fix(deps): update osv-lib by renovate[bot] · Pull Request #79 · another-rex/osv.dev

renovate · 2025-08-05T15:55:24Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
attrs (changelog)	`25.1.0` → `25.4.0`
google-cloud-logging (source)	`3.11.4` → `3.16.0`
google-cloud-ndb (source)	`2.3.2` → `2.5.0`
google-cloud-storage (source)	`3.1.0` → `3.12.0`
grpcio	`1.71.0` → `1.81.1`
grpcio-tools	`1.71.0` → `1.81.1`
jsonschema (changelog)	`4.23.0` → `4.26.0`
mypy-protobuf	`3.6.0` → `3.7.0`
packageurl-python	`==0.16.0` → `==0.17.6`
pygit2 (changelog)	`1.17.0` → `1.19.3`
pylint (changelog)	`3.3.5` → `3.3.9`
pyyaml (source)	`6.0.2` → `6.0.3`

Release Notes

python-attrs/attrs (attrs)

`v25.4.0`

Compare Source

Backwards-incompatible Changes

Class-level kw_only=True behavior is now consistent with dataclasses.

Previously, a class that sets kw_only=True makes all attributes keyword-only, including those from base classes.
If an attribute sets kw_only=False, that setting is ignored, and it is still made keyword-only.

Now, only the attributes defined in that class that doesn't explicitly set kw_only=False are made keyword-only.

This shouldn't be a problem for most users, unless you have a pattern like this:
```
@&#8203;attrs.define(kw_only=True)
class Base:
    a: int
    b: int = attrs.field(default=1, kw_only=False)

@&#8203;attrs.define
class Subclass(Base):
    c: int
```
Here, we have a kw_only=True attrs class (Base) with an attribute that sets kw_only=False and has a default (Base.b), and then create a subclass (Subclass) with required arguments (Subclass.c).
Previously this would work, since it would make Base.b keyword-only, but now this fails since Base.b is positional, and we have a required positional argument (Subclass.c) following another argument with defaults.
#1457

Changes

Values passed to the __init__() method of attrs classes are now correctly passed to __attrs_pre_init__() instead of their default values (in cases where kw_only was not specified).
#1427
Added support for Python 3.14 and PEP 749.
#1446,
#1451
attrs.validators.deep_mapping() now allows to leave out either key_validator xor value_validator.
#1448
attrs.validators.deep_iterator() and attrs.validators.deep_mapping() now accept lists and tuples for all validators and wrap them into a attrs.validators.and_().
#1449
Added a new experimental way to inspect classes:

attrs.inspect(cls) returns the effective class-wide parameters that were used by attrs to construct the class.

The returned class is the same data structure that attrs uses internally to decide how to construct the final class.
#1454
Fixed annotations for attrs.field(converter=...).
Previously, a tuple of converters was only accepted if it had exactly one element.
#1461
The performance of attrs.asdict() has been improved by 45–260%.
#1463
The performance of attrs.astuple() has been improved by 49–270%.
#1469
The type annotation for attrs.validators.or_() now allows for different types of validators.

This was only an issue on Pyright.
#1474

`v25.3.0`

Compare Source

Changes

Restore support for generator-based field_transformers.
#1417

`v25.2.0`

Compare Source

Changes

Checking mandatory vs non-mandatory attribute order is now performed after the field transformer, since the field transformer may change attributes and/or their order.
#1147
attrs.make_class() now allows for Unicode class names.
#1406
Speed up class creation by 30%-50% by compiling methods only once and using a variety of other techniques.
#1407
The error message if an attribute has both an annotation and a type argument will now disclose what attribute seems to be the problem.
#1410

googleapis/google-cloud-python (google-cloud-logging)

`v3.16.0`: google-cloud-logging: v3.16.0

Compare Source

Features

drop support for Python 3.7, 3.8, and 3.9 runtimes (#17276) (014e951b)

`v3.15.0`

Compare Source

`v3.14.0`: google-cloud-logging: v3.14.0

Compare Source

Features

support mTLS certificates when available (#1071) (c73e4390)

`v3.13.0`: google-cloud-kms: v3.13.0

v3.13.0 (2026-05-06)

