fix(deps): update all non-major dependencies #7272

renovate · 2025-06-30T00:45:52Z

This PR contains the following updates:

Package	Change	Type	Update
aiohttp	`>=3.12.12` -> `>=3.12.13`	project.dependencies	patch
alloy	`=1.0.12` -> `=1.0.16`	workspace.dependencies	patch
api-lib	`>=0.0.1` -> `>=0.0.3`	project.dependencies	patch
bencherdev/bencher	`v0.5.1` -> `v0.5.2`	action	patch
docker/setup-buildx-action	`v3.10.0` -> `v3.11.1`	action	minor
github/codeql-action	`v3.29.0` -> `v3.29.1`	action	patch
libp2p	`0.55.0` -> `0.56.0`	workspace.dependencies	minor
libp2p-identity	`0.2.11` -> `0.2.12`	workspace.dependencies	patch
python (source)	`>=3.13,<3.14` -> `>=3.13.5,<3.14`	requires-python	patch
ruff (source, changelog)	`>=0.11.13` -> `>=0.12.1`	dependency-groups	patch
sea-orm (source)	`1.1.12` -> `1.1.13`	workspace.dependencies	patch
sea-orm-cli (source)	`1.1.12` -> `1.1.13`	workspace.dependencies	patch
sea-orm-migration (source)	`1.1.12` -> `1.1.13`	workspace.dependencies	patch
step-security/harden-runner	`v2.12.1` -> `v2.12.2`	action	patch

Release Notes

aio-libs/aiohttp (aiohttp)

`v3.12.13`

Compare Source

====================

Bug fixes

Fixed auto-created :py:class:~aiohttp.TCPConnector not using the session's event loop when :py:class:~aiohttp.ClientSession is created without an explicit connector -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:11147.

alloy-rs/alloy (alloy)

`v1.0.16`

Compare Source

Bug Fixes

Encode into buf (#2632)

`v1.0.15`

Compare Source

Miscellaneous Tasks

Release 1.0.15
Rename ported fn (#2629)

`v1.0.14`

Compare Source

Features

Add recover_signer_unchecked_with_buf to SignerRecoverable trait (#2626)
[network] Add method to remove nonce from transaction using TransactionBuilder (#2624)
[rpc] Add generic TxReq to Bundle (#2623)
[rpc] Add generic TxReq to SimBlock (#2622)

Miscellaneous Tasks

Release 1.0.14
Remove basefee check from try_into_block (#2628)
[json-rpc] Add raw text in error message (#2621)

`v1.0.13`

Compare Source

Dependencies

Bump alloy-trie to 0.9.0 (#2600)

Documentation

Fix typo in comments (#2611)
Correct typo 'implementor' to 'implementer (#2606)

Features

Add try_into_block_with_encoded and refactor block construction (#2495)
[tx-macros] Add arbitrary_cfg parameter (#2616)
Add better conversions for AnyRpcBlock (#2614)
Add log filtering methods to Filter (#2607)
Impl Typed2718 for AnyTxType (#2609)
Add block number helper getter (#2608)
Add with_header method to Block type (#2604)
Added convinient fn decode_2718_exact (#2603)
Implement SignerRecoverable for Signed (#2596)

Miscellaneous Tasks

Release 1.0.13
Update code example in rpc-client README (#2617)
Make txtype AT typed2718 (#2610)
Add funding.json

Other

Revert "ci: pin nextest to v0.9.98" (#2598)
Pin nextest to v0.9.98 (#2597)

jeandemeusy/api-lib (api-lib)

`v0.0.3`

Compare Source

What's Changed

feat(ci): improve coverage reports by @jeandemeusy in https://github.com/jeandemeusy/api-lib/pull/10
feat(api): enhance API functionality and add Flask integration by @jeandemeusy in https://github.com/jeandemeusy/api-lib/pull/12
feat(ci): add manual trigger for publish workflow with tag input by @jeandemeusy in https://github.com/jeandemeusy/api-lib/pull/16

