chore(tooling): update development dependencies by renovate[bot] · Pull Request #114 · shmileee/dotfiles

renovate · 2026-09-07T14:16:33Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
aqua:twpayne/chezmoi	tools	minor	`2.72.1` → `2.73.1`	`2.73.2`
aqua:zizmorcore/zizmor	tools	minor	`1.30.0` → `1.31.1`
pipx:ansible-lint (changelog)	tools	minor	`26.8.0` → `26.10.1`
renovatebot/pre-commit-hooks	repository	minor	`44.61.6` → `44.164.7`	`44.167.5` (+11)
ruff	tools	minor	`0.16.6` → `0.17.1`
rumdl	tools	patch	`0.2.64` → `0.2.79`	`v0.3.0`
stylua	tools	minor	`2.5.2` → `2.6.0`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

twpayne/chezmoi (aqua:twpayne/chezmoi)

`v2.73.1`

Compare Source

Changelog

Fixes

41a618c fix: Don't double backslashes in shellQuote
c6778d6 fix: Pass /dev/null to diff command for missing files in apply --interactive
6933f78 fix: Fix panic in add when adding file in external_ explicit dir
2abb5f7 fix: Fix panic in re-add with exact_ dirs with implicit parents
3cd47c5 fix: Fix panic in re-add with externals with implicit parents
56ef8a3 fix: Report correct line number for secrets found by add

Documentation

7cd56b9 docs: State that re-add command does not cover externals
544cb5b docs: Add link to article

`v2.73.0`

Compare Source

Changelog

Features

1c6895f feat: Add push command
5931664 feat: Notify user if chezmoi is not in their PATH in install script

Documentation

f462896 docs: Add push command to daily operations
0b73091 docs: Align documentation with source
e5c1a39 docs: Add link to article

`v2.72.2`

Compare Source

Changelog

Features

48d96d6 feat: Allow private_ attribute to apply to external_ dirs
8d10962 feat: Ignore common localhost.localdomain values when determining hostname

zizmorcore/zizmor (aqua:zizmorcore/zizmor)

`v1.31.1`

Compare Source

Sponsorship is appreciated!

Bug Fixes 🐛🔗

Fixed a regression in 1.31.0 where some ignore comments/configurations would no longer apply to the dangerous-triggers audit (#2450)

`v1.31.0`

Compare Source

Sponsorship is appreciated!

Enhancements 🌱🔗

The typosquat-uses audit now supports pre-commit config inputs (#2437)
The self-hosted-runner audit is now significantly more precise (#2350)

Many thanks to @ubiratansoares for proposing and implementing this enhancement!
The dangerous-triggers audit now considers the issue_comment trigger fundamentally dangerous (#2396)
zizmor is now aware of the image_version workflow trigger (#2397)
The dangerous-triggers audit now produces more precise finding/diagnostic spans (#2402)
The cache-poisoning audit is now aware of pnpm/setup (#2409)
The unpinned-images audit now produces more precise findings when the user's workflow contains an indirect matrix (#2395)

Many thanks to @ubiratansoares for proposing and implementing this enhancement!
The cache-poisoning audit is now aware of GitHub's new cache-mode: setting, and will skip any findings that would occur when a job has an effective cache-mode: none (#2418)
The cache-poisoning audit now flags usages of cache-mode: write and cache-mode: write-only with dangerous triggers, i.e. triggers that give an attacker privileged code execution (#2426)
zizmor now uses a tree-sitter grammar for PowerShell that's more precise/capable of capturing more non-trivial PowerShell expressions (#2444)

Bug Fixes 🐛🔗

Fixed a class of false positives/imprecisions in adhoc-packages that caused some pnpm and yarn invocations to be misclassified as package installations (#2386)

Many thanks to @marcalexiei for implementing this improvement!
Fixed a bug where zizmor would fail to honor Git submodules and worktrees when discovering configuration files relative to a repo root (#2390)
Fixed a bug where the ref-version-mismatch audit would crash on unusually placed version comments (#2394)
Fixed a bug where zizmor would fail to handle some pre-commit inputs that use prek extensions to the language_version and default_language_version keys (#2413)
Fixed a bug where the use-trusted-publishing audit would fail to detect certain true-positive patterns inside of PowerShell blocks (#2444)

`v1.30.1`

Compare Source

Sponsorship is appreciated!