`v3.12.1`: google-cloud-vision 3.12.1

Bug Fixes

fix mypy errors (#15494) (1f4c2862)

`v3.12.0`: google-cloud-vision 3.12.0

3.12.0 (2026-01-09)

grpc/grpc (grpcio)

`v1.81.1`

Compare Source

This is release 1.81.0 (graphic) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

[EventEngine] Fix a potential use-after-free error on Windows. (#42078)
[ssl] Server side handshaker factory stores a map of key signers. (#42002)
[Core] Fix completion queue shutdown race on weak memory models (ARM). (#41510)
[EventEngine] Fix a Windows race that causes an assertion error. (#41563)
[grpc_error] enable error_flatten experiment in OSS. (#41471)
[Python] Trim Python2 backward compatiblity syntax - removed (object) inheritance. (#41708)

Objective-C

[ObjC] Add receiveNextMessage to GRPCUnaryProtoCall. (#42260)

Python

[Python] Add typing_extensions dep to aio Bazel target. (#42001)
[Python] [Pyright] Part 1 - Pyright for src/python/grpcio/grpc/aio/_base_server.py. (#42240)
[Python] Drop 3.9. (#42145)
[Python] grpc-status: Relax protobuf dependency upper bound to allow 7.x. (#41948)
[Python] [Typeguard] Part 5 - Add Typeguard SYNC Stack in tests. (#40278)
[Python] Remove GIL from ReceiveMessageOperation.un_c method. (#41812)
[Python] Support observability in AsyncIO stack. (#41573)

Ruby

[Ruby] Drop support for EOL Ruby 3.1 and clean up. (#41435)
[Ruby] Composed CallCredentials keep a reference to their source. (#41782)

`v1.81.0`

Compare Source

This is release 1.81.0 (graphic) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

[EventEngine] Fix a potential use-after-free error on Windows. (#42078)
[ssl] Server side handshaker factory stores a map of key signers. (#42002)
[Core] Fix completion queue shutdown race on weak memory models (ARM). (#41510)
[EventEngine] Fix a Windows race that causes an assertion error. (#41563)
[grpc_error] enable error_flatten experiment in OSS. (#41471)
[Python] Trim Python2 backward compatiblity syntax - removed (object) inheritance. (#41708)

Objective-C

[ObjC] Add receiveNextMessage to GRPCUnaryProtoCall. (#42260)

Python

[Python] Add typing_extensions dep to aio Bazel target. (#42001)
[Python] [Pyright] Part 1 - Pyright for src/python/grpcio/grpc/aio/_base_server.py. (#42240)
[Python] Drop 3.9. (#42145)
[Python] grpc-status: Relax protobuf dependency upper bound to allow 7.x. (#41948)
[Python] [Typeguard] Part 5 - Add Typeguard SYNC Stack in tests. (#40278)
[Python] Remove GIL from ReceiveMessageOperation.un_c method. (#41812)
[Python] Support observability in AsyncIO stack. (#41573)

Ruby

[Ruby] Drop support for EOL Ruby 3.1 and clean up. (#41435)
[Ruby] Composed CallCredentials keep a reference to their source. (#41782)

`v1.80.0`

Compare Source

This is release 1.80.0 (glimmering) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

[ssl] Implement TLS private key signer in Python. (#41701)
[TLS Credentials]: Private Key Offload Implementation. (#41606)
Fix max sockaddr struct size on OpenBSD. (#40454)
[core] Enable EventEngine for Python by default, and EventEngine fork support in Python and Ruby. (#41432)
[TLS Credentials]: Create InMemoryCertificateProvider to update certificates independently. (#41484)
[Ruby] Build/test ruby 4.0 and build native gems with Ruby 4.0 support. (#41324)
[EventEngine] Remove an incorrect std::move in DNSServiceResolver constructor. (#41502)
[RR and WRR] enable change to connect from a random index. (#41472)
[xds] Implement gRFC A101. (#41051)

C++

[C++] Add SNI override option to C++ channel credentials options API. (#41460)

C#

[C# tools] Option to append Async to server side method names #39010. (#39797)

Objective-C

[Fix][Compiler] Plugins fall back to the edition 2023 for older protobuf. (#41357)

