update all dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
actions/checkout	action	major	v4 → v7
actions/setup-python	action	major	v5 → v6
ansible/ansible-lint	repository	major	v25.8.2 → v26.6.0
astral-sh/ruff-pre-commit	repository	minor	v0.12.12 → v0.15.20
bindep (changelog)	dependency-groups	minor	2.13.0 → 2.14.0
biomejs/pre-commit	repository	minor	v2.2.3 → v2.5.2
build (changelog)	dependency-groups	minor	1.3.0 → 1.5.0
codespell-project/codespell	repository	patch	v2.4.1 → v2.4.2
google-auth (source)	project.optional-dependencies	minor	2.40.3 → 2.55.1	2.55.2
igorshubovych/markdownlint-cli	repository	minor	v0.45.0 → v0.49.0
molecule (changelog)	dependency-groups	major	25.7.0 → 26.6.0
molecule (changelog)	project.dependencies	major	25.7.0 → 26.6.0
openstacksdk	project.optional-dependencies	minor	4.7.0 → 4.17.0
pappasam/toml-sort	repository	patch	v0.24.2 → v0.24.4
pipx (changelog)	dependency-groups	minor	1.7.1 → 1.15.0
pre-commit	dependency-groups	minor	4.3.0 → 4.6.0
pre-commit-uv (changelog)	dependency-groups	minor	4.1.5 → 4.2.2
python	uses-with	minor	3.13 → 3.14
renovatebot/pre-commit-hooks	repository	major	41.98.0 → 43.249.4	43.256.0 (+22)
setuptools (changelog)	build-system.requires	major	80.9.0 → 82.0.1	83.0.0
streetsidesoftware/cspell-cli	repository	major	v9.2.0 → v10.0.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

• Add worktree support for persist-credentials includeIf by @​ericsciple in #​2327

v6.0.0

Compare Source

• Persist creds to a separate file by @​ericsciple in #​2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in #​2248

v6

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v5.0.1

Compare Source

• Port v6 cleanup to v5 by @​ericsciple in #​2301

v5.0.0

Compare Source

• Update actions checkout to use node 24 by @​salmanmkc in #​2226

v5

Compare Source

• Port v6 cleanup to v5 by @​ericsciple in #​2301

actions/setup-python (actions/setup-python)

v6.3.0

Compare Source

What's Changed

Enhancement

• Add RHEL support and include Linux distro in cache keys by @​priyagupta108 in #​1323
• Fix pip cache error handling on Windows by @​priyagupta108 in #​1040

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​1281
• Upgrade actions dependencies by @​gowridurgad with @​Copilot in #​1303
• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in #​1324
• Upgrade dependency versions and test workflow configuration by @​HarithaVattikuti in #​1322

Documentation

• Update advanced-usage.md by @​Dunky-Z in #​811

New Contributors

• @​gowridurgad with @​Copilot made their first contribution in #​1303
• @​jasongin made their first contribution in #​1324
• @​Dunky-Z made their first contribution in #​811

Full Changelog: actions/setup-python@v6...v6.3.0

v6.2.0

Compare Source

What's Changed

Dependency Upgrades

• Upgrade dependencies to Node 24 compatible versions by @​salmanmkc in #​1259
• Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @​dependabot in #​1253 and #​1264

Full Changelog: actions/setup-python@v6...v6.2.0

v6.1.0

Compare Source

What's Changed

Enhancements:

• Add support for pip-install input by @​gowridurgad in #​1201
• Add graalpy early-access and windows builds by @​timfel in #​880

Dependency and Documentation updates:

• Enhanced wording and updated example usage for allow-prereleases by @​yarikoptic in #​979
• Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by @​dependabot in #​1139
• Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by @​dependabot in #​1094
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by @​dependabot in #​1199
• Upgrade requests from 2.32.2 to 2.32.4 by @​dependabot in #​1130
• Upgrade prettier from 3.5.3 to 3.6.2 by @​dependabot in #​1234
• Upgrade @​types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by @​dependabot in #​1235

