Update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
DavidAnson/markdownlint-cli2	repository	minor	v0.13.0 -> v0.15.0
actions/attest-build-provenance	action	minor	v1.3.2 -> v1.4.4
actions/cache	action	minor	v4.0.2 -> v4.1.2
actions/checkout	action	minor	v4.1.7 -> v4.2.2
actions/download-artifact	action	patch	v4.1.7 -> v4.1.8
actions/setup-python	action	minor	v5.1.0 -> v5.3.0
actions/setup-python	action	minor	v5.1.1 -> v5.3.0
actions/upload-artifact	action	minor	v4.3.4 -> v4.4.3
build (changelog)		patch	==1.2.1 -> ==1.2.2.post1
charliermarsh/ruff-pre-commit	repository	minor	v0.5.2 -> v0.7.4
codecov/codecov-action	action	major	v4.5.0 -> v5.0.4
copier	project.dependencies	minor	==9.3.1 -> ==9.4.1
cyclopts	project.dependencies	major	==2.9.3 -> ==3.0.1
debugpy (source)		patch	==1.8.2 -> ==1.8.8
dulwich	project.dependencies	patch	==0.22.1 -> ==0.22.6
dvc		minor	==3.51.2 -> ==3.56.0
fawltydeps		minor	==0.16.0 -> ==0.17.0
flit_core	build-system.requires	minor	==3.9.0 -> ==3.10.1
httpx (changelog)		patch	==0.27.0 -> ==0.27.2
ipython	project.dependencies	minor	==8.26.0 -> ==8.29.0
iterative/dvc	repository	minor	3.51.2 -> 3.56.0
jakebailey/pyright-action	action	patch	v2.3.1 -> v2.3.2
microsoft/pylance-release		minor	2024.6.1 -> 2024.11.2
myst-nb	project.dependencies	patch	==1.1.1 -> ==1.1.2
myst-parser	project.dependencies	major	==3.0.1 -> ==4.0.0
numpydoc	project.dependencies	minor	==1.7.0 -> ==1.8.0
pipdeptree (changelog)		patch	==2.23.1 -> ==2.23.4
pipx (changelog)	project.dependencies	minor	==1.6.0 -> ==1.7.1
pre-commit		major	==3.7.1 -> ==4.0.1
pre-commit/pre-commit-hooks	repository	major	v4.6.0 -> v5.0.0
pypa/gh-action-pypi-publish	action	minor	v1.9.0 -> v1.12.2
pyright		patch	==1.1.371 -> ==1.1.389
pytest (changelog)	project.dependencies	minor	==8.2.2 -> ==8.3.3
pytest-cov (changelog)	project.dependencies	major	==5.0.0 -> ==6.0.0
ruff (source, changelog)		minor	==0.5.2 -> ==0.7.4
snakeviz (changelog)		patch	==2.2.0 -> ==2.2.2
sourcery		minor	==1.21.0 -> ==1.25.0
sphinx (changelog)	project.dependencies	major	==7.4.4 -> ==8.1.3
sphinx-autobuild (changelog)	project.dependencies	minor	==2024.4.16 -> ==2024.10.3
sphinx-design	project.dependencies	patch	==0.6.0 -> ==0.6.1
sphinxcontrib-bibtex	project.dependencies	patch	==2.6.2 -> ==2.6.3
sphinxcontrib-mermaid (changelog)	project.dependencies	major	==0.9.2 -> ==1.0.0
srstevenson/nb-clean	repository	major	3.3.0 -> 4.0.1
submodules/boilercore		digest	780ca13 -> 3d82e03
towncrier		major	==23.11.0 -> ==24.8.0
uv (source, changelog)		minor	==0.2.25 -> ==0.5.3

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

DavidAnson/markdownlint-cli2 (DavidAnson/markdownlint-cli2)

v0.15.0

Compare Source

v0.14.0

Compare Source

actions/attest-build-provenance (actions/attest-build-provenance)

v1.4.4

Compare Source

What's Changed

• Bump predicate action from 1.1.3 to 1.1.4 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/310
  • Bump @​actions/core from 1.10.1 to 1.11.1 by @​dependabot in https://github.com/actions/attest-build-provenance/pull/275
  • Bump @​actions/attest from 1.4.2 to 1.5.0 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/309
    • Fix SLSA provenance bug related to workflow_ref OIDC token claims containing the "@​" symbol in the tag https://github.com/actions/toolkit/pull/1863l/1863)

