chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
actions/cache	action	major	v5 → v6
ansible-lint (changelog)	dependency-groups	minor	26.4.0 → 26.6.0
astral-sh/uv-pre-commit	repository	patch	0.11.25 → 0.11.26
biomejs/pre-commit	repository	patch	v2.5.1 → v2.5.2
coverage	dependency-groups	minor	7.14.3 → 7.15.0
prek (source, changelog)	dependency-groups	patch	0.4.5 → 0.4.6	0.4.8 (+1)
tombi	dependency-groups	patch	1.1.6 → 1.1.7	1.2.0
tombi-toml/tombi-pre-commit	repository	patch	v1.1.5 → v1.1.7	v1.2.0

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v6.1.0 - handle read-only cache access by @​jasongin in #​1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

• Update packages, migrate to ESM by @​Samirat in #​1760

Full Changelog: actions/cache@v5...v6.0.0

v6

Compare Source

ansible/ansible-lint (ansible-lint)

v26.6.0

Compare Source

Features

• fix: ensure configuration errors are visible to user (#​5038) @​Dotify71

Fixes

• fix: bump cryptography minimum to >=46.0.6 and refresh lock file (#​5089) @​sudhirverma
• fix: added setup-uv action version pinning to renovate config (#​5021) @​garethahealy
• fix: detect role roots in namespace subdirectories (#​5079) (#​5080) @​santosh7676
• fix(docs): remove mkdocstrings plugin to unblock docs CI (#​5084) @​rockygeekz
• fix: suppress ruff PLW0717 to unblock renovate (#​5077) @​rockygeekz
• Fix risky-shell-pipe false positive on multi-line Jinja (#​5058) @​arpitjain099
• Fix: fix mock_modules generated stubs failing YAML/doc parsing #​5031 (#​5032) @​santosh7676
• fix: support example format indicator, prevent ansible-lint from producing load-failure on valid non-YAML examples (#​5045) @​felixfontein
• fix: avoid name[casing] auto-fix crash on multi-segment prefixes (#​5026) @​bishalOps
• fix: preserve multi-hash comments on ansible-lint --fix (#​5033) @​bishalOps
• fix: preserve trailing blank lines when fqcn auto-fix renames a key (#​5027) @​bishalOps
• fix(security): update dependencies [SECURITY] (#​5061) @​renovate[bot]
• fix(ci): switch devel tests from py312 to py313 (#​5062) @​rockygeekz
• fix: ignore skip lookup across rules (#​5060) @​mehrdadbn9
• chore: Add support for Fedora 44 in the meta schema (#​5029) @​jsf9k
• fix: ensure configuration errors are visible to user (#​5038) @​Dotify71
• fix: role argument spec: fix typo in attribute schema (#​5044) @​felixfontein
• fix: handle ignore.txt comments with '#' in them correctly (#​5028) @​felixfontein
• fix: Evaluate the exit code after applying the skipped rules from .ansible-lint-ignore (#​5001) @​gmuloc
• fix: Update stale rulebook schema to match upstream ansible-rulebook (#​5056) @​Hrithik-Gavankar
• fix: update _extends syntax for release-drafter v7 compatibility (#​5043) @​rockygeekz
• fix(security): update dependencies [SECURITY] - abandoned (#​5014) @​renovate[bot]
• fix: update malformed block regex and bump pathspec upper bound (#​5039) @​rockygeekz

Maintenance

• chore: remove previously-synced agent skills (#​5078) @​ansibuddy
• chore(deps): update all dependencies (#​5074) @​renovate[bot]
• fix(security): update dependencies [SECURITY] (#​5061) @​renovate[bot]
• test: add security-check workflow (integration test) (#​5064) @​cidrblock
• chore: Add support for Fedora 44 in the meta schema (#​5029) @​jsf9k
• chore: clarify yaml reformatting under fix (#​5057) @​Himanshuagrawal4
• chore(deps): update all dependencies pep621 (#​5047) @​renovate[bot]
• chore(deps): update all dependencies (#​5046) @​renovate[bot]
• chore(deps): update all dependencies pep621 (#​5041) @​renovate[bot]
• chore(deps): update all dependencies (#​5040) @​renovate[bot]
• chore(deps): update all dependencies (#​5011) @​renovate[bot]
• fix(security): update dependencies [SECURITY] - abandoned (#​5014) @​renovate[bot]
• chore(deps): update all dependencies pep621 (#​5012) @​renovate[bot]

astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

v0.11.26

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.11.26

biomejs/pre-commit (biomejs/pre-commit)

v2.5.2

Compare Source

coveragepy/coveragepy (coverage)

v7.15.0

Compare Source

• Since 7.14.0, reporting commands implicitly combine parallel data files. Now
  those commands have a new option --keep-combined to retain the data files
  after combining them instead of the default, which is to delete them.
  Finishes issue 2198_.

• Fix: the LCOV report would incorrectly count excluded functions as uncovered,
  as described in issue 2205. This is now fixed thanks to Martin Kuntz Jacobsen <pull 2206_>.

• When running your program, coverage now correctly sets
  yourmodule.__spec__.loader as strongly recommended <--loader--_>,
  avoiding the deprecation warning described in issue 2208. Thanks, A5rocks <pull 2209_>_.

• Fix: with Python 3.10, running with the -I (isolated mode) option didn't
  correctly omit the current directory from the module search path, as
  described in issue 2103. That is now fixed thanks to Ilia Sorokin <pull 2211_>.

.. --loader--: https://docs.python.org/3/reference/datamodel.html#module.__loader_
.. _issue 2103: #​2103
.. _issue 2198: #​2198
.. _issue 2205: #​2205
.. _pull 2206: #​2206
.. _issue 2208: #​2208
.. _pull 2209: #​2209
.. _pull 2211: #​2211

.. _changes_7-14-3:

j178/prek (prek)

v0.4.6

Compare Source

Released on 2026-07-01.

Enhancements

• Verify managed toolchain downloads before installation (#​2229)
• Add PREK_DOCKER_NO_INIT to opt-out Docker --init (#​2242)
• Improve subprocess error messages (#​2257)
• Split run concurrency knobs: PREK_CONCURRENT_HOOKS and PREK_CONCURRENT_BATCHES (#​2276)

Performance

• Avoid allocating markdown extensions per file (#​2245)
• Avoid unchanged config tracking writes (#​2247)
• Delay trailing whitespace output buffer (#​2244)
• Prefilter VCS permalink lines (#​2253)
• Skip unnecessary submodule updates during hook repo clone (#​2255)

Documentation

• Document language_version inferring for Python and Go (#​2241)

Other changes

• Refactor env var handling (#​2277)
• Use serde-saphyr for YAML string quoting (#​2228)

Contributors

• @​shaanmajid
• @​j178

tombi-toml/tombi (tombi)

v1.1.7

Compare Source

What's Changed

🦅 New Features

• Apply quote style to string keys by @​ya7010 in #​1980
• Support JSON schema deprecationMessage by @​ya7010 in #​1986

🐝 Bug Fixes

• Fix nested anyOf hover enum selection by @​ya7010 in #​1979

🛠️ Other Changes

• Update issue template emoji by @​ya7010 in #​1975
• Fix anyOf hover enum leakage by @​ya7010 in #​1976
• ci: validate winget manifest before submission by @​ya7010 in #​1977
• Improve formatting edit debug log by @​ya7010 in #​1978
• ci: harden winget manifest invocation check by @​ya7010 in #​1981
• ci: validate winget manifest leaf directory by @​ya7010 in #​1982
• ci: ignore winget manifest validation warnings by @​ya7010 in #​1983
• Fix root $ref schema completion by @​kjanat in #​1984

Full Changelog: tombi-toml/tombi@v1.1.6...v1.1.7

tombi-toml/tombi-pre-commit (tombi-toml/tombi-pre-commit)

v1.1.7

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v1.1.7

v1.1.6

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v1.1.6

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "before 4am on monday"
• Automerge
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml

Artifact update for prek resolved to version 0.4.8, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.4.6
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

File name: pyproject.toml

Artifact update for tombi resolved to version 1.2.0, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 1.1.7
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.