in rare cases. (#​10361).

poetry-core (2.1.3)

• Fix an issue where the union of specific inverse or partially inverse markers was not simplified (#​858).
• Fix an issue where optional dependencies defined in the project section were treated as non-optional when a source was defined for them in the tool.poetry section (#​857).
• Fix an issue where markers with === were not parsed correctly (#​860).
• Fix an issue where local versions with upper case letters caused an error (#​859).
• Fix an issue where extra markers with a value starting with "in" were not validated correctly (#​862).

v2.1.2

Compare Source

Changed

• Improve performance of locking dependencies (#​10275).

Fixed

• Fix an issue where markers were not locked correctly (#​10240).
• Fix an issue where the result of poetry lock was not deterministic (#​10276).
• Fix an issue where poetry env activate returned the wrong command for tcsh (#​10243).
• Fix an issue where poetry env activate returned the wrong command for pwsh on Linux (#​10256).

Docs

• Update basic usage section to reflect new default layout (#​10203).

poetry-core (2.1.2)

• Improve performance of marker operations (#​851).
• Fix an issue where incorrect markers were calculated when removing parts covered by the project's Python constraint (#​841,
  #​846).
• Fix an issue where extra markers were not simplified (#​842,
  #​845,
  #​847).
• Fix an issue where the intersection and union of markers was not deterministic (#​843).
• Fix an issue where the intersection of python_version markers was not recognized as empty (#​849).
• Fix an issue where python_version markers were not simplified (#​848,
  #​851).
• Fix an issue where Python constraints on a package were converted into invalid markers (#​853).

v2.1.1

Compare Source

Fixed

• Fix an issue where poetry env use python does not choose the Python from the PATH (#​10187).

poetry-core (2.1.1)

• Fix an issue where simplifying a python_version marker resulted in an invalid marker (#​838).

v2.1.0

Compare Source

Added

• Make build command build-system agnostic (#​10059,
  #​10092).
• Add a --config-settings option to poetry build (#​10059).
• Add support for defining config-settings when building dependencies (#​10129).
• Add (experimental) commands to manage Python installations (#​10112).
• Use findpython to find the Python interpreters (#​10097).
• Add a --no-truncate option to poetry show (#​9580).
• Re-add support for passwords with empty usernames (#​10088).
• Add better error messages (#​10053,
  #​10065,
  #​10126,
  #​10127,
  #​10132).

Changed

• poetry new defaults to "src" layout by default (#​10135).
• Improve performance of locking dependencies (#​10111,
  #​10114,
  #​10138,
  #​10146).
• Deprecate adding sources without specifying --priority (#​10134).

Fixed

• Fix an issue where global options were not handled correctly when positioned after command options (#​10021,
  #​10067,
  #​10128).
• Fix an issue where building a dependency from source failed because of a conflict between build-system dependencies that were not required for the target environment (#​10048).
• Fix an issue where poetry init was not able to find a package on PyPI while adding dependencies interactively (#​10055).
• Fix an issue where the @latest descriptor was incorrectly passed to the core requirement parser (#​10069).
• Fix an issue where Boolean environment variables set to True (in contrast to true) were interpreted as false (#​10080).
• Fix an issue where poetry env activate reported a misleading error message (#​10087).
• Fix an issue where adding an optional dependency with poetry add --optional would not correctly update the lock file (#​10076).
• Fix an issue where pip was not installed/updated before other dependencies resulting in a race condition (#​10102).
• Fix an issue where Poetry freezes when multiple threads attempt to unlock the keyring simultaneously (#​10062).
• Fix an issue where markers with extras were not locked correctly (#​10119).
• Fix an issue where self-referential extras were not resolved correctly (#​10106).
• Fix an issue where Poetry could not be run from a zipapp (#​10074).
• Fix an issue where installation failed with a permission error when using the system environment as a user without write access to system site packages (#​9014).
• Fix an issue where a version of a dependency that is not compatible with the project's python constraint was locked. (#​10141).
• Fix an issue where Poetry wrongly reported that the current project's supported Python range is not compatible with some of the required packages Python requirement (#​10157).
• Fix an issue where the requested extras of a dependency were ignored if the same dependency (with same extras) was specified in multiple groups (#​10158).

Docs

• Sort commands by name in the CLI reference (#​10035).
• Add missing documentation for env commands (#​10027).
• Clarify that the name and version fields are always required if the project section is specified (#​10033).
• Add a note about restarting the shell for tab completion changes to take effect (#​10070).
• Fix the example for project.gui-scripts #​10121.
• Explain how to include files as scripts in the project configuration (#​9572,
  #​10133).
• Add additional information on specifying required python versions (#​10104).

poetry-core (2.1.0)

• Fix an issue where inclusive ordering with post releases was inconsistent with PEP 440 (#​379).
• Fix an issue where invalid URI tokens in PEP 508 requirement strings were silently discarded (#​817).
• Fix an issue where wrong markers were calculated when removing parts covered by the project's python constraint (#​824).
• Fix an issue where optional dependencies that are not part of an extra were included in the wheel metadata (#​830).
• Fix an issue where the __pycache__ directory and *.pyc files were included in sdists and wheels (#​835).

v2.0.1

Compare Source

Added

• Add support for poetry search in legacy sources (#​9949).
• Add a message in the poetry source show output when PyPI is implicitly enabled (#​9974).

Changed

• Improve performance for merging markers from overrides at the end of dependency resolution (#​10018).