Full Changelog: jeandemeusy/api-lib@0.0.2...0.0.3

`v0.0.2`

Compare Source

What's Changed

Potential fix for code scanning alert no. 2: Workflow does not contain permissions by @jeandemeusy in https://github.com/jeandemeusy/api-lib/pull/6
Potential fix for code scanning alert no. 1: Workflow does not contain permissions by @jeandemeusy in https://github.com/jeandemeusy/api-lib/pull/7
feat(objects): Allow nesting objects by @jeandemeusy in https://github.com/jeandemeusy/api-lib/pull/9

Full Changelog: jeandemeusy/api-lib@0.0.1...0.0.2

bencherdev/bencher (bencherdev/bencher)

`v0.5.2`

Compare Source

Fix empty slug validation bug

docker/setup-buildx-action (docker/setup-buildx-action)

`v3.11.1`

Compare Source

Fix keep-state not being respected by @crazy-max in https://github.com/docker/setup-buildx-action/pull/429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

`v3.11.0`

Compare Source

Keep BuildKit state support by @crazy-max in https://github.com/docker/setup-buildx-action/pull/427
Remove aliases created when installing by default by @hashhar in https://github.com/docker/setup-buildx-action/pull/139
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in https://github.com/docker/setup-buildx-action/pull/422 https://github.com/docker/setup-buildx-action/pull/425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

github/codeql-action (github/codeql-action)

`v3.29.1`

Compare Source

libp2p/rust-libp2p (libp2p)

`v0.56.0`: libp2p-v0.56.0

Compare Source

See individual changelogs for details.

Notably, we've removed support for async-std in all crates, as async-std has been discontinued. Users should switch to using tokio instead.
For now, we've kept the abstractions for supporting alternative runtimes, although not all parts may be public. Please open an issue if you are planning to support a custom runtime and run into any issues with that..

Thanks to everyone who contributed to the release!

python/cpython (python)

astral-sh/ruff (ruff)

`v0.12.1`

Compare Source

Preview features

[flake8-errmsg] Extend EM101 to support byte strings (#18867)
[flake8-use-pathlib] Add autofix for PTH202 (#18763)
[pygrep-hooks] Add AsyncMock methods to invalid-mock-access (PGH005) (#18547)
[pylint] Ignore __init__.py files in (PLC0414) (#18400)
[ruff] Trigger RUF037 for empty string and byte strings (#18862)
[formatter] Fix missing blank lines before decorated classes in .pyi files (#18888)

Bug fixes

Avoid generating diagnostics with per-file ignores (#18801)
Handle parenthesized arguments in remove_argument (#18805)
[flake8-logging] Avoid false positive for exc_info=True outside logger.exception (LOG014) (#18737)
[flake8-pytest-style] Enforce pytest import for decorators (#18779)
[flake8-pytest-style] Mark autofix for PT001 and PT023 as unsafe if there's comments in the decorator (#18792)
[flake8-pytest-style] PT001/PT023 fix makes syntax error on parenthesized decorator (#18782)
[flake8-raise] Make fix unsafe if it deletes comments (RSE102) (#18788)
[flake8-simplify] Fix SIM911 autofix creating a syntax error (#18793)
[flake8-simplify] Fix false negatives for shadowed bindings (SIM910, SIM911) (#18794)
[flake8-simplify] Preserve original behavior for except () and bare except (SIM105) (#18213)
[flake8-pyi] Fix PYI041's fix causing TypeError with None | None | ... (#18637)
[perflint] Fix PERF101 autofix creating a syntax error and mark autofix as unsafe if there are comments in the list call expr (#18803)
[perflint] Fix false negative in PERF401 (#18866)
[pylint] Avoid flattening nested min/max when outer call has single argument (PLW3301) (#16885)
[pylint] Fix PLC2801 autofix creating a syntax error (#18857)
[pylint] Mark PLE0241 autofix as unsafe if there's comments in the base classes (#18832)
[pylint] Suppress PLE2510/PLE2512/PLE2513/PLE2514/PLE2515 autofix if the text contains an odd number of backslashes (#18856)
[refurb] Detect more exotic float literals in FURB164 (#18925)
[refurb] Fix FURB163 autofix creating a syntax error for yield expressions (#18756)
[refurb] Mark FURB129 autofix as unsafe if there's comments in the readlines call (#18858)
[ruff] Fix false positives and negatives in RUF010 (#18690)
Fix casing of analyze.direction variant names (#18892)

