chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #104 · marimo-team/quarto-marimo

renovate · 2026-08-28T14:36:36Z

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/setup-uv	action	minor	`v10.0.1` → `v10.3.3`
linkedom	imports	patch	`0.18.13` -> `0.18.14`
prefix-dev/setup-pixi	action	minor	`v0.10.1` → `v0.11.2`
typos (changelog)	tool.hatch.envs.default	minor	`~=1.49.0` → `~=1.51.1`

Release Notes

astral-sh/setup-uv

`v10.3.3`: 🌈 Use Astral mirror for version manifests with GitHub fallback

Compare Source

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable.
(Known checksums are still checked, so the security impact does not change)

Also a big thank you to @soujasK for a set of bugfixes 👏

🐛 Bug fixes

Use Astral mirror for version manifests with GitHub fallback @eifinger (#1119)
fix: allow whitespace in uv requirement specifiers @soujasK (#1112)
fix: resolve ~= specifiers with PEP 440 semantics @soujasK (#1111)
fix: only report a saved cache when saving succeeded @soujasK (#1110)

🧰 Maintenance

chore: update known checksums for 0.13.6 @github-actions[bot] (#1117)

📚 Documentation

docs: use JSDoc for compatible release specifier comment @eifinger (#1113)
docs: update version references to v10.3.2 @github-actions[bot] (#1104)

`v10.3.2`: 🌈 update known checksums for 0.13.5

Compare Source

Changes

🧰 Maintenance

chore: update known checksums for 0.13.5 @github-actions[bot] (#1103)

📚 Documentation

docs: update version references to v10.3.1 @github-actions[bot] (#1102)

`v10.3.1`: 🌈 preserve cache error class names in save-cache bundle

Compare Source

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

fix: preserve cache error class names in save-cache bundle @dannyward630 (#1093)

🧰 Maintenance

chore: update known checksums for 0.13.4 @github-actions[bot] (#1099)
chore: update known checksums for 0.13.2/0.13.3 @github-actions[bot] (#1098)
chore: update known checksums for 0.13.1 @github-actions[bot] (#1094)
Verify npm dependency signatures before builds @zaniebot (#1027)

📚 Documentation

docs: cache-dependency-glob matches relative to the working directory @flange-ipb (#1092)
docs: update version references to v10.3.0 @github-actions[bot] (#1090)

⬆️ Dependency updates

chore(deps): roll up Dependabot updates @eifinger (#1101)

`v10.3.0`: 🌈 Add Python architecture selection

Compare Source

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

Use macOS 15 runners for tests @charliermarsh (#1081)

🚀 Enhancements

Add python-arch support @zanieb (#1079)

🧰 Maintenance

chore: update known checksums for 0.13.0 @github-actions[bot] (#1089)
chore: update known checksums for 0.12.24 @github-actions[bot] (#1084)
chore: update known checksums for 0.12.23 @github-actions[bot] (#1082)
chore: update known checksums for 0.12.22 @github-actions[bot] (#1080)
chore: update known checksums for 0.12.21 @github-actions[bot] (#1078)
chore: update known checksums for 0.12.20 @github-actions[bot] (#1076)
chore: update known checksums for 0.12.19 @github-actions[bot] (#1068)
chore: update known checksums for 0.12.18 @github-actions[bot] (#1065)

⬆️ Dependency updates

chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 @dependabot[bot] (#1077)

`v10.2.0`: 🌈 Disable automatic cache saves for merge queues

Compare Source

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

Disable automatic cache saves for merge queues @eifinger (#1056)

🧰 Maintenance

chore: update known checksums for 0.12.17 @github-actions[bot] (#1058)
chore: update known checksums for 0.12.16 @github-actions[bot] (#1057)
chore: update known checksums for 0.12.15 @github-actions[bot] (#1054)
chore: update known checksums for 0.12.14 @github-actions[bot] (#1053)
chore: update known checksums for 0.12.13 @github-actions[bot] (#1045)

📚 Documentation

docs: update version references to v10.1.0 @github-actions[bot] (#1044)

⬆️ Dependency updates

chore(deps): roll up Dependabot updates @eifinger (#1059)

`v10.1.0`: 🌈 New output `python-runtime-id`and respect NO_PROXY

Compare Source

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output `python-runtime-id`

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 (comment) for details on why this can be useful.

🐛 Bug fixes

fix: respect no proxy directive @mj0nez (#1037)
Use JSON + a typed wrapper instead of TS codegen @woodruffw (#1025)

🚀 Enhancements

Expose a Python "identity" output @woodruffw (#1036)
Verify downloads with astral-sh/versions checksums @zaniebot (#1033)

🧰 Maintenance

chore: update known checksums for 0.12.12 @github-actions[bot] (#1041)
chore: update known checksums for 0.12.10/0.12.11 @github-actions[bot] (#1038)
chore: update known checksums for 0.12.9 @github-actions[bot] (#1035)
chore: update known checksums for 0.12.7/0.12.8 @github-actions[bot] (#1031)
chore: update known checksums for 0.12.6 @github-actions[bot] (#1030)
chore: update known checksums for 0.12.5 @github-actions[bot] (#1020)
Use self-repo syntax for all in-repo actions/reusable workflows @woodruffw (#1024)
Pin one-shot tools @woodruffw (#1022)
ci: remove obsolete direct push attempts @eifinger (#1019)