New Contributors

• @​yarikoptic made their first contribution in #​979

Full Changelog: actions/setup-python@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Breaking Changes

• Upgrade to node 24 by @​salmanmkc in #​1164

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

• Add support for pip-version by @​priyagupta108 in #​1129
• Enhance reading from .python-version by @​krystof-k in #​787
• Add version parsing from Pipfile by @​aradkdj in #​1067

Bug fixes:

• Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by @​aparnajyothi-y in #​1183
• Change missing cache directory error to warning by @​aparnajyothi-y in #​1182
• Add Architecture-Specific PATH Management for Python with --user Flag on Windows by @​aparnajyothi-y in #​1122
• Include python version in PyPy python-version output by @​cdce8p in #​1110
• Update docs: clarification on pip authentication with setup-python by @​priya-kinthali in #​1156

Dependency updates:

• Upgrade idna from 2.9 to 3.7 in /tests/data by @​dependabot[bot] in #​843
• Upgrade form-data to fix critical vulnerabilities #​182 & #​183 by @​aparnajyothi-y in #​1163
• Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by @​aparnajyothi-y in #​1165
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in #​1181
• Upgrade @​actions/tool-cache from 2.0.1 to 2.0.2 by @​dependabot[bot] in #​1095

New Contributors

• @​krystof-k made their first contribution in #​787
• @​cdce8p made their first contribution in #​1110
• @​aradkdj made their first contribution in #​1067

Full Changelog: actions/setup-python@v5...v6.0.0

v6

Compare Source

ansible/ansible-lint (ansible/ansible-lint)

v26.6.0

Compare Source

Features

• fix: ensure configuration errors are visible to user (#​5038) @​Dotify71

Fixes

• fix: bump cryptography minimum to >=46.0.6 and refresh lock file (#​5089) @​sudhirverma
• fix: added setup-uv action version pinning to renovate config (#​5021) @​garethahealy
• fix: detect role roots in namespace subdirectories (#​5079) (#​5080) @​santosh7676
• fix(docs): remove mkdocstrings plugin to unblock docs CI (#​5084) @​rockygeekz
• fix: suppress ruff PLW0717 to unblock renovate (#​5077) @​rockygeekz
• Fix risky-shell-pipe false positive on multi-line Jinja (#​5058) @​arpitjain099
• Fix: fix mock_modules generated stubs failing YAML/doc parsing #​5031 (#​5032) @​santosh7676
• fix: support example format indicator, prevent ansible-lint from producing load-failure on valid non-YAML examples (#​5045) @​felixfontein
• fix: avoid name[casing] auto-fix crash on multi-segment prefixes (#​5026) @​bishalOps
• fix: preserve multi-hash comments on ansible-lint --fix (#​5033) @​bishalOps
• fix: preserve trailing blank lines when fqcn auto-fix renames a key (#​5027) @​bishalOps
• fix(security): update dependencies [SECURITY] (#​5061) @​renovate[bot]
• fix(ci): switch devel tests from py312 to py313 (#​5062) @​rockygeekz
• fix: ignore skip lookup across rules (#​5060) @​mehrdadbn9
• chore: Add support for Fedora 44 in the meta schema (#​5029) @​jsf9k
• fix: ensure configuration errors are visible to user (#​5038) @​Dotify71
• fix: role argument spec: fix typo in attribute schema (#​5044) @​felixfontein
• fix: handle ignore.txt comments with '#' in them correctly (#​5028) @​felixfontein
• fix: Evaluate the exit code after applying the skipped rules from .ansible-lint-ignore (#​5001) @​gmuloc
• fix: Update stale rulebook schema to match upstream ansible-rulebook (#​5056) @​Hrithik-Gavankar
• fix: update _extends syntax for release-drafter v7 compatibility (#​5043) @​rockygeekz
• fix(security): update dependencies [SECURITY] - abandoned (#​5014) @​renovate[bot]
• fix: update malformed block regex and bump pathspec upper bound (#​5039) @​rockygeekz