Rule changes

Fix f-string interpolation escaping in generated fixes (#18882)
[flake8-return] Mark RET501 fix unsafe if comments are inside (#18780)
[flake8-async] Fix detection for large integer sleep durations in ASYNC116 rule (#18767)
[flake8-async] Mark autofix for ASYNC115 as unsafe if the call expression contains comments (#18753)
[flake8-bugbear] Mark autofix for B004 as unsafe if the hasattr call expr contains comments (#18755)
[flake8-comprehension] Mark autofix for C420 as unsafe if there's comments inside the dict comprehension (#18768)
[flake8-comprehensions] Handle template strings for comprehension fixes (#18710)
[flake8-future-annotations] Add autofix (FA100) (#18903)
[pyflakes] Mark F504/F522/F523 autofix as unsafe if there's a call with side effect (#18839)
[pylint] Allow fix with comments and document performance implications (PLW3301) (#18936)
[pylint] Detect more exotic NaN literals in PLW0177 (#18630)
[pylint] Fix PLC1802 autofix creating a syntax error and mark autofix as unsafe if there's comments in the len call (#18836)
[pyupgrade] Extend version detection to include sys.version_info.major (UP036) (#18633)
[ruff] Add lint rule RUF064 for calling chmod with non-octal integers (#18541)
[ruff] Added cls.__dict__.get('__annotations__') check (RUF063) (#18233)
[ruff] Frozen dataclass default should be valid (RUF009) (#18735)

Server

Consider virtual path for various server actions (#18910)

Documentation

Add fix safety sections (#18940,#18841,#18802,#18837,#18800,#18415,#18853,#18842)
Use updated pre-commit id (#18718)
[perflint] Small docs improvement to PERF401 (#18786)
[pyupgrade]: Use super(), not __super__ in error messages (UP008) (#18743)
[flake8-pie] Small docs fix to PIE794 (#18829)
[flake8-pyi] Correct collections-named-tuple example to use PascalCase assignment (#16884)
[flake8-pie] Add note on type checking benefits to unnecessary-dict-kwargs (PIE804) (#18666)
[pycodestyle] Clarify PEP 8 relationship to whitespace-around-operator rules (#18870)

Other changes

Disallow newlines in format specifiers of single quoted f- or t-strings (#18708)
[flake8-logging] Add fix safety section to LOG002 (#18840)
[pyupgrade] Add fix safety section to UP010 (#18838)

SeaQL/sea-orm (sea-orm)

`v1.1.13`

Compare Source

New Features

[sea-orm-cli] New --frontend-format flag to generate entities in pure Rust:

// for example, below is the normal (compact) Entity:
use sea_orm::entity::prelude::*;
use serde::{Deserialize, Serialize};

#[derive(Clone, Debug, PartialEq, DeriveEntityModel, Eq, Serialize, Deserialize)]

#[sea_orm(table_name = "cake")]
pub struct Model {
    #[sea_orm(primary_key)]
    #[serde(skip_deserializing)]
    pub id: i32,
    #[sea_orm(column_type = "Text", nullable)]
    pub name: Option<String> ,
}
// this is the generated frontend model, there is no SeaORM dependency:
use serde::{Deserialize, Serialize};

#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
pub struct Model {
    #[serde(skip_deserializing)]
    pub id: i32,
    pub name: Option<String> ,
}

Enhancements

Remove potential panics in Loader https://github.com/SeaQL/sea-orm/pull/2637

step-security/harden-runner (step-security/harden-runner)

`v2.12.2`

Compare Source

What's Changed

Added HTTPS Monitoring for additional destinations - *.githubusercontent.com
Bug fixes:

Implicitly allow local multicast, local unicast and broadcast IP addresses in block mode
Increased policy map size for block mode

Full Changelog: step-security/harden-runner@v2...v2.12.2

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-06-30T00:45:53Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package python --upgrade-package ruff
Using CPython 3.13.5 interpreter at: /opt/containerbase/tools/python/3.13.5/bin/python3
  × No solution found when resolving dependencies:
  ╰─▶ Because only ruff<=0.12.0 is available and hoprnet:dev depends on
      ruff>=0.12.1, we can conclude that hoprnet:dev's requirements are
      unsatisfiable.
      And because your workspace requires hoprnet:dev, we can conclude that
      your workspace's requirements are unsatisfiable.

coderabbitai · 2025-06-30T00:45:58Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Explain this complex logic.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai explain this code block.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read src/utils.ts and explain its main purpose.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

renovate · 2025-06-30T08:20:12Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Tibor <9529609+Teebor-Choka@users.noreply.github.com>

github-actions bot added dependencies Pull requests that update a dependency file toolchain Developer and product happiness labels Jun 30, 2025

renovate bot force-pushed the renovate/all-minor-patch branch from dc845b1 to fe5100d Compare June 30, 2025 06:47

fix(deps): update all non-major dependencies

4144dcb

renovate bot force-pushed the renovate/all-minor-patch branch from fe5100d to 4144dcb Compare June 30, 2025 08:11

Teebor-Choka changed the base branch from master to kauki/deps/update-20250701 June 30, 2025 08:13

Merge branch 'kauki/deps/update-20250701' into renovate/all-minor-patch

14e3692

Teebor-Choka merged commit 200942d into kauki/deps/update-20250701 Jun 30, 2025
15 of 24 checks passed

Teebor-Choka deleted the renovate/all-minor-patch branch June 30, 2025 08:20

Teebor-Choka added a commit that referenced this pull request Jun 30, 2025

fix(deps): update all non-major dependencies (#7272)

765bc97

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Tibor <9529609+Teebor-Choka@users.noreply.github.com>

Teebor-Choka added a commit that referenced this pull request Jun 30, 2025

fix(deps): update all non-major dependencies (#7272)

b43a3c6

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Tibor <9529609+Teebor-Choka@users.noreply.github.com>

Teebor-Choka mentioned this pull request Jun 30, 2025

chore(deps): Bi-weekly update 20250701 #7273

Merged

Teebor-Choka added a commit that referenced this pull request Jun 30, 2025

fix(deps): update all non-major dependencies (#7272)

951bbae

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Tibor <9529609+Teebor-Choka@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all non-major dependencies #7272

fix(deps): update all non-major dependencies #7272

Uh oh!

renovate bot commented Jun 30, 2025 •

edited

Loading

Uh oh!

renovate bot commented Jun 30, 2025

Uh oh!

coderabbitai bot commented Jun 30, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

Documentation and Community

Uh oh!

Uh oh!

renovate bot commented Jun 30, 2025

Uh oh!

Uh oh!

fix(deps): update all non-major dependencies #7272

fix(deps): update all non-major dependencies #7272

Uh oh!

Conversation

renovate bot commented Jun 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug fixes

Bug Fixes

Miscellaneous Tasks

Features

Miscellaneous Tasks

Dependencies

Documentation

Features

Miscellaneous Tasks

Other

What's Changed

What's Changed

v0.56.0: libp2p-v0.56.0

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

New Features

Enhancements

What's Changed

Configuration

Uh oh!

renovate bot commented Jun 30, 2025

⚠️ Artifact update problem

File name: uv.lock

Uh oh!

coderabbitai bot commented Jun 30, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

Documentation and Community

Uh oh!

Uh oh!

renovate bot commented Jun 30, 2025

Edited/Blocked Notification

Uh oh!

Uh oh!

renovate bot commented Jun 30, 2025 •

edited

Loading

`v0.56.0`: libp2p-v0.56.0