Fixed

• Fix an issue where poetry sync did not remove packages that were not requested (#​9946).
• Fix an issue where poetry check failed even though there were just warnings and add a --strict option to fail on warnings (#​9983).
• Fix an issue where poetry update, poetry add and poetry remove with --only uninstalled packages from other groups (#​10014).
• Fix an issue where poetry update, poetry add and poetry remove uninstalled all extra packages (#​10016).
• Fix an issue where poetry self update did not recognize Poetry's own environment (#​9995).
• Fix an issue where read-only system site-packages were not considered when loading an environment with system site-packages (#​9942).
• Fix an issue where an error message in poetry install started with Warning: instead of Error: (#​9945).
• Fix an issue where Command.set_poetry, which is used by plugins, was removed (#​9981).
• Fix an issue where the help text of poetry build --clean showed a malformed short option instead of the description (#​9994).

Docs

• Add a FAQ entry for the migration from Poetry-specific fields to the project section (#​9996).
• Fix examples for project.readme and project.urls (#​9948).
• Add a warning that package sources are a Poetry-specific feature that is not included in core metadata (#​9935).
• Replace poetry install --sync with poetry sync in the section about synchronizing dependencies (#​9944).
• Replace poetry shell with poetry env activate in the basic usage section (#​9963).
• Mention that project.name is always required when the project section is used (#​9989).
• Fix the constraint of poetry-plugin-export in the section about poetry export (#​9954).

poetry-core (2.0.1)

• Replace the deprecated core metadata field Home-page with Project-URL: Homepage (#​807).
• Fix an issue where includes from tool.poetry.packages without a specified format were not initialized with the default value resulting in a KeyError (#​805).
• Fix an issue where some project.urls entries were not processed correctly resulting in a KeyError (#​807).
• Fix an issue where dynamic project.dependencies via tool.poetry.dependencies were ignored if project.optional-dependencies were defined (#​811).

v2.0.0

Compare Source

Added

• Add support for the project section in the pyproject.toml file according to PEP 621 (#​9135,
  #​9917).
• Add support for defining Poetry plugins that are required by the project and automatically installed if not present (#​9547).
• Lock resulting markers and groups and add a installer.re-resolve option (default: true) to allow installation without re-resolving (#​9427).
• Add a --local-version option to poetry build (#​9064).
• Add a --clean option to poetry build (#​9067).
• Add FIPS support for poetry publish (#​9101).
• Add the option to use poetry new interactively and configure more fields (#​9101).
• Add a config option installer.only-binary to enforce the use of binary distribution formats (#​9150).
• Add backend support for legacy repository search (#​9132).
• Add support to resume downloads from connection resets (#​9422).
• Add the option to define a constraint for the required Poetry version to manage the project (#​9547).
• Add an --all-groups option to poetry install (#​9744).
• Add an poetry env activate command as replacement of poetry shell (#​9763).
• Add a --markers option to poetry add to add a dependency with markers (#​9814).
• Add a --migrate option to poetry config to migrate outdated configs (#​9830).
• Add a --project option to search the pyproject.toml file in another directory without switching the directory (#​9831).
• Add support for shortened hashes to define git dependencies (#​9748).
• Add partial support for conflicting extras (#​9553).
• Add a poetry sync command as replacement of poetry install --sync (#​9801).

Changed

• Change the default behavior of poetry lock to --no-update and introduce a --regenerate option for the old default behavior (#​9327).
• Remove the dependency on poetry-plugin-export so that poetry export is not included per default (#​5980).
• Outsource poetry shell into poetry-plugin-shell (#​9763).
• Change the interface of poetry add --optional to require an extra the optional dependency is added to (#​9135).
• Actually switch the directory when using --directory/-C (#​9831).
• Drop support for Python 3.8 (#​9692).
• Rename experimental.system-git-client to experimental.system-git (#​9787, #​9795).
• Replace virtualenvs.prefer-active-python by the inverse setting virtualenvs.use-poetry-python and prefer the active Python by default (#​9786).
• Deprecate several fields in the tool.poetry section in favor of the respective fields in the project section in the pyproject.toml file (#​9135).
• Deprecate poetry install --sync in favor of poetry sync (#​9801).
• Upgrade the warning if the current project cannot be installed to an error (#​9333).
• Remove special handling for platformdirs 2.0 macOS config directory (#​8916).
• Tweak PEP 517 builds (#​9094).
• Use Poetry instead of pip to manage dependencies in isolated build environments (#​9168,
  #​9227).
• Trust empty Requires-Dist with modern metadata (#​9078).
• Do PEP 517 builds instead of parsing setup.py to determine dependencies (#​9099).
• Drop support for reading lock files prior version 1.0 (created with Poetry prior 1.1) (#​9345).
• Default to >= instead of ^ for the Python requirement when initializing a new project (#​9558).
• Limit build-system to the current major version of poetry-core when initializing a new project (#​9812).
• Remove pip-based installation, i.e. installer.modern-installation = false (#​9392).
• Remove virtualenvs.options.no-setuptools config option and never include setuptools per default (#​9331).
• Rename exceptions to have an Error suffix (#​9705).
• Remove deprecated CLI options and methods and revoke the deprecation of --dev (#​9732).
• Ignore installed packages during dependency resolution (#​9851).
• Improve the error message on upload failure (#​9701).
• Improve the error message if the current project cannot be installed to include another root cause (#​9651).
• Improve the output of poetry show <package> (#​9750).
• Improve the error message for build errors (#​9870).
• Improve the error message when trying to remove a package from a project without any dependencies (#​9918).
• Drop the direct dependency on crashtest (#​9108).
• Require keyring>=23.3.1 (#​9167).
• Require build>=1.2.1 (#​9283).
• Require dulwich>=0.22.6 (#​9748).

Fixed

• Fix an issue where git dependencies with extras could only be cloned if a branch was specified explicitly (#​7028).
• Fix an issue where poetry env remove failed if `virtuale

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.