PHP

[PHP] Disable php infinite recursion check for callback from Core to PHP. (#41835)
[PHP] Fix runtime error with PHp8.5 alpha because zend_exception_get_defaul…. (#40337)

Python

[Python] Fix GRPC_TRACE not working when absl log initialized in cython. (#41814)
Revert "[Python] Align GRPC_ENABLE_FORK_SUPPORT env defaults in core and python (#41455)". (#41769)
[Python] Fix AsyncIO Server maximum_concurrent_rpcs enforcement preventing negative active_rpcs count. (#41532)
[Python] Docs: correct grpc.Compression references. (#41705)
[Python] [Typeguard] Part 4 - Add Typeguard to AIO stack in tests . (#40226)
[Python] Fix multi-thread exception for Asyncio gRPC clients - Fixes #25364. (#41483)
[Python] Resolve absl::InitializeLog warning. (#39779)
[Python] Remove IF usage in Cython. (#41400)
[Python] Add language features to exported proto files. (#41501)
[Python] Fix crash when iterating on AIO Metadata keys(), values(), items() or list(metadata.values()) etc. . (#41481)
[Python] Modernize and revamp Public API Docs. (#41287)

Ruby

[Ruby] Added support to push native-debug packages off rubygems to public gcs bucket. (#41270)

`v1.78.1`

Compare Source

This is release 1.78.1 (gutsy) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

Added 2026-03-12:
CAUTION! This gRPC Python release 1.78.1 was yanked from PyPI on 2026-02-26 due to issue #41725.

[REVERTED] Remove unintentional log WARNING: All log messages before absl::InitializeLog() is called are written to STDERR. (#41639)
[REVERTED] Fix inconsistent GRPC_ENABLE_FORK_SUPPORT runtime defaults between gRPC Core and Python. (#41588).
- This fixed #37710, a request processing hang in certain multithreaded environments: Other threads are currently calling into gRPC, skipping fork() handlers.
Modernize the API Docs site: https://grpc.github.io/grpc/python. (#41494)

Ruby

Build/test ruby 4.0 and build native gems with Ruby 4.0 support. (#41554)

`v1.78.0`

Compare Source

This is release 1.78.0 (gutsy) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

C++

adding address_sorting dep in naming test build. (#41045)

Objective-C

[Backport][v1.78.x][Fix][Compiler] Plugins fall back to the edition 2023 for older protobuf. (#41358)

Python

[python] aio: fix race condition causing asyncio.run() to hang forever during the shutdown process. (#40989)
[Python] Migrate to pyproject.toml build system from setup.py builds. (#40833)
[Python] Log error details when ExecuteBatchError occurs (at DEBUG level). (#40921)
[Python] Update setuptools min version to 77.0.1 . (#40931)

Ruby

[ruby] Fix version comparison for the ruby_abi_version symbol for ruby 4 compatibility. (#41061)

`v1.76.0`

Compare Source

This is release 1.76.0 (genuine) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

Prioritize system CA over bundled CA. (#40583)
[event_engine] Introduce a event_engine_poller_for_python experiment. (#40243)
[metrics] add grpc.lb.backend_service label. (#40486)

C#

[csharp tools] #39374 Grpc.Tools can't process file Suffix name with Upper character. (#40072)

Python

[Python] gRPC AsyncIO: Improve CompletionQueue polling performance. (#39993)

`v1.75.1`

Compare Source

This is release gRPC Core 1.75.1 (gemini).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

Release grpcio wheels with Python 3.14 support (#40403)
Asyncio: fixes grpc shutdown race condition occurring during python interpreter finalizations. (#40447)
- This also addresses previously reported issues with empty error message on Python interpreter exit (Error in sys.excepthook:/Original exception was: empty): #36655, #38679, #33342
Python 3.14: preserve current behavior when using grpc.aio async methods outside of a running event loop. (#40750)
- Note: using async methods outside of a running event loop is discouraged by Python, and will be deprecated in future gRPC releases. Please use the asyncio.run() function (or asyncio.Runner for custom loop factories). For interactive mode, use dedicated asyncio REPL: python -m asyncio.

