chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
actions/checkout	action	major	v5 -> v6
astral-sh/ruff-pre-commit	repository	patch	v0.14.5 -> v0.14.6
astral-sh/uv-pre-commit	repository	patch	0.9.9 -> 0.9.11	0.9.12
coverage	dependency-groups	minor	7.11.3 -> 7.12.0
jsh9/pydoclint	repository	patch	0.8.1 -> 0.8.2
pre-commit	dependency-groups	minor	4.4.0 -> 4.5.0
pydoclint	dependency-groups	patch	0.8.1 -> 0.8.2
ruff (source, changelog)	dependency-groups	patch	0.14.5 -> 0.14.6
streetsidesoftware/cspell-cli	repository	patch	v9.3.1 -> v9.3.3
		lockFileMaintenance	All locks refreshed
uv (source, changelog)	dependency-groups	patch	0.9.9 -> 0.9.11	0.9.12

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

actions/checkout (actions/checkout)

v6

Compare Source

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

v0.14.6

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.6

astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

v0.9.11

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.11

v0.9.10

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.10

coveragepy/coveragepy (coverage)

v7.12.0

Compare Source

• The HTML report now shows separate coverage totals for statements and
  branches, as well as the usual combined coverage percentage. Thanks to Ryuta
  Otsuka for the discussion <issue 2081_>_ and the implementation <pull 2085_>_.

• The JSON report now includes separate coverage totals for statements and
  branches, thanks to Ryuta Otsuka <pull 2090_>_.

• Fix: except* clauses were not handled properly under the "sysmon"
  measurement core, causing KeyError exceptions as described in issue 2086_.
  This is now fixed.

• Fix: we now defend against aggressive mocking of open() that could cause
  errors inside coverage.py. An example of a failure is in issue 2083_.

• Fix: in unusual cases where a test suite intentionally exhausts the system's
  file descriptors to test handling errors in open(), coverage.py would
  fail when trying to open source files, as described in issue 2091_. This
  is now fixed.

• A small tweak to the HTML report: file paths now use thin spaces around
  slashes to make them easier to read.

.. _issue 2081: #​2081
.. _issue 2083: #​2083
.. _pull 2085: #​2085
.. _issue 2086: #​2086
.. _pull 2090: #​2090
.. _issue 2091: #​2091

.. _changes_7-11-3:

jsh9/pydoclint (jsh9/pydoclint)

v0.8.2

Compare Source

• Added
  • Ability to partially match violation codes in inline noqa in the native
    mode (which flake8 already supports)
• Fixed
  • A bug: when there are more than one __init__() in a class (overloaded),
    the first __init__() is incorrectly recognized as the "right" one. (The
    last __init__() should be considered the right one.)
• Full diff
  • jsh9/pydoclint@0.8.1...0.8.2

pre-commit/pre-commit (pre-commit)

v4.5.0

Compare Source

==================

Features

• Add pre-commit hazmat.
  • #​3585 PR by @​asottile.

astral-sh/ruff (ruff)

v0.14.6

Compare Source

Released on 2025-11-21.

Preview features

• [flake8-bandit] Support new PySNMP API paths (S508, S509) (#​21374)

Bug fixes

• Adjust own-line comment placement between branches (#​21185)
• Avoid syntax error when formatting attribute expressions with outer parentheses, parenthesized value, and trailing comment on value (#​20418)
• Fix panic when formatting comments in unary expressions (#​21501)
• Respect fmt: skip for compound statements on a single line (#​20633)
• [refurb] Fix FURB103 autofix (#​21454)
• [ruff] Fix false positive for complex conversion specifiers in logging-eager-conversion (RUF065) (#​21464)

Rule changes

• [ruff] Avoid false positive on ClassVar reassignment (RUF012) (#​21478)

CLI

• Render hyperlinks for lint errors (#​21514)
• Add a ruff analyze option to skip over imports in TYPE_CHECKING blocks (#​21472)

Documentation

• Limit eglot-format hook to eglot-managed Python buffers (#​21459)
• Mention force-exclude in "Configuration > Python file discovery" (#​21500)

Contributors

• @​ntBre
• @​dylwil3
• @​gauthsvenkat
• @​MichaReiser
• @​thamer
• @​Ruchir28
• @​thejcannon
• @​danparizher
• @​chirizxc

streetsidesoftware/cspell-cli (streetsidesoftware/cspell-cli)

v9.3.3

Compare Source

Trivial updates and changes.

• Work on NPM Publishing (#​730) (25b6eae)

v9.3.2

Compare Source

Trivial updates and changes.

• Update CSpell version (9.3.2) (#​726) (344ffb7)

astral-sh/uv (uv)

v0.9.11

Compare Source

Released on 2025-11-20.

Python

• Add CPython 3.15.0a2

See the python-build-standalone release notes for details.

Enhancements

• Add SBOM support to uv export (#​16523)
• Publish to crates.io (#​16770)

Preview features

• Add uv workspace list --paths (#​16776)
• Fix the preview warning on uv workspace dir (#​16775)

Bug fixes

• Fix uv init author serialization via toml_edit inline tables (#​16778)
• Fix status messages without TTY (#​16785)
• Preserve end-of-line comment whitespace when editing pyproject.toml (#​16734)
• Disable always-authenticate when running under Dependabot (#​16773)

Documentation

• Document the new behavior for free-threaded python versions (#​16781)
• Improve note about build system in publish guide (#​16788)
• Move do not upload publish note out of the guide into concepts (#​16789)

v0.9.10

Compare Source

Released on 2025-11-17.

Enhancements

• Add support for SSL_CERT_DIR (#​16473)
• Enforce UTF‑8-encoded license files during uv build (#​16699)
• Error when a project.license-files glob matches nothing (#​16697)
• pip install --target (and sync) install Python if necessary (#​16694)
• Account for python_downloads_json_url in pre-release Python version warnings (#​16737)
• Support HTTP/HTTPS URLs in uv python --python-downloads-json-url (#​16542)

Preview features

• Add support for --upgrade in uv python install (#​16676)
• Fix handling of python install --default for pre-release Python versions (#​16706)
• Add uv workspace list to list workspace members (#​16691)

Bug fixes

• Don't check file URLs for ambiguously parsed credentials (#​16759)

Documentation

• Add a "storage" reference document (#​15954)

---

Configuration

📅 Schedule: Branch creation - "before 4am on monday" in timezone UTC, Automerge - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone UTC.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.