Maintenance

• chore: remove previously-synced agent skills (#​5078) @​ansibuddy
• chore(deps): update all dependencies (#​5074) @​renovate[bot]
• fix(security): update dependencies [SECURITY] (#​5061) @​renovate[bot]
• test: add security-check workflow (integration test) (#​5064) @​cidrblock
• chore: Add support for Fedora 44 in the meta schema (#​5029) @​jsf9k
• chore: clarify yaml reformatting under fix (#​5057) @​Himanshuagrawal4
• chore(deps): update all dependencies pep621 (#​5047) @​renovate[bot]
• chore(deps): update all dependencies (#​5046) @​renovate[bot]
• chore(deps): update all dependencies pep621 (#​5041) @​renovate[bot]
• chore(deps): update all dependencies (#​5040) @​renovate[bot]
• chore(deps): update all dependencies (#​5011) @​renovate[bot]
• fix(security): update dependencies [SECURITY] - abandoned (#​5014) @​renovate[bot]
• chore(deps): update all dependencies pep621 (#​5012) @​renovate[bot]

v26.4.0

Compare Source

Fixes

• fix: remove deprecated apt_key module from examples and builtins (#​5000) @​cidrblock
• fix(security): update dependencies [SECURITY] (#​5010) @​renovate[bot]
• fix: avoid permission error when linting /tmp files (#​5009) @​ssbarnea
• fix: reapply false positive patch for no-changed-when rule (#​4989) @​Red-GV
• docs: fix inaccuracies found during documentation audit (#​4999) @​cidrblock
• fix: support collection format in mock_roles (#​4980) @​emmanuel-ferdman
• fix(security): update dependencies [SECURITY] (#​4993) @​renovate[bot]

Maintenance

• chore: update hooks (#​5008) @​ssbarnea
• chore: implement workaround for coverage merging failure (#​5006) @​ssbarnea
• Add support for upcoming Ubuntu 26.04 (#​4995) @​Andiroid
• chore(deps): update all dependencies pep621 (#​4994) @​renovate[bot]
• chore(deps): bump black from 26.1.0 to 26.3.1 in /.config (#​4991) @​dependabot[bot]

v26.3.0

Compare Source

Features

• feat: add jinja2-template-extension opt-in rule (#​4979) @​djdanielsson

Fixes

• fix: Add missing version_changed var to ComplexityRule class (#​4987) @​thrashwerk

Maintenance

• chore: pre-commit autoupdate (#​4986) @​pre-commit-ci[bot]
• chore(deps): update all dependencies pep621 (#​4984) @​renovate[bot]
• chore(deps): update all dependencies (#​4983) @​renovate[bot]
• chore(deps-dev): bump minimatch from 9.0.5 to 10.2.4 in /test/schemas (#​4982) @​dependabot[bot]

v26.2.0

Compare Source

Features

• feat: complexity[tasks] for task and handler files (#​4799) @​ARYPROGRAMMER
• feat: adding new argument_spec rule and tests (#​4968) @​djdanielsson
• feat: allow users to opt into rules while still using profiles (#​4974) @​djdanielsson
• feat: use uv for installation and add override_version input (#​4703) (#​4933) @​Jkhall81

Fixes

• fix: no-free-form transform parsing (#​4942) @​Edition-X
• fix: make ansible-lint work with AWS CodeBuild Lambda (#​4972) @​GElkayam
• fix: skip_list with sub-rules no longer skips entire rule (#​4955) @​emmanuel-ferdman
• fix: update pre-commit hook to support Python 3.14 (#​4959) @​dmzoneill
• fix: respect custom yamllint config (#​4758) @​dbrennand
• fix: use pip instead of uv when setup_python is false (#​4941) @​Jkhall81
• fix: resolved issue with uv installing python (#​4940) @​Jkhall81
• fix: restore correct mapping indentation after anchors (#​4935) (#​4936) @​Jkhall81
• fix: schema/meta support SLES 15SP7 and 16 (#​4938) @​Klaas-
• Bump actions/checkout in README (#​4934) @​jaap3
• fix: resolve path resolution for imported tasks in global tasks direc… (#​4926) @​Jkhall81