Full Changelog: grpc/grpc@v1.75.0...v1.75.1

`v1.75.0`

Compare Source

This is release 1.75.0 (gemini) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

[Security] Cherry Pick Spiffe Verification. (#40515)
[Python][Typeguard] Part 3 - Add Typeguard to AIO stack in tests. (#40217)
[c-ares] update version to 1.34.5. (#39508)
[pick_first] fix bug that caused us to stop attempting to connect. (#40162)

C++

[OTel C++] Implement retry metrics. (#39195)

Objective-C

Fix data race by adding custom getter for state property with @synchronized locking. (#40146)

Python

gRPC Python (grpcio) now depends on typing-extensions~=4.13. (#40137)
Update musllinux wheels from musllinux_1_1 to musllinux_1_2. (#40317)
- Dropping musllinux_1_1 because it reached EOL in November 2024
- Reference on musllinux platform tags: PEP 656
grpc.aio typehint fixes. (#40215, #40217)
- Metadata type validation: Fixed metadata handling to support all sequence types (not just tuples), preventing runtime errors. Enhanced metadata type validation: isinstance(metadata, Sequence) instead of isinstance(metadata, tuple)
- Serializer parameters: Changed to Optional[SerializingFunction] for more accurate type representation
- Fixing the error in public API: ClientCallDetails.method was declared as str but always called with bytes, see InterceptedUnaryUnaryCall.
Fixes issue #40325 with grpcio failing to install on all non-Mac Apple devices internal builds. (#40347)

Ruby

Ruby: Mark credential object in channel. (#40394)
[Ruby] Add rubygems support for linux-gnu and linux-musl platforms. (#39549)

`v1.74.0`

Compare Source

This is release 1.74.0 (gee) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

[OTel C++, Posix EE] Plumb TCP write timestamps and metrics to OTel tracers. (#39946)
[event_engine] Implement fork support in Posix Event Engine. (#38980)
[http2] Fix GRPC_ARG_HTTP2_STREAM_LOOKAHEAD_BYTES for when BDP is disabled. (#39585)

Objective-C

[dep] Upgrade Protobuf Version 31.1. (#39916)

PHP

[PHP] Fully qualify stdClass with global namespace. (#39996)
[php] Fix PHPDoc so that UnaryCall defines the proper return type. (#37563)
fix typing of nullable parameters. (#39199)

Python

[EventEngine] Fix the issue with gRPC Python Client not reconnecting in certain situations: #38290, #39113, #39631. (#39894)
Fix gRPC Python docs website layout - use spaces optimally. (#40073)

Ruby

[Ruby] Add rubygems support for linux-gnu and linux-musl platforms . (#40174)
[ruby] enable EE fork support. (#39786)
[ruby] Return nil for c functions expected to return a VALUE. (#39214)
[ruby] remove connectivity state watch thread, fix cancellations from spurious signals. (#39409)
[ruby] Drop Ruby 3.0 support. (#39607)

`v1.73.1`

Compare Source

This is release 1.73.1 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

[Backport of #39894 to v1.73.x] Fix the issue with gRPC Python Client not reconnecting in certain situations: #38290, #39113, #39631 (#39950).

`v1.73.0`

Compare Source

This is release 1.73.0 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

As of this version, gRPC on MacOS & iOS will utilize Abseil's synchronization features, aligning it with other platforms. Should you encounter any issues due to this update, you can disable it by enabling GPR_DISABLE_ABSEIL_SYNC. If you do this, please report any problems by filing a bug at https://github.com/grpc/grpc.

[Dep] Update Protobuf to v31.0. (#39392)
[Core] Added GPR_DISABLE_ABSEIL_SYNC. (#39562)
[xds_override_host] pass through per-endpoint args when creating subchannels. (#39532)
Expose GRPC_OPENSSL_CLEANUP_TIMEOUT to control shutdown grace period. (#39297)
[URI] fix parsing of user_info in proxy settings. (#39004)
[EventEngine] Fix busy loop in thread pool when shutting down. (#39258)
[Dep] Added a flag to build with openssl instead of boringssl. (#39188)
[EventEngine] Cleanup: EventEngine client, listener, and dns experiments are on by default on all platforms. (#39079)

