feat(deps): update all non-major dependencies #160

Merged

ryangr0 merged 1 commit from renovate/all-non-major into development 2026-10-03 15:11:50 +00:00

Conversation 1 Commits 1 Files changed 7 +44 -44

renovate commented 2026-10-03 01:03:12 +00:00

Member

Copy link

This PR contains the following updates:

Package	Type	Update	Change	Released	Age (d)	Age	Adoption	Passing	Confidence
dhi.io/node (source)		digest	0b0cc56 → d5be02e	—	—
uv		patch	0.12.21 → 0.12.22	2026-10-02T00:20:42.000Z	1d
wrangler (source)	devDependencies	minor	4.144.0 → 4.145.0	2026-09-30T14:20:28.735Z	3d

📦 Grouped update: confirm the group is operationally coherent before merging.

Merge Confidence badges are included where supported — low or neutral confidence warrants a manual impact check before merge.

Released is the upstream publish time. — means the datasource reports no release timestamp. Docker Hub is the only Docker registry that reports one, so this preset treats every other Docker registry (ghcr.io, quay.io, Harbor and its proxies, dhi.io) as timestamp-optional: minimumReleaseAge cannot hold those updates back and they are eligible as soon as checks pass. For any other datasource, a missing timestamp holds the update for as long as a soak applies. A real date means the soak is enforced: add this update type's minimumReleaseAge to Released to get the eligibility moment.

---

Release Notes

astral-sh/uv (uv)

v0.12.22

Compare Source

Released on 2026-10-01.

Python

• Add CPython 3.10.22, 3.11.17, 3.12.15, 3.13.16, and 3.14.8 (#​22147)

Enhancements

• Accept uppercase release suffixes in wheel platform tags (#​22113)
• Record workspace-member default groups in lockfiles (#​22010, #​22103)
• Record workspace-member dependency-group Python requirements in lockfiles (#​22044, #​22103)
• Record default groups for non-project workspace roots in lockfiles (#​22104)
• Record dependency-group Python requirements for non-project workspace roots in lockfiles (#​22104)
• Format URLs and paths consistently in CLI messages (#​21937)
• Hide the unsupported --offline option from uv publish help (#​22124)

Preview features

• Honor --no-default-groups in uv audit (#​22090)
• Report a clear error when uv audit or uv tool audit runs offline and hide the unsupported option from help (#​22114)

Configuration

• Add UV_PYTHON_ARCH to select an interpreter architecture independently of its Python version (#​22098)

Performance

• Reduce uv's binary size by compressing embedded Python download metadata (#​22126)

Bug fixes

• Verify unchanged requirements against existing lockfile hashes when relocking (#​22083)
• Honor dependency-group Python requirements at non-project workspace roots (#​22101)
• Use each selected workspace member's recorded default groups during frozen sync (#​22015)
• Avoid false entry-point warnings for required workspace members (#​22112)

Other changes

• Raise the minimum supported Rust version for building uv to 1.97 and update the toolchain to Rust 1.99 (#​22121)

cloudflare/workers-sdk (wrangler)

v4.145.0

Compare Source

Minor Changes

• #​15685 b9f1cdc Thanks @​Ankcorn! - Add native support for the Analytics SQL binding

  Declare the zero-configuration binding in wrangler.json with "analytics": { "binding": "ANALYTICS" }. Wrangler uploads the analytics binding type and proxies it to the remote service during local development, so wrangler dev can call the binding without unsafe.bindings.

• #​15943 8468487 Thanks @​sejoker! - Graduate SQL, Catalog, and Pipelines under wrangler basin out of beta to stable

  Basin SQL is now available under wrangler basin sql, Basin Catalog operations are available under wrangler basin catalog, and Pipelines operations are available under wrangler basin pipelines. These commands are now stable, while the previous wrangler r2 sql, wrangler r2 bucket catalog, and wrangler pipelines command paths remain available as hidden compatibility aliases.

  The Basin SQL authentication environment variable is now WRANGLER_BASIN_SQL_AUTH_TOKEN. Update any existing WRANGLER_R2_SQL_AUTH_TOKEN configuration to use the new name. The fallback to CLOUDFLARE_API_TOKEN remains available.

