test(deps): update dependency conan to v2.28.0 (main)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
conan (source)	2.27.1 → 2.28.0

---

Release Notes

conan-io/conan (conan)

v2.28.0: (28-Apr-2026)

Compare Source

• Feature: conan upload --allow-disabled to allow uploading to a disabled remote. (#​19916)
• Feature: Allow using patch-ng 1.19 to incorporate fixes (#​19913)
• Feature: Use a OR policy between core:policies and recipe required_conan_version. (#​19907). Docs: 📃
• Feature: conan config install-pkg --insecure new feature. Also supported for conanconfig.yml files (#​19900). Docs: 📃
• Feature: Introduce policies in core:policies conf to control Conan behaviour. (#​19892). Docs: 📃
• Feature: Colorize output of conan config list and conan config show (#​19889)
• Feature: Add ability to show transitive requires in conan graph info ... -f=html output (#​19884)
• Feature: Add ability to show node subgraph in conan graph info ... -f=html output (#​19884)
• Feature: Add ability to filter by file extensions in conan report diff ... -f=html output (#​19884)
• Feature: New compiler flags flags_map() Python plugin to be able to translate, remove or handle compiler flags coming from compatible binaries built with a different compiler trying to inject compiler flags for that compiler. (#​19879). Docs: 📃
• Feature: tools.build:install_strip now accepts a list of possible build systems (#​19874). Docs: 📃
• Feature: Add new "certified" variant to settings VxWorks and new "safe" variant to Neutrino (#​19861)
• Feature: Allow patterns for recipe names in --update flag (#​19856)
• Feature: Add --strict flag to conan remote auth. (#​19848). Docs: 📃
• Feature: Avoid detecting default package manager when overridden from profile (#​19847)
• Feature: Add new experimental contextual output for conan export command (#​19836)
• Feature: Added default package manager for CachyOS. (#​19788)
• Feature: Introduce new consistent=True requirement trait to be able to have diamond structures for visible=False requirements. (#​19286). Docs: 📃
• Fix: Test publishing Conan wheels to test PyPi. (#​19906)
• Fix: Ignore local package lockfiles in conan workspace install/build and use consistently a global lockfile if provided or found by default. (#​19896)
• Fix: Force --order-by in conan graph build-order. Old deprecated behaviour can be restored until Conan 2.32 with the deprecated_build_order_args policy (#​19892). Docs: 📃
• Fix: Remove support for empty version ranges. Old deprecated behaviour can be restored until Conan 2.32 with the deprecated_empty_version_range policy (#​19892). Docs: 📃
• Fix: Remove deprecated system_tools profile section (#​19877)
• Fix: Remove deprecated detect_compiler method in detect api (#​19877)
• Fix: Remove deprecated deploy folder in conan home (#​19877)
• Fix: Remove deprecated methods from PackagesList (#​19877)
• Fix: Remove deprecated cmake_set_interface_link_directories property (#​19877)
• Fix: Remove deprecated Node::dependencies method (#​19877)
• Fix: Warn when credentials environment variables are set but not used because the server accepted anonymous access and point users to add --force to force authentication. (#​19872)
• Fix: Documenting CommandAPI and better docs for ProfilesAPI (#​19871)
• Fix: Fix output of options with "error" in its name in conan list command. (#​19867)
• Fix: Forward underlying system package manager error messages (#​19858)
• Fix: Deprecate build_requires, use tool_requires instead (#​19849). Docs: 📃
• Fix: Inline transitive dependencies to avoid Xcode recursion crashes. (#​19844). Docs: 📃
• Fix: finalize() output folder should be printed only once (#​19834)
• Fix: Change default core.download:retry_wait from 0 to 1 second. Document retry conf defaults for conan config list (#​19830)
• Fix: Use user locale in conan list ... -f=html output. (#​19828)
• Fix: Avoid subtle errors with casing errors like requires("myPkg/[*]") using version ranges. (#​19799)
• Fix: Add support for Xcode 26.4 with Apple Clang 21. (#​19795)
• Fix: Add -ur/-ubr/-upr for conan lock upgrade as short forms for --update-requires, etc. (#​19791)
• Fix: Propagate build requirement run trait to upstream shared dependency. (#​19751)
• Fix: Make components from same package full link in CMakeConfigDeps. (#​19641)
• Bugfix: Solve crash of conan workspace install/build --lockfile=mylock --lockfile-partial (#​19896)
• Bugfix: conan install --lockfile=xxxx will raise if the lockfile contains config_requires and the current installed configuration packages do not align with it (#​19875). Docs: 📃
• Bugfix: Change propagation on bindirs for VirtualBuildEnv respecting requirement run trait, based on the new required_conan_version=">=2.28" recipe version or global.conf using core:policies=["required_conan_version>=2.28"] (#​19849). Docs: 📃
• Bugfix: Solve incorrect .ps1 file generation when unsetting the conf with -c tools.env.virtualenv:powershell=!. (#​19820)
• Bugfix: Fix transitive_libs=True when using CMakeConfigDeps for shared libraries. (#​19815)
• Bugfix: Change computation of package_id for transitive static libraries, based on the new required_conan_version=">=2.28" recipe version or global.conf using core:policies=["required_conan_version>=2.28"]. (#​19705). Docs: 📃

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.