📚 Documentation

docs: update version references to v10.0.1 @github-actions[bot] (#1018)

⬆️ Dependency updates

chore(deps-dev): roll up Dependabot updates @eifinger (#1043)
Harden npm install defaults @zaniebot (#1026)
Add dependency cooldowns @woodruffw (#1021)

WebReflection/linkedom (linkedom)

`v0.18.14`

Compare Source

prefix-dev/setup-pixi

`v0.11.2`

Compare Source

What's Changed

🤷🏻 Other changes

docs: Adjust workload-identity-audience section by @pavelzw in #293
fix: Don't delete preinstalled pixi bin in cleanup by @pavelzw in #297
fix(deps): bump undici, brace-expansion and handlebars by @wolfv in #295

Full Changelog: prefix-dev/setup-pixi@v0.11.1...v0.11.2

`v0.11.1`

Compare Source

What's Changed

🤷🏻 Other changes

feat: Add auth-workload-identity inputs for OIDC login by @pavelzw in #292

Full Changelog: prefix-dev/setup-pixi@v0.11.0...v0.11.1

`v0.11.0`

Compare Source

What's Changed

✨ New features

feat!: Add auth-logout input and run pixi auth status after login by @pavelzw in #291

⬆️ Dependency updates

chore(deps): bump the gh-actions group across 1 directory with 2 updates by @dependabot[bot] in #287
chore(deps): bump the nodejs group across 1 directory with 7 updates by @dependabot[bot] in #288

🤷🏻 Other changes

chore: simplify example recipe by @pavelzw in #285
chore: bump typescript to v7 and migrate to oxlint and oxfmt by @pavelzw in #289

Full Changelog: prefix-dev/setup-pixi@v0.10.2...v0.11.0

`v0.10.2`

Compare Source

What's Changed

✨ New features

feat: Add support for linux-riscv64 by @pavelzw in #282

Full Changelog: prefix-dev/setup-pixi@v0.10.1...v0.10.2

crate-ci/typos (typos)

`v1.51.1`

Compare Source

Features

Add ARM Windows builds

`v1.51.0`

Compare Source

Fixes

Don't correct bimap

Features

Updated the dictionary with the September 2026 changes

`v1.50.3`

Compare Source

Fixes

Don'y panicwhen case-converting non-ASCII corrections

`v1.50.2`

Compare Source

Fixes

Don't panic when files being examined are removed

`v1.50.1`

Compare Source

Fixes

Don't correct asend in Python code

`v1.50.0`

Compare Source

Features

Updated the dictionary with the August 2026 changes

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/all-minor-patch branch from 9cca461 to deea883 Compare August 28, 2026 19:48

renovate Bot changed the title ~~chore(deps): update prefix-dev/setup-pixi action to v0.10.2~~ chore(deps): update all non-major dependencies Aug 28, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from deea883 to 848cfcc Compare September 1, 2026 19:03

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 95b21f4 to 341532d Compare September 15, 2026 15:52

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from dc9c4e4 to 3ee5fdb Compare September 25, 2026 18:59

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from b26deca to dda8e90 Compare October 10, 2026 00:58

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from bb02f4a to fe77e03 Compare October 14, 2026 20:58

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 54424ef to d2a503b Compare October 24, 2026 09:09

chore(deps): update all non-major dependencies

6a18e26

renovate Bot force-pushed the renovate/all-minor-patch branch from d2a503b to 6a18e26 Compare October 28, 2026 17:06

Navigation Menu

Repository navigation

chore(deps): update all non-major dependencies - #104

chore(deps): update all non-major dependencies#104
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Aug 28, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Aug 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.3.3: 🌈 Use Astral mirror for version manifests with GitHub fallback

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.3.2: 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

📚 Documentation

v10.3.1: 🌈 preserve cache error class names in save-cache bundle

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.3.0: 🌈 Add Python architecture selection

Changes

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v10.2.0: 🌈 Disable automatic cache saves for merge queues

Changes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.1.0: 🌈 New output python-runtime-idand respect NO_PROXY

Changes

NO_PROXY

New output python-runtime-id

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

What's Changed

🤷🏻 Other changes

What's Changed

🤷🏻 Other changes

What's Changed

✨ New features

⬆️ Dependency updates

🤷🏻 Other changes

What's Changed

✨ New features

Features

Fixes

Features

Fixes

Fixes

Fixes

Features

Configuration

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 28, 2026 •

edited

Loading

`v10.3.3`: 🌈 Use Astral mirror for version manifests with GitHub fallback

`v10.3.2`: 🌈 update known checksums for 0.13.5

`v10.3.1`: 🌈 preserve cache error class names in save-cache bundle

`v10.3.0`: 🌈 Add Python architecture selection

`v10.2.0`: 🌈 Disable automatic cache saves for merge queues

`v10.1.0`: 🌈 New output `python-runtime-id`and respect NO_PROXY

New output `python-runtime-id`