• #​15948 a0712e5 Thanks @​akoval-cf! - Add beta K2 producer bindings for existing streams

  Configure a stream created through Wrangler, the Dashboard, or the API in wrangler.json:

  {
    "k2": [
      {
        "binding": "ORDERS",
        "stream": "0123456789abcdef0123456789abcdef"
      }
    ]
  }
  

  The binding supports env.ORDERS.send([{ content: new TextEncoder().encode("order"), headers: { event: "order.created" } }]). Batches use either all ArrayBuffer or all Uint8Array content. Check the returned success value, handle rejected RPC promises, and retry only when the returned error explicitly allows it. Generated environment types describe this producer contract without requiring a separate application dependency.

  K2 requires an enabled account. Deployment credentials need Worker deployment and K2 configuration-read access. Default Wrangler logins now request the K2 OAuth scopes; existing OAuth users should run wrangler login again to grant the new permissions. Development always uses a real K2 stream and may incur usage charges; no local simulator is provided. The remote setting can be omitted, remote: true suppresses the usage warning, and remote: false is rejected. Consumption is not part of this Worker binding.

• #​15948 a0712e5 Thanks @​akoval-cf! - Add beta K2 stream management commands

  Use wrangler k2 streams create order_events, wrangler k2 streams list, wrangler k2 streams get <stream-id>, and wrangler k2 streams delete <stream-id> to manage K2 streams. Creation enables Worker bindings but not HTTP ingestion by default, matching the dashboard. Pass --http-enabled to enable authenticated HTTP ingestion and print its endpoint. Creation prints the stream ID and a binding configuration with a YOUR_BINDING_NAME placeholder for the Worker's variable name, but does not edit the configuration file automatically.

  All four commands support --json. Deletion requires confirmation, or --force/-y to skip it; use --force --json for JSON deletion output. Creation also accepts retention, HTTP authentication, Worker-input, and CORS options; listing supports pagination and a name filter. Default Wrangler logins now request k2.read and k2.write; existing OAuth users should run wrangler login again, or use a custom API token granting K2 Config Write. The account must be enabled for K2.

Patch Changes

• #​15908 ddaa558 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260926.1	^5.20260930.2
  workerd	1.20260926.1	1.20260930.2

• Updated dependencies [b9f1cdc, ddaa558, a0712e5]:

  • miniflare@5.20260930.0-alpha

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | Released | Age (d) | [Age](https://docs.renovatebot.com/merge-confidence/) | [Adoption](https://docs.renovatebot.com/merge-confidence/) | [Passing](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---|---|---|---|---| | [dhi.io/node](https://dhi.io/catalog/node) ([source](https://github.com/docker-hardened-images/definitions)) | | digest | `0b0cc56` → `d5be02e` | — | — | | | | | | [uv](https://github.com/astral-sh/uv) | | patch | `0.12.21` → `0.12.22` | 2026-10-02T00:20:42.000Z | 1d |  |  |  |  | | [wrangler](https://github.com/cloudflare/workers-sdk) ([source](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler)) | devDependencies | minor | [`4.144.0` → `4.145.0`](https://renovatebot.com/diffs/npm/wrangler/4.144.0/4.145.0) | 2026-09-30T14:20:28.735Z | 3d |  |  |  |  | 📦 **Grouped update**: confirm the group is operationally coherent before merging. Merge Confidence badges are included where supported — low or neutral confidence warrants a manual impact check before merge. `Released` is the upstream publish time. `—` means the datasource reports no release timestamp. Docker Hub is the only Docker registry that reports one, so this preset treats every other Docker registry (ghcr.io, quay.io, Harbor and its proxies, dhi.io) as `timestamp-optional`: `minimumReleaseAge` cannot hold those updates back and they are eligible as soon as checks pass. For any other datasource, a missing timestamp holds the update for as long as a soak applies. A real date means the soak is enforced: add this update type's `minimumReleaseAge` to `Released` to get the eligibility moment. --- ### Release Notes <details> <summary>astral-sh/uv (uv)</summary> ### [`v0.12.22`](https://github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01222) [Compare Source](https://github.com/astral-sh/uv/compare/0.12.21...0.12.22) Released on 2026-10-01. ##### Python - Add CPython 3.10.22, 3.11.17, 3.12.15, 3.13.16, and 3.14.8 ([#&#8203;22147](https://github.com/astral-sh/uv/pull/22147)) ##### Enhancements - Accept uppercase release suffixes in wheel platform tags ([#&#8203;22113](https://github.com/astral-sh/uv/pull/22113)) - Record workspace-member default groups in lockfiles ([#&#8203;22010](https://github.com/astral-sh/uv/pull/22010), [#&#8203;22103](https://github.com/astral-sh/uv/pull/22103)) - Record workspace-member dependency-group Python requirements in lockfiles ([#&#8203;22044](https://github.com/astral-sh/uv/pull/22044), [#&#8203;22103](https://github.com/astral-sh/uv/pull/22103)) - Record default groups for non-project workspace roots in lockfiles ([#&#8203;22104](https://github.com/astral-sh/uv/pull/22104)) - Record dependency-group Python requirements for non-project workspace roots in lockfiles ([#&#8203;22104](https://github.com/astral-sh/uv/pull/22104)) - Format URLs and paths consistently in CLI messages ([#&#8203;21937](https://github.com/astral-sh/uv/pull/21937)) - Hide the unsupported `--offline` option from `uv publish` help ([#&#8203;22124](https://github.com/astral-sh/uv/pull/22124)) ##### Preview features - Honor `--no-default-groups` in `uv audit` ([#&#8203;22090](https://github.com/astral-sh/uv/pull/22090)) - Report a clear error when `uv audit` or `uv tool audit` runs offline and hide the unsupported option from help ([#&#8203;22114](https://github.com/astral-sh/uv/pull/22114)) ##### Configuration - Add `UV_PYTHON_ARCH` to select an interpreter architecture independently of its Python version ([#&#8203;22098](https://github.com/astral-sh/uv/pull/22098)) ##### Performance - Reduce uv's binary size by compressing embedded Python download metadata ([#&#8203;22126](https://github.com/astral-sh/uv/pull/22126)) ##### Bug fixes - Verify unchanged requirements against existing lockfile hashes when relocking ([#&#8203;22083](https://github.com/astral-sh/uv/pull/22083)) - Honor dependency-group Python requirements at non-project workspace roots ([#&#8203;22101](https://github.com/astral-sh/uv/pull/22101)) - Use each selected workspace member's recorded default groups during frozen sync ([#&#8203;22015](https://github.com/astral-sh/uv/pull/22015)) - Avoid false entry-point warnings for required workspace members ([#&#8203;22112](https://github.com/astral-sh/uv/pull/22112)) ##### Other changes - Raise the minimum supported Rust version for building uv to 1.97 and update the toolchain to Rust 1.99 ([#&#8203;22121](https://github.com/astral-sh/uv/pull/22121)) </details> <details> <summary>cloudflare/workers-sdk (wrangler)</summary> ### [`v4.145.0`](https://github.com/cloudflare/workers-sdk/blob/HEAD/packages/wrangler/CHANGELOG.md#41450) [Compare Source](https://github.com/cloudflare/workers-sdk/compare/wrangler@4.144.0...wrangler@4.145.0) ##### Minor Changes - [#&#8203;15685](https://github.com/cloudflare/workers-sdk/pull/15685) [`b9f1cdc`](https://github.com/cloudflare/workers-sdk/commit/b9f1cdc198533687f6b64ce72499a3ca04b2bf85) Thanks [@&#8203;Ankcorn](https://github.com/Ankcorn)! - Add native support for the Analytics SQL binding Declare the zero-configuration binding in `wrangler.json` with `"analytics": { "binding": "ANALYTICS" }`. Wrangler uploads the `analytics` binding type and proxies it to the remote service during local development, so `wrangler dev` can call the binding without `unsafe.bindings`. - [#&#8203;15943](https://github.com/cloudflare/workers-sdk/pull/15943) [`8468487`](https://github.com/cloudflare/workers-sdk/commit/8468487cd1e5c3b6870822348d8ef20c1df53a13) Thanks [@&#8203;sejoker](https://github.com/sejoker)! - Graduate SQL, Catalog, and Pipelines under `wrangler basin` out of beta to stable Basin SQL is now available under `wrangler basin sql`, Basin Catalog operations are available under `wrangler basin catalog`, and Pipelines operations are available under `wrangler basin pipelines`. These commands are now stable, while the previous `wrangler r2 sql`, `wrangler r2 bucket catalog`, and `wrangler pipelines` command paths remain available as hidden compatibility aliases. The Basin SQL authentication environment variable is now `WRANGLER_BASIN_SQL_AUTH_TOKEN`. Update any existing `WRANGLER_R2_SQL_AUTH_TOKEN` configuration to use the new name. The fallback to `CLOUDFLARE_API_TOKEN` remains available. - [#&#8203;15948](https://github.com/cloudflare/workers-sdk/pull/15948) [`a0712e5`](https://github.com/cloudflare/workers-sdk/commit/a0712e578e45908ed5e46235828a434b49cf8f22) Thanks [@&#8203;akoval-cf](https://github.com/akoval-cf)! - Add beta K2 producer bindings for existing streams Configure a stream created through Wrangler, the Dashboard, or the API in `wrangler.json`: ```jsonc { "k2": [ { "binding": "ORDERS", "stream": "0123456789abcdef0123456789abcdef" } ] } ``` The binding supports `env.ORDERS.send([{ content: new TextEncoder().encode("order"), headers: { event: "order.created" } }])`. Batches use either all `ArrayBuffer` or all `Uint8Array` content. Check the returned `success` value, handle rejected RPC promises, and retry only when the returned error explicitly allows it. Generated environment types describe this producer contract without requiring a separate application dependency. K2 requires an enabled account. Deployment credentials need Worker deployment and K2 configuration-read access. Default Wrangler logins now request the K2 OAuth scopes; existing OAuth users should run `wrangler login` again to grant the new permissions. Development always uses a real K2 stream and may incur usage charges; no local simulator is provided. The `remote` setting can be omitted, `remote: true` suppresses the usage warning, and `remote: false` is rejected. Consumption is not part of this Worker binding. - [#&#8203;15948](https://github.com/cloudflare/workers-sdk/pull/15948) [`a0712e5`](https://github.com/cloudflare/workers-sdk/commit/a0712e578e45908ed5e46235828a434b49cf8f22) Thanks [@&#8203;akoval-cf](https://github.com/akoval-cf)! - Add beta K2 stream management commands Use `wrangler k2 streams create order_events`, `wrangler k2 streams list`, `wrangler k2 streams get <stream-id>`, and `wrangler k2 streams delete <stream-id>` to manage K2 streams. Creation enables Worker bindings but not HTTP ingestion by default, matching the dashboard. Pass `--http-enabled` to enable authenticated HTTP ingestion and print its endpoint. Creation prints the stream ID and a binding configuration with a `YOUR_BINDING_NAME` placeholder for the Worker's variable name, but does not edit the configuration file automatically. All four commands support `--json`. Deletion requires confirmation, or `--force`/`-y` to skip it; use `--force --json` for JSON deletion output. Creation also accepts retention, HTTP authentication, Worker-input, and CORS options; listing supports pagination and a name filter. Default Wrangler logins now request `k2.read` and `k2.write`; existing OAuth users should run `wrangler login` again, or use a custom API token granting K2 Config Write. The account must be enabled for K2. ##### Patch Changes - [#&#8203;15908](https://github.com/cloudflare/workers-sdk/pull/15908) [`ddaa558`](https://github.com/cloudflare/workers-sdk/commit/ddaa5588640f6b14541e1d37a5bc49099fd6779d) Thanks [@&#8203;dependabot](https://github.com/apps/dependabot)! - Update dependencies of "miniflare", "wrangler" The following dependency versions have been updated: | Dependency | From | To | | ------------------------------------------------------------------------ | ------------- | ------------- | | [@&#8203;cloudflare/workers-types](https://github.com/cloudflare/workers-types) | ^5.20260926.1 | ^5.20260930.2 | | workerd | 1.20260926.1 | 1.20260930.2 | - Updated dependencies \[[`b9f1cdc`](https://github.com/cloudflare/workers-sdk/commit/b9f1cdc198533687f6b64ce72499a3ca04b2bf85), [`ddaa558`](https://github.com/cloudflare/workers-sdk/commit/ddaa5588640f6b14541e1d37a5bc49099fd6779d), [`a0712e5`](https://github.com/cloudflare/workers-sdk/commit/a0712e578e45908ed5e46235828a434b49cf8f22)]: - <miniflare@5.20260930.0-alpha> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjI3MS4zIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcG1lbnQiLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiY29udGFpbmVyIiwiZGVwZW5kZW5jaWVzIiwicmVub3ZhdGUiLCJ0eXBlL2RpZ2VzdCIsInR5cGUvbWlub3IiLCJ0eXBlL3BhdGNoIl19-->