C++

[OpenCensus] Mark OpenCensus and dependent APIs as deprecated. (#39554)

Python

[Python] Pin Cython to 3.1.1. (#39609)
[Python] grpc_tools: make PythonGrpcGenerator handle dot . in proto paths the same way as native Generator/PyiGenerator. (#39586)

Ruby

[Ruby] add remove_unused_artifacts to opt build. (#39593)

`v1.72.2`

Compare Source

This is release 1.72.2 (gusto) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

[Backport of #39894 to v1.72.x] Fix the issue with gRPC Python Client not reconnecting in certain situations: #38290, #39113, #39631. (#39949)

`v1.72.1`

Compare Source

This is release gRPC Core 1.72.1 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

C++

[Backport of #39266 to v1.71.x] Protect grpc generated sources from unwanted system macros (#39484).

Python

[Backport of #39609 to v1.71.x] Pin Cython to 3.1.1 (#39632). This addresses several issues:
- #39588 Using inconsistent Cython version in released platform-specific wheels within the same grpcio release.
- cython/cython#6878 Several published grpcio wheels were built with Cython 3.1.0 and are affected by Cython memory leak issue when using AsyncIO APIs (grpc.aio.*).
[Backport of #39418 to v1.71.x] Fix Python 3.12 MacOS universal release artifact (#39504).

`v1.72.0`

Compare Source

This is release gRPC Core 1.72.0 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

`v1.71.2`

Compare Source

This is release 1.71.2 (gears) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

C++

[Backport of #39266 to v1.71.x] Protect grpc generated sources from unwanted system macros (#39484).

Python

[Backport of #39894 to v1.71.x] Fix the issue with gRPC Python Client not reconnecting in certain situations: #38290, #39113, #39631 (#39948).
[Backport of #39609 to v1.71.x] Pin Cython to 3.1.1 (#39636). This addresses several issues:
- #39588 Using inconsistent Cython version in released platform-specific wheels within the same grpcio release.
- cython/cython#6878 Several published grpcio wheels were built with Cython 3.1.0 and are affected by Cython memory leak issue when using AsyncIO APIs (grpc.aio.*).

python-jsonschema/jsonschema (jsonschema)

`v4.26.0`

Compare Source

=======

Decrease import time by delaying importing of urllib.request (#1416).

`v4.25.1`

Compare Source

=======

Fix an incorrect required argument in the Validator protocol's type annotations (#1396).

`v4.25.0`

Compare Source

=======

Add support for the iri and iri-reference formats to the format-nongpl extra via the MIT-licensed rfc3987-syntax.
They were alread supported by the format extra. (#1388).

`v4.24.1`

Compare Source

=======

Properly escape segments in ValidationError.json_path (#139).

`v4.24.0`

Compare Source

=======

Fix improper handling of unevaluatedProperties in the presence of additionalProperties (#1351).
Support for Python 3.8 has been dropped, as it is end-of-life.

nipunn1313/mypy-protobuf (mypy-protobuf)

`v3.7.0`

Compare Source

Mark top-level mangled identifiers as TypeAlias.
Change the top-level mangling prefix from global___ to Global___ to respect
Y042 naming convention.
Support client stub async typing overloads
Support PEP702 deprecations
- Message deprecations are supported
- Field deprecations are not. This may be possible with init overloads
- Service deprecations are supported for Sync stubs
  - Not for async stubs
- Enum message deprecation is supported
  - Enum field deprecation is not
Drop Python 3.8 testing. Newer protobuf versions are incompatible. Generated code may still work

package-url/packageurl-python (packageurl-python)

`v0.17.6`

Compare Source

Enhance url2purl to support commit hashes parsing (GitHub, GitLab, and Bitbucket)
#211
Adjust validation function
#206
Add validation function
#205

`v0.17.5`

Compare Source

Remove support for getting download URL for qpkg in purl2url.
#203
Add tests for latest purl-spec
#202

`v0.17.4`

Compare Source

Add support for getting download URL for debian, apk, qpkg in purl2url.
#201

`v0.17.3`

Compare Source

Add support for getting download URL for Luarocks, Conda, Alpm in purl2url.
#199
Fix Incorrect download url from build_golang_download_url()
#198