Maintenance

• chore: remove use of pytest-sugar (#​4977) @​ssbarnea
• chore: update test deps (#​4976) @​ssbarnea
• chore: remove use of pytest-plus (#​4975) @​ssbarnea
• chore: pre-commit autoupdate (#​4948) @​pre-commit-ci[bot]
• chore(deps): bump ajv from 8.10.0 to 8.18.0 in /test/schemas (#​4970) @​dependabot[bot]
• chore(deps): bump cryptography from 46.0.4 to 46.0.5 in /.config (#​4962) @​dependabot[bot]
• chore(deps): bump pillow from 12.1.0 to 12.1.1 (#​4964) @​dependabot[bot]
• chore(deps): bump cryptography from 46.0.4 to 46.0.5 (#​4963) @​dependabot[bot]
• chore: fix mypy failures plus extra (#​4954) @​ssbarnea
• chore(deps): update all dependencies (#​4937) @​renovate[bot]
• chore(deps): update all dependencies (#​4932) @​renovate[bot]
• chore(deps): update all dependencies (#​4931) @​renovate[bot]
• chore(deps): update all dependencies (#​4930) @​renovate[bot]
• chore(deps): update all dependencies (#​4929) @​renovate[bot]
• chore(deps): update all dependencies (#​4928) @​renovate[bot]

v26.1.1

Compare Source

Features

• feat: added exit code 8 for successfully fixed violations (#​4674) (#​4899) @​Jkhall81

Fixes

• fix: resolve auto-fix failures and detection for short module names (… (#​4897) @​Jkhall81
• fix: ensure --no-offline overrides config file precedence (#​4845) (#​4903) @​Jkhall81
• fix: pre-commit cache missing cspell updates (#​4909) @​alisonlhart
• Set cryptography ceiling to match downstream requirement. (#​4904) @​cidrblock
• fix: almalinux missing reference in platforms array (#​4896) @​thelinuxracoon

Maintenance

• chore: Add renovate constraint for cryptography (#​4911) @​alisonlhart

v26.1.0

Compare Source

Fixes

• fix: implement precise filtering for bracketed sub-tags (#​4892) @​Jkhall81
• fix: avoid unnecessary creation of .ansible folders (#​4894) @​ssbarnea
• fix: refactor RulesCollection to always require app argument (#​4891) @​ssbarnea
• fix: anchor kind discovery to project root (#​4763) (#​4889) @​Jkhall81
• fix: avoid creating cache directory when listing version (#​4865) @​ssbarnea
• fix: ensure exclude_paths are honored for unparseable files (#​4886) @​Jkhall81
• fix: avoid use of pathspec 1.0.0 until yamllint is updated (#​4887) @​ssbarnea
• fix: allow valid tabs in lineinfile nested in blocks (#​4719) (#​4881) @​Jkhall81
• fix: update documentation to clarify requirement to run from project … (#​4885) @​Jkhall81
• fix: replace hardcoded /tmp path with secure temp directory (CWE… (#​4878) @​Jkhall81
• fix: handle missing keys in _parse_failed_msg to prevent KeyError (#​4879) @​Jkhall81
• fix: add argument_specs to meta schema (#​4762) (#​4880) @​Jkhall81
• fix: retire -p/--parseable option (#​4884) @​ssbarnea
• fix: correct partial-become rule documentation comments (#​4876) @​emmanuel-ferdman