Bug Fixes 🐛🔗

Fixed a bug where zizmor would crash on pre-commit inputs that reference a GitHub URL with an explicit .git suffix (#2363)
Fixed a bug where self-repository auto-fixes were incorrectly marked as "safe" instead of "unsafe" (#2373)

ansible/ansible-lint (pipx:ansible-lint)

`v26.10.1`

Compare Source

What's Changed

fix: lower cryptography minimum version to 46.0.7 by @shvenkat-rh in #5212

Full Changelog: ansible/ansible-lint@v26.10.0...v26.10.1

`v26.10.0`

Compare Source

What's Changed

fix: respect skip_list for yaml[comments] during --fix by @shvenkat-rh in #5177
Fix/scorecard security improvements v2 by @shvenkat-rh in #5194
fix: correctly match symlinked PATH entries in path_inject() by @sushmithainjeti in #5205
fix(security): update dependencies [SECURITY] by @renovate[bot] in #5206

New Contributors

@sushmithainjeti made their first contribution in #5205

Full Changelog: ansible/ansible-lint@v26.9.0...v26.10.0

`v26.9.0`

Compare Source

Features

feat: support example section in file meta/argument_specs.yml (#5164) @berndfinger

Fixes

fix: resolve short mock modules during syntax check (#5149) @shvenkat-rh
fix: propagate extra_vars to import_playbook syntax check (#5148) @shvenkat-rh
fix: resolve nested include_tasks relative paths (#5159) @shvenkat-rh
fix: resolve include_tasks paths from playbook dir (#5184) @shvenkat-rh
fix: apply profile-level skip list during linting (#5151) @shvenkat-rh
fix: honor warn_list after --fix rewrites task names (#5085) @santosh7676
fix: mock_modules clobbering collections and args false positives (#5157) @djdanielsson
fix: inject plain-name mock roles path regardless of --offline (#5183) @shvenkat-rh
fix: warn users when directory expansion discovers new files (#5158) @rockygeekz
fix: skip auto-fix no-jinja-when on string-embedded jinja (#5103) @f1047
fix: do not warn when Jinja block indent is only trim-marker noise (#5153) @DSeaStar
fix: preserve blank lines after flow collections (#5178) @shvenkat-rh
fix: add validate_argspec to play schema (#5187) @sameeralam3127
fix: use ThreadPoolExecutor for syntax check workers (#5173) @rockygeekz
fix: drop ruamel.yaml.clib (#5163) @shvenkat-rh
fix(deps): upgrade gitpython 3.1.57 to 3.1.59 (#5152) @rockygeekz
fix: upgrade black to >=25.2.0 to address CVE-2026-32274 (#5166) @shvenkat-rh
fix: raise cryptography floor and bump js-yaml for Guardian prod vulns (#5174) @rockygeekz

Performance

perf: cache get_deps_versions() result (#5113) @BlackDark

Maintenance

chore: Add .github/SECURITY.md (#5165) @gundalow
chore(deps): update all dependencies and pep621 (#5138, #5154, #5155, #5160, #5161, #5172, #5175, #5176) @renovate[bot]