`v0.17.2`

Compare Source

Add support for getting download URL for Golang, Hex, Pub and Swift in purl2url.
#195

`v0.17.1`

Compare Source

Define "pkg" as a PackageURL SCHEME class attribute.
#184
Add support for Maven in purl2url.
#177

`v0.17.0`

Compare Source

Fix qualifiers type annotations.
#169
Fix parsing of names and namespaces with colons.
#152

libgit2/pygit2 (pygit2)

`v1.19.3`

Compare Source

Memory fixes
#1368
#1417
#1443
Fix Repository.ident
#1461
Build/CI fixes and updates
#1454
#1459
Documentation and annotation fixes
#410
#1289
#1323
#1333
#1458
#1460
Add AGENTS.md file generated by Kimi-k2.6

`v1.19.2`

Compare Source

Fix refcount and error handling issues in filter_register(...)
Fix config with valueless keys
#1457
New Repository.load_filter_list(...) and FilterList
#1444
New Odb.read_header(...) and now Odb.read(...) returns enums.ObjectType instead of int
#1450
Build and CI fixes
#1446
#1448
#1455

`v1.19.1`

Compare Source

Update wheels to libgit2 1.9.2 and OpenSSL 3.5
Fix: now diff's getitem/iter returns None for unchanged or binary files
#1412
CI (macOS): arm, intel and pypy wheels (instead of universal)
#1441
CI (pypy): fix tests
#1437

`v1.19.0`

Compare Source

Add support for Python 3.14 and drop 3.10
Support threaded builds (experimental)
#1430
#1435
Add Linux musl wheels for AArch64
Add Windows wheels for AArch64;
CI: build Windows wheels with cibuildwheel on GitHub
#1423
New Repository.transaction() context manager, returns new ReferenceTransaction
#1420
CI: add GitHub releases and other improvements
#1433
#1432
#1425
#1431
Documentation improvements and other changes
#1426
#1424

Breaking changes:

Remove deprecated IndexEntry.hex, use str(entry.id) instead of entry.hex

Deprecations:

Deprecate IndexEntry.oid, use entry.id instead of entry.oid

`v1.18.2`

Compare Source

Add support for almost all global options
#1409
Now it's possible to set Submodule.url = url
#1395
New RemoteCallbacks.push_negotiation(...)
#1396
New optional boolean argument connect in Remote.ls_remotes(...)
#1396
New Remote.list_heads(...) returns a list of RemoteHead objects
#1397
#1410
Documentation fixes
#1388
Typing improvements
#1387
#1389
#1390
#1391
#1392
#1393
#1394
#1398
#1399
#1400
#1402
#1403
#1406
#1407
#1408

Deprecations:

Remote.ls_remotes(...) is deprecated, use Remote.list_heads(...):

Before

  for head in remote.ls_remotes():
      head['name']
      head['oid']
      head['loid']  # None when local is False
      head['local']
      head['symref_target']

Now

  for head in remote.list_heads():
      head.name
      head.oid
      head.loid  # The zero oid when local is False
      head.local
      head.symref_target

`v1.18.1`

Compare Source

Update wheels to libgit2 1.9.1 and OpenSSL 3.3
New Index.remove_directory(...)
#1377
New Index.add_conflict(...)
#1382
Now Repository.merge_file_from_index(...) returns a MergeFileResult object when
called with use_deprecated=False
#1376
Typing improvements
#1369
#1370
#1371
#1373
#1384
#1386

Deprecations:

Update your code:

Before

  contents = Repository.merge_file_from_index(...)

Now

  result = Repository.merge_file_from_index(..., use_deprecated=False)
  contents = result.contents

At some point in the future use_deprecated=False will be the default.