Maintenance

• chore: add almalinux platform to meta schemas (#​4893) @​thelinuxracoon
• chore: refactor testing code to reduce use of get_app() (#​4890) @​ssbarnea
• chore(deps): update all dependencies (#​4877) @​renovate[bot]

v26

Compare Source

v25.12.2

Compare Source

Fixes

• Update configuring.md to reflect correct precommit name (#​4872) @​AgustinRamiroDiaz
• fix: prevent trailing space on blank comment lines (#​4868) @​emmanuel-ferdman

Maintenance

• chore(deps): update dependencies [security] - abandoned (#​4874) @​renovate[bot]
• chore(deps): update all dependencies (#​4867) @​renovate[bot]
• chore(deps): update dependencies [security] (#​4873) @​renovate[bot]
• chore(deps): bump filelock from 3.20.0 to 3.20.1 in /.config (#​4869) @​dependabot[bot]
• chore(deps): update dependencies [security] (#​4870) @​renovate[bot]

v25.12.1

Compare Source

Features

• feat(action): Allow users to override python_version (#​4829) @​konstruktoid

Fixes

• fix: avoid stacktrace when ansible syntax check does not return filename (#​4864) @​ssbarnea
• fix: change setup-python action to specific commit (#​4856) @​arcanis
• fix: autofix comments missing space after hash (#​4855) @​emmanuel-ferdman

Maintenance

• chore(deps): update all dependencies (#​4863) @​renovate[bot]
• chore: pre-commit autoupdate (#​4859) @​pre-commit-ci[bot]
• chore: adopt pytest>=9.0.0 config (#​4861) @​Qalthos
• chore(deps): update all dependencies (#​4852) @​renovate[bot]

v25.12.0

Compare Source

Maintenance

• chore: Remove cffi, importlib-metadata, reduce core lower bound (#​4860) @​cidrblock

v25.11.1

Compare Source

Features

• feat: detect missing prefix in role's handlers vars (#​4826) @​cavcrosby

Fixes

• Migrate RTD URLs to docs.ansible.com (#​4842) @​gundalow
• fix: Pass module spec via stdin instead of command line args (#​4844) @​apollo13
• fix: Update mypy python version to 3.12 (#​4846) @​alisonlhart

Maintenance

• chore(deps): update all dependencies (#​4833) @​renovate[bot]
• chore(deps): bump js-yaml from 4.1.0 to 4.1.1 in /test/schemas (#​4849) @​dependabot[bot]
• chore(deps-dev): bump glob from 10.4.5 to 10.5.0 in /test/schemas (#​4847) @​dependabot[bot]
• Add support for Fedora 43 (#​4836) @​jsf9k

v25.11.0

Compare Source

Fixes

• fix: require ansible-core>=2.17.10 (#​4835) @​ssbarnea
• fix: ignore internal types false positives with jinja[invalid] (#​4823) @​anusshukla
• fix: make repository key optional in galaxy.yml (#​4798) @​rivv0
• fix: github action ref doesn't checkout that ref (#​4774) @​rohun-apex
• fix: add set-environment and unset-environment in executable_options for systemctl (#​4785) @​ziegenberg
• Fix typos (#​4814) @​jsf9k

Maintenance

• chore: pre-commit autoupdate (#​4834) @​pre-commit-ci[bot]
• chore: Test cspell configuration (#​4828) @​alisonlhart
• chore(deps): update all dependencies (#​4817) @​renovate[bot]
• Add finalize workflow for secure sonarcloud checks (#​4820) @​alisonlhart
• Update sonar-project.properties (#​4815) @​alisonlhart

v25.9.2

Compare Source

Fixes

• fix: avoid using unreleased dependency constraints ([#​4802](https://redirect.github.co

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "before 4am on monday"
• Automerge
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml

Artifact update for google-auth resolved to version 2.55.2, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 2.55.1
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

[github-actions]

@renovate[bot] All commits must have verified signatures.\n\nPlease see this Ansible Forum post for more information.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.