What's Changed

chore(deps): update all dependencies by @renovate[bot] in #5138
fix: resolve short mock modules during syntax check by @shvenkat-rh in #5149
fix(deps): upgrade gitpython 3.1.57 to 3.1.59 by @rockygeekz in #5152
chore(deps): update all dependencies pep621 by @renovate[bot] in #5155
fix: propagate extra_vars to import_playbook syntax check by @shvenkat-rh in #5148
fix: warn users when directory expansion discovers new files by @rockygeekz in #5158
fix: resolve nested include_tasks relative paths by @shvenkat-rh in #5159
fix: apply profile-level skip list during linting by @shvenkat-rh in #5151
chore(deps): update all dependencies by @renovate[bot] in #5154
chore(deps): update all dependencies by @renovate[bot] in #5160
fix: skip auto-fix no-jinja-when on string-embedded jinja by @f1047 in #5103
chore(deps): update all dependencies pep621 by @renovate[bot] in #5161
fix: do not warn when Jinja block indent is only trim-marker noise by @DSeaStar in #5153
chore: Add .github/SECURITY.md by @gundalow in #5165
fix: upgrade black to >=25.2.0 to address CVE-2026-32274 by @shvenkat-rh in #5166
Fix/drop ruamel yaml clib fresh by @shvenkat-rh in #5163
chore(deps): update all dependencies pep621 by @renovate[bot] in #5172
fix: honor warn_list after --fix rewrites task names by @santosh7676 in #5085
feat: support 'example' section in file meta/argument_specs.yml by @berndfinger in #5164
fix: use ThreadPoolExecutor for syntax check workers by @rockygeekz in #5173
fix: mock_modules clobbering collections and args false positives by @djdanielsson in #5157
fix: raise cryptography floor and bump js-yaml for Guardian prod vulns by @rockygeekz in #5174
chore(deps): update all dependencies pep621 by @renovate[bot] in #5176
chore(deps): update all dependencies by @renovate[bot] in #5175
fix: preserve blank lines after flow collections by @shvenkat-rh in #5178
perf: cache get_deps_versions() result by @BlackDark in #5113
fix: inject plain-name mock roles path regardless of --offline by @shvenkat-rh in #5183
fix: resolve include_tasks paths from playbook dir by @shvenkat-rh in #5184
fix: add validate_argspec to play schema by @sameeralam3127 in #5187

New Contributors

@shvenkat-rh made their first contribution in #5149
@f1047 made their first contribution in #5103
@DSeaStar made their first contribution in #5153
@berndfinger made their first contribution in #5164
@BlackDark made their first contribution in #5113
@sameeralam3127 made their first contribution in #5187

Full Changelog: ansible/ansible-lint@v26.8.0...v26.9.0

renovatebot/pre-commit-hooks

[`v44.115.9`](ht

[!IMPORTANT]
✂ PR body was truncated to here.

renovate Bot force-pushed the renovate/development-dependencies branch 2 times, most recently from 2f77982 to 88201ec Compare September 15, 2026 18:09

renovate Bot force-pushed the renovate/development-dependencies branch 2 times, most recently from 96bd976 to 21ecfa9 Compare September 27, 2026 22:40

renovate Bot force-pushed the renovate/development-dependencies branch 2 times, most recently from 5bb4c02 to c311c8c Compare October 4, 2026 22:04

renovate Bot force-pushed the renovate/development-dependencies branch from c311c8c to 82ee075 Compare October 12, 2026 02:28

chore(tooling): update development dependencies

cec7ce6

renovate Bot force-pushed the renovate/development-dependencies branch from 82ee075 to cec7ce6 Compare October 19, 2026 01:55

Navigation Menu

Repository navigation

chore(tooling): update development dependencies - #114

chore(tooling): update development dependencies#114
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/development-dependencies

renovate Bot commented Sep 7, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changelog

Fixes

Documentation

Changelog

Features

Documentation

Changelog

Features

Bug Fixes 🐛🔗

Enhancements 🌱🔗

Bug Fixes 🐛🔗

Bug Fixes 🐛🔗

What's Changed

What's Changed

New Contributors

Features

Fixes

Performance

Maintenance

What's Changed

New Contributors

[v44.115.9](ht

renovate Bot commented Sep 7, 2026 •

edited

Loading

[`v44.115.9`](ht