renovate added 1 commit 2026-10-03 01:03:13 +00:00

fix(deps): update dependency uv ( 0.12.21 ➔ 0.12.22 ) b2670e5490

renovate commented 2026-10-03 01:03:16 +00:00

Author

Member

Copy link

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: apps/ploeg/mise.lock

[WARN] migrate: mise version 2026.9.17 is required, but you are using 2026.7.7
Run `mise self-update` to update mise
mise ERROR mise version 2026.9.17 is required, but you are using 2026.7.7
Run `mise self-update` to update mise
mise ERROR Version: 2026.7.7 linux-x64 (2026-07-15)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information

Command failed: mise lock uv
[WARN] migrate: mise version 2026.9.17 is required, but you are using 2026.7.7
Run `mise self-update` to update mise
mise ERROR mise version 2026.9.17 is required, but you are using 2026.7.7
Run `mise self-update` to update mise
mise ERROR Version: 2026.7.7 linux-x64 (2026-07-15)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information

File name: mise.lock

[WARN] migrate: mise version 2026.9.17 is required, but you are using 2026.7.7
Run `mise self-update` to update mise
mise ERROR mise version 2026.9.17 is required, but you are using 2026.7.7
Run `mise self-update` to update mise
mise ERROR Version: 2026.7.7 linux-x64 (2026-07-15)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information

Command failed: mise lock uv
[WARN] migrate: mise version 2026.9.17 is required, but you are using 2026.7.7
Run `mise self-update` to update mise
mise ERROR mise version 2026.9.17 is required, but you are using 2026.7.7
Run `mise self-update` to update mise
mise ERROR Version: 2026.7.7 linux-x64 (2026-07-15)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information

### ⚠️ Artifact update problem Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: apps/ploeg/mise.lock ``` [WARN] migrate: mise version 2026.9.17 is required, but you are using 2026.7.7 Run `mise self-update` to update mise mise ERROR mise version 2026.9.17 is required, but you are using 2026.7.7 Run `mise self-update` to update mise mise ERROR Version: 2026.7.7 linux-x64 (2026-07-15) mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information Command failed: mise lock uv [WARN] migrate: mise version 2026.9.17 is required, but you are using 2026.7.7 Run `mise self-update` to update mise mise ERROR mise version 2026.9.17 is required, but you are using 2026.7.7 Run `mise self-update` to update mise mise ERROR Version: 2026.7.7 linux-x64 (2026-07-15) mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information ``` ##### File name: mise.lock ``` [WARN] migrate: mise version 2026.9.17 is required, but you are using 2026.7.7 Run `mise self-update` to update mise mise ERROR mise version 2026.9.17 is required, but you are using 2026.7.7 Run `mise self-update` to update mise mise ERROR Version: 2026.7.7 linux-x64 (2026-07-15) mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information Command failed: mise lock uv [WARN] migrate: mise version 2026.9.17 is required, but you are using 2026.7.7 Run `mise self-update` to update mise mise ERROR mise version 2026.9.17 is required, but you are using 2026.7.7 Run `mise self-update` to update mise mise ERROR Version: 2026.7.7 linux-x64 (2026-07-15) mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information ```

renovate force-pushed renovate/all-non-major from b2670e5490 to 6799a31229 2026-10-03 11:03:04 +00:00 Compare

renovate force-pushed renovate/all-non-major from 6799a31229 to 5ce128e3e9 2026-10-03 12:02:47 +00:00 Compare

renovate force-pushed renovate/all-non-major from 5ce128e3e9 to 0e63f04858 2026-10-03 13:04:25 +00:00 Compare

renovate force-pushed renovate/all-non-major from 0e63f04858 to 08fefeac60 2026-10-03 14:10:05 +00:00 Compare

renovate changed title from fix(deps): update dependency uv ( 0.12.21 ➔ 0.12.22 ) to fix(deps): update all non-major dependencies 2026-10-03 14:10:11 +00:00

renovate force-pushed renovate/all-non-major from 08fefeac60 to 711a481495 2026-10-03 15:05:46 +00:00 Compare

renovate changed title from fix(deps): update all non-major dependencies to feat(deps): update all non-major dependencies 2026-10-03 15:06:52 +00:00

ryangr0 merged commit e5c57a1695 into development 2026-10-03 15:11:50 +00:00

ryangr0 referenced this pull request from a commit 2026-10-03 15:11:51 +00:00

Merge pull request 'feat(deps): update all non-major dependencies' (#160) from renovate/all-non-major into development

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

webgrip/unfold!160

No description provided.