Commit e841b1a
authored
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?v=4&size=40){kind=avatar}
chore(deps): update all non-major dependencies (#1272)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) | Type |
Update |
|---|---|---|---|---|---|
|
[github.com/dlclark/regexp2/v2](https://redirect.github.com/dlclark/regexp2)
| `v2.0.3` → `v2.1.0` |
|
| require | minor |
| [uv](https://redirect.github.com/astral-sh/uv) | `0.11.14` → `0.11.16`
|
|
| | patch |
---
### Release Notes
<details>
<summary>dlclark/regexp2 (github.com/dlclark/regexp2/v2)</summary>
###
[`v2.1.0`](https://redirect.github.com/dlclark/regexp2/compare/v2.0.3...v2.1.0)
[Compare
Source](https://redirect.github.com/dlclark/regexp2/compare/v2.0.3...v2.1.0)
</details>
<details>
<summary>astral-sh/uv (uv)</summary>
###
[`v0.11.16`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01116)
[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.11.15...0.11.16)
Released on 2026-05-21.
##### Enhancements
- Add support for direct archive dependencies in Git
([#​10072](https://redirect.github.com/astral-sh/uv/pull/10072))
- Adjust hint rendering
([#​18090](https://redirect.github.com/astral-sh/uv/pull/18090))
##### Preview features
- uv audit: specialize malformed OSV error
([#​19515](https://redirect.github.com/astral-sh/uv/pull/19515))
- Reject locked malware installations
([#​18936](https://redirect.github.com/astral-sh/uv/pull/18936))
##### Configuration
- Allow disabling reading the system config with `UV_NO_SYSTEM_CONFIG`
([#​19476](https://redirect.github.com/astral-sh/uv/pull/19476))
##### Bug fixes
- Allow environment variables that take a list to be empty
([#​19503](https://redirect.github.com/astral-sh/uv/pull/19503))
- Ensure that incompatible wheel hints do not leak secrets
([#​19504](https://redirect.github.com/astral-sh/uv/pull/19504))
- Reject unsafe entry points in `uv-build`
([#​19495](https://redirect.github.com/astral-sh/uv/pull/19495))
- Restrict delimiters in entry point parsing
([#​19471](https://redirect.github.com/astral-sh/uv/pull/19471))
- uv-netrc: fix multi-word no-space comment lines causing parse errors
([#​19494](https://redirect.github.com/astral-sh/uv/pull/19494))
##### Documentation
- Document and test relative exclude-newer support for uv pip
([#​19475](https://redirect.github.com/astral-sh/uv/pull/19475))
###
[`v0.11.15`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01115)
[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.11.14...0.11.15)
Released on 2026-05-18.
##### Security
- Fix a TAR partial differential, see
[GHSA-3cv2-h65g-fgmm](https://redirect.github.com/astral-sh/tokio-tar/security/advisories/GHSA-3cv2-h65g-fgmm)
([#​19463](https://redirect.github.com/astral-sh/uv/pull/19463))
- Enforce that entry points cannot escape in the scripts directory, see
[GHSA-4gg8-gxpx-9rph](https://redirect.github.com/astral-sh/tokio-tar/security/advisories/GHSA-4gg8-gxpx-9rph)
([#​19464](https://redirect.github.com/astral-sh/uv/pull/19464))
##### Enhancements
- Add TOML v1.1 -> v1.0 backwards compatibility for source distributions
([#​18741](https://redirect.github.com/astral-sh/uv/pull/18741))
- Add support for Azure request signing
([#​19421](https://redirect.github.com/astral-sh/uv/pull/19421))
- Apply stricter validation to all wheel filename segments
([#​19364](https://redirect.github.com/astral-sh/uv/pull/19364))
- Reject empty strings as an invalid package name
([#​19435](https://redirect.github.com/astral-sh/uv/pull/19435))
- Use structured errors for signing authentication failures
([#​19422](https://redirect.github.com/astral-sh/uv/pull/19422))
##### Preview
- uv audit: Add JSON output
([#​19305](https://redirect.github.com/astral-sh/uv/pull/19305))
##### Configuration
- Respect `required-environments` in `uv pip compile`
([#​19378](https://redirect.github.com/astral-sh/uv/pull/19378))
##### Performance
- Avoid parsing JSON manifest when local Python is available
([#​19398](https://redirect.github.com/astral-sh/uv/pull/19398))
- Avoid walking nested directories in linker conflict registration
([#​19382](https://redirect.github.com/astral-sh/uv/pull/19382))
- Optimize async wheel ZIP writing
([#​19383](https://redirect.github.com/astral-sh/uv/pull/19383))
- Fix dead "already trimmed" fast-path in
`Version::only_release_trimmed`
([#​19425](https://redirect.github.com/astral-sh/uv/pull/19425))
##### Bug fixes
- Apply workspace-member `[tool.uv.sources]` credentials under `uv sync
--frozen`
([#​19423](https://redirect.github.com/astral-sh/uv/pull/19423))
- Skip empty directories in uv build outputs
([#​19437](https://redirect.github.com/astral-sh/uv/pull/19437))
- Fix Git submodule handling when using relative paths
([#​12156](https://redirect.github.com/astral-sh/uv/pull/12156))
- Fix line number reporting in netrc parsing
([#​19452](https://redirect.github.com/astral-sh/uv/pull/19452))
##### Documentation
- Move Bazel auth helper setup into integration guide
([#​19392](https://redirect.github.com/astral-sh/uv/pull/19392))
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/alecthomas/chroma).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent 3ed2db8 commit e841b1a
5 files changed
Lines changed: 5 additions & 3 deletions
File renamed without changes.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
| 8 | + | |
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
6 | 6 | | |
7 | 7 | | |
8 | 8 | | |
| 9 | + | |
| 10 | + | |
9 | 11 | | |
10 | 12 | | |
0 commit comments