Full Changelog: actions/attest-build-provenance@v1.4.3...v1.4.4

v1.4.3

Compare Source

What's Changed

• Bump predicate from 1.1.2 to 1.1.3 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/226
  • Bump @​actions/attest from 1.3.1 to 1.4.1 by @​dependabot in https://github.com/actions/attest-build-provenance/pull/212
  • Bump @​actions/attest from 1.4.1 to 1.4.2 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/225
  • Fix bug w/ customized OIDC issuer URL for enterprise accounts (#​222)

Full Changelog: actions/attest-build-provenance@v1.4.2...v1.4.3

v1.4.2

Compare Source

What's Changed

• Bump actions/attest from 1.4.0 to 1.4.1 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/209
  • Includes bug fix for issue with authenticated proxies (https://github.com/actions/toolkit/issues/1798)

Full Changelog: actions/attest-build-provenance@v1.4.1...v1.4.2

v1.4.1

Compare Source

What's Changed

• Update predicate action to 1.1.2 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/197
  • Dynamic construction of oidc issuer by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/195

Full Changelog: actions/attest-build-provenance@v1.4.0...v1.4.1

v1.4.0

Compare Source

What's Changed

• Bump predicate action from 1.1.0 to 1.1.1 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/182
  • Fix for JWKS proxy bug
• Bump actions/attest from 1.3.3 to 1.4.0 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/183
  • Add show-summary input
  • Format summary output as list

Full Changelog: actions/attest-build-provenance@v1.3.3...v1.4.0

v1.3.3

Compare Source

What's Changed

• Bump actions/attest from 1.3.2 to 1.3.3 by @​bdehamer in https://github.com/actions/attest-build-provenance/pull/152
  • Bugfix for properly handling glob exclusion patterns in subject-path input

Full Changelog: actions/attest-build-provenance@v1.3.2...v1.3.3

actions/cache (actions/cache)

v4.1.2

Compare Source

What's Changed

• Add Bun example by @​idleberg in https://github.com/actions/cache/pull/1456
• Revise isGhes logic by @​jww3 in https://github.com/actions/cache/pull/1474
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in https://github.com/actions/cache/pull/1475
• Add dependabot.yml to enable automatic dependency upgrades by @​Link- in https://github.com/actions/cache/pull/1476
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/cache/pull/1478
• Bump actions/stale from 3 to 9 by @​dependabot in https://github.com/actions/cache/pull/1479
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/cache/pull/1483
• Bump actions/setup-node from 3 to 4 by @​dependabot in https://github.com/actions/cache/pull/1481
• Prepare 4.1.2 release by @​Link- in https://github.com/actions/cache/pull/1477

New Contributors

• @​idleberg made their first contribution in https://github.com/actions/cache/pull/1456
• @​jww3 made their first contribution in https://github.com/actions/cache/pull/1474
• @​Link- made their first contribution in https://github.com/actions/cache/pull/1476

Full Changelog: actions/cache@v4...v4.1.2

v4.1.1

Compare Source

What's Changed

• Restore original behavior of cache-hit output by @​joshmgross in https://github.com/actions/cache/pull/1467

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed

• Fix cache-hit output when cache missed by @​fchimpan in https://github.com/actions/cache/pull/1404
• Deprecate save-always input by @​joshmgross in https://github.com/actions/cache/pull/1452

New Contributors

• @​ottlinger made their first contribution in https://github.com/actions/cache/pull/1437
• @​Olegt0rr made their first contribution in https://github.com/actions/cache/pull/1377
• @​fchimpan made their first contribution in https://github.com/actions/cache/pull/1404
• @​x612skm made their first contribution in https://github.com/actions/cache/pull/1434
• @​todgru made their first contribution in https://github.com/actions/cache/pull/1311
• @​Jcambass made their first contribution in https://github.com/actions/cache/pull/1463
• @​mackey0225 made their first contribution in https://github.com/actions/cache/pull/1462
• @​quatquatt made their first contribution in https://github.com/actions/cache/pull/1445

Full Changelog: actions/cache@v4.0.2...v4.1.0

actions/checkout (actions/checkout)

