Skip to content

Update github actions all non-major dependencies - #5622

Merged
brettedw merged 2 commits into
mainfrom
renovate/github-actions-all-minor-patch
Jul 20, 2026
Merged

Update github actions all non-major dependencies#5622
brettedw merged 2 commits into
mainfrom
renovate/github-actions-all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jul 18, 2026 •
edited by github-actions Bot
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
astral-sh/uv uses-with patch 0.11.28 → 0.11.29
renovatebot/github-action action patch v46.1.18 → v46.1.19 v46.1.20

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

astral-sh/uv (astral-sh/uv)

v0.11.29

Compare Source

Released on 2026-07-15.

Python
  • Use gzip-compressed artifacts for PyPy downloads (#​20265)
Enhancements
  • Add JSON output to uv tree (#​19978)
  • Add CUDA 13.2 as a supported PyTorch backend (#​20267)
  • Prefer local artifacts over URLs when installing from pylock.toml (#​20393)
  • Clarify diagnostics for unsatisfiable direct requirement ranges (#​20227)
  • Include the selected project name in missing-extra errors (#​20358)
Preview features
  • Preserve extras and dependency-group conflict context when selecting locked project tools (#​20078)
  • Split OSV audit queries that exceed the service's 1,000-package limit (#​20398)
  • Apply OSV fixed-version information only to the matching package and ecosystem (#​20399)
  • Skip the virtualenv distutils monkeypatch on Python 3.10 and later (#​20222)
  • Report invalid uv audit --service-url values instead of panicking (#​20374)
  • Include preview settings in the published SchemaStore schema (#​20304)
Performance
  • Reduce resolver work by widening selected versions across ranges without other known candidates (#​20115)
  • Defer client and build setup for no-op uv sync operations (#​20364)
  • Reuse workspace discovery during frozen syncs (#​20363)
  • Reuse workspace discovery after resolving settings (#​20356)
  • Reuse workspace discovery in uv tree, uv export, uv format, and uv audit (#​20359)
  • Avoid cache and interpreter setup when reading a project version (#​20360)
Bug fixes
  • Reject duplicate active package entries in pylock.toml (#​20391)
  • Preserve direct-archive hashes in uv pip freeze output (#​20395)
  • Explain conflicting root requirements instead of displaying an empty version range (#​20228)
  • Prevent build-backend data paths from escaping the project or bypassing wheel exclusions (#​20397)
  • Reject PEP 517 backend paths outside the source tree, including paths that escape through symlinks (#​20387)
  • Redact credentials from failed Git fetch commands (#​20401)
  • Fix exclusive post-release range ordering to match PEP 440 (#​20268)
  • Canonicalize equivalent PEP 440 ranges during dependency resolution (#​20182)
  • Honor Python version pins when initializing scripts (#​20404)
  • Respect package-scoped source filtering for scripts (#​20389)
  • Report existing environment incompatibilities when uv pip install --strict has nothing to install (#​20388)
  • Continue scanning platlib when purelib is missing (#​20405)
  • Handle versionless .egg-info files as legacy package metadata (#​20403)
  • Make repeated locking idempotent for impossible cross-variable platform markers (#​20369)
  • Report invalid cloud credential endpoint URLs instead of panicking (#​20372)
  • Report invalid pylock.toml artifact URLs instead of panicking (#​20373)
  • Report non-UTF-8 virtual environment paths instead of panicking while generating activation scripts (#​20375)
  • Return an unsupported-operation error from unimplemented build-backend requirement hooks (#​20376)
Documentation
  • Clarify --no-build behavior for editable requirements (#​20234)
  • Document uv's threat model (#​20236)
  • Reduce the number of badges in the README (#​11257)
renovatebot/github-action (renovatebot/github-action)

v46.1.19

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.1.18 (950df21)
Miscellaneous Chores
Build System
  • deps: lock file maintenance (40439db)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.252.3 (f3ee604)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.252.4 (fb6587d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.252.5 (08ffb41)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.252.6 (8de96ca)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.253.0 (5628119)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.253.1 (9572f12)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.253.2 (d044ae3)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.254.0 (891e07c)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.255.0 (cec36e0)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.255.2 (ac6f89c)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.256.0 (d8ab09a)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.256.1 (63b2a4d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.256.2 (7f2db1d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.256.3 (d63a0f4)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.2 (368980a)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.4 (337f317)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.5 (9330ec3)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.6 (3c05155)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.7 (5787ba3)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.257.9 (6df70f7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.258.0 (2866786)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.258.1 (91eee10)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.259.0 (f770175)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.259.2 (462028a)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.259.3 (69cde7f)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.260.0 (30ec257)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.260.2 (203f0f2)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Test Links:

Landing Page
MoreCast
Percentile Calculator
FireCalc
FireCalc bookmark
Auto Spatial Advisory (ASA)
HFI Calculator
SFMS Insights
Fire Watch
Weather Toolkit

@codecov

codecov Bot commented Jul 18, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.04%. Comparing base (3003ac9) to head (a8cbcaf).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #5622   +/-   ##
=======================================
  Coverage   67.04%   67.04%           
=======================================
  Files         379      379           
  Lines       22221    22221           
  Branches     3059     3059           
=======================================
  Hits        14897    14897           
  Misses       6174     6174           
  Partials     1150     1150

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate
renovate Bot force-pushed the renovate/github-actions-all-minor-patch branch from 3e449fa to d8aa428 Compare July 18, 2026 20:28
@renovate renovate Bot changed the title Update renovatebot/github-action action to v46.1.19 Update github actions all non-major dependencies Jul 18, 2026
@renovate
renovate Bot force-pushed the renovate/github-actions-all-minor-patch branch from 9bc7c9e to c9afd19 Compare July 20, 2026 15:29
@sonarqubecloud

sonarqubecloud Bot commented Jul 20, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@renovate

renovate Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@brettedw
brettedw merged commit 12cb702 into main Jul 20, 2026
45 of 47 checks passed
@brettedw
brettedw deleted the renovate/github-actions-all-minor-patch branch July 20, 2026 17:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@brettedw