`v1.18.0`

Compare Source

Upgrade Linux Glibc wheels to manylinux_2_28
Add `RemoteCallbacks.push_transfer_progres

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Australia/Sydney)

Branch creation
- "before 6am on wednesday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the dependencies label Aug 5, 2025

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from 1700040 to a40d996 Compare August 10, 2025 04:01

renovate Bot force-pushed the renovate/osv-lib branch from a40d996 to d6a218e Compare August 14, 2025 12:25

renovate Bot force-pushed the renovate/osv-lib branch from d6a218e to 8688a6a Compare August 22, 2025 02:16

renovate Bot changed the title ~~fix(deps): lock file maintenance osv-lib~~ chore(deps): lock file maintenance osv-lib Aug 22, 2025

renovate Bot force-pushed the renovate/osv-lib branch from 8688a6a to efc9caa Compare September 1, 2025 06:42

renovate Bot force-pushed the renovate/osv-lib branch from efc9caa to 71ed269 Compare September 17, 2025 00:11

renovate Bot force-pushed the renovate/osv-lib branch from 71ed269 to 0cb72ae Compare September 27, 2025 00:00

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from 940e83b to b1c0082 Compare October 8, 2025 20:07

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from 8f77489 to 4c6b860 Compare October 25, 2025 23:37

renovate Bot force-pushed the renovate/osv-lib branch from 4c6b860 to 673b528 Compare November 9, 2025 11:46

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from 8816d8d to 785d718 Compare November 25, 2025 23:30

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from a9354fa to 3e878c1 Compare December 16, 2025 22:33

renovate Bot force-pushed the renovate/osv-lib branch from 3e878c1 to 210d211 Compare December 30, 2025 08:06

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from 6961b1a to 9cae8fa Compare January 14, 2026 20:00

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from f37af4a to e7b75c5 Compare February 6, 2026 11:53

renovate Bot force-pushed the renovate/osv-lib branch from e7b75c5 to 889d3f7 Compare February 13, 2026 00:16

renovate Bot changed the title ~~chore(deps): lock file maintenance osv-lib~~ fix(deps): update osv-lib Feb 13, 2026

renovate Bot force-pushed the renovate/osv-lib branch from 889d3f7 to a756d1e Compare February 20, 2026 02:22

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from ead2754 to 17b0a4e Compare March 8, 2026 10:05

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from f8bc0b1 to 9a07ede Compare March 19, 2026 01:30

renovate Bot force-pushed the renovate/osv-lib branch 3 times, most recently from ef3f73a to 1902870 Compare March 30, 2026 17:13

renovate Bot force-pushed the renovate/osv-lib branch from 1902870 to 1bffbad Compare April 4, 2026 20:45

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from 043b310 to 10b1951 Compare May 7, 2026 18:34

renovate Bot force-pushed the renovate/osv-lib branch 2 times, most recently from 1e1f28e to 2b5d984 Compare June 5, 2026 21:45

renovate Bot force-pushed the renovate/osv-lib branch from 2b5d984 to 2387801 Compare June 11, 2026 15:00

fix(deps): update osv-lib

3593696

renovate Bot force-pushed the renovate/osv-lib branch from 2387801 to 3593696 Compare June 13, 2026 15:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update osv-lib#79

fix(deps): update osv-lib#79
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/osv-lib

renovate Bot commented Aug 5, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Aug 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Backwards-incompatible Changes

Changes

Changes

Changes

v3.16.0: google-cloud-logging: v3.16.0

Features

v3.14.0: google-cloud-logging: v3.14.0

Features

v3.13.0: google-cloud-kms: v3.13.0

v3.13.0 (2026-05-06)

v3.12.1: google-cloud-vision 3.12.1

Bug Fixes

v3.12.0: google-cloud-vision 3.12.0

3.12.0 (2026-01-09)

Core

Objective-C

Python

Ruby

Core

Objective-C

Python

Ruby

Core

C++

C#

Objective-C

PHP

Python

Ruby

Python

Ruby

C++

Objective-C

Python

Ruby

Core

C#

Python

What's Changed

Python

Core

C++

Objective-C

Python

Ruby

Core

Objective-C

PHP

Python

Ruby

Python

Core

C++

Python

Ruby

Python

C++

Python

C++

Python

Before

Now

Before

Now

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 5, 2025 •

edited

Loading

`v3.16.0`: google-cloud-logging: v3.16.0

`v3.14.0`: google-cloud-logging: v3.14.0

`v3.13.0`: google-cloud-kms: v3.13.0

`v3.12.1`: google-cloud-vision 3.12.1

`v3.12.0`: google-cloud-vision 3.12.0