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/download-artifact (actions/download-artifact)

v4.1.8

Compare Source

What's Changed

• Update @​actions/artifact version, bump dependencies by @​robherley in https://github.com/actions/download-artifact/pull/341

Full Changelog: actions/download-artifact@v4...v4.1.8

actions/setup-python (actions/setup-python)

v5.3.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-python/pull/941
• Upgrade IA publish by @​Jcambass in https://github.com/actions/setup-python/pull/943

Bug Fixes:

• Normalise Line Endings to Ensure Cross-Platform Consistency by @​priya-kinthali in https://github.com/actions/setup-python/pull/938
• Revise isGhes logic by @​jww3 in https://github.com/actions/setup-python/pull/963
• Bump pillow from 7.2 to 10.2.0 by @​aparnajyothi-y in https://github.com/actions/setup-python/pull/956

Enhancements:

• Enhance workflows and documentation updates by @​priya-kinthali in https://github.com/actions/setup-python/pull/965
• Bump default versions to latest by @​jeffwidman in https://github.com/actions/setup-python/pull/905

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/setup-python/pull/941
• @​jww3 made their first contribution in https://github.com/actions/setup-python/pull/963

Full Changelog: actions/setup-python@v5...v5.3.0

v5.2.0

Compare Source

v5.1.1

Compare Source

What's Changed

Bug fixes:

• fix(ci): update all failing workflows by @​mayeut in https://github.com/actions/setup-python/pull/863
  This update ensures compatibility and optimal performance of workflows on the latest macOS version.

Documentation changes:

• Documentation update for cache by @​gowridurgad in https://github.com/actions/setup-python/pull/873

Dependency updates:

• Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @​dependabot in https://github.com/actions/setup-python/pull/893

New Contributors

• @​gowridurgad made their first contribution in https://github.com/actions/setup-python/pull/873

Full Changelog: actions/setup-python@v5...v5.1.1

actions/upload-artifact (actions/upload-artifact)

v4.4.3

Compare Source

What's Changed

• Undo indirect dependency updates from #​627 by @​joshmgross in https://github.com/actions/upload-artifact/pull/632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

• Bump @actions/artifact to 2.1.11 by @​robherley in https://github.com/actions/upload-artifact/pull/627
  • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

• Add a section about hidden files by @​joshmgross in https://github.com/actions/upload-artifact/pull/607
• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/upload-artifact/pull/621
• Update @​actions/artifact to latest version, includes symlink and timeout fixes by @​robherley in https://github.com/actions/upload-artifact/pull/625

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/upload-artifact/pull/621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

v4.3.6

Compare Source

v4.3.5

Compare Source

pypa/build (build)

v1.2.2.post1

Compare Source

This release only makes metadata (Python 3.13 classifier), docs, and test suite changes.

What's Changed

• ci: add Python 3.13 by @​henryiii in https://github.com/pypa/build/pull/815
• docs: mention conda-forge name in README by @​henryiii in https://github.com/pypa/build/pull/816
• docs: add a missing ` in README by @​SigureMo in https://github.com/pypa/build/pull/817
• tests: fix under pyproject-hooks 1.2 by @​layday in https://github.com/pypa/build/pull/824
• ci: add PyPI attestations by @​henryiii in https://github.com/pypa/build/pull/821
• chore: 1.2.2.post1 by @​henryiii in https://github.com/pypa/build/pull/820

New Contributors

• @​SigureMo made their first contribution in https://github.com/pypa/build/pull/817

Full Changelog: pypa/build@1.2.2...1.2.2.post1

v1.2.2

Compare Source

==================

• Add editable to builder.get_requries_for_build's static types
  (PR :pr:764, fixes issue :issue:763)
• Include artifact attestations in our release
  (PR :pr:782)
• Fix typing compatibility with typed pyproject-hooks
  (PR :pr:788)
• Mark more tests with network
  (PR :pr:808)
• Add more intersphinx links to docs
  (PR :pr:804)
• Make uv optional for tests
  (PR :pr:807 and :pr:813)

charliermarsh/ruff-pre-commit (charliermarsh/ruff-pre-commit)

v0.7.4

Compare Source

---

Configuration

📅 Schedule: Branch creation - "on the 16th day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.