[khepri-bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
astral-sh/setup-uv	action	minor	v10.2.0 → v10.3.0	v10.3.2 (+1)
pydantic (changelog)	project.dependencies	minor	==2.13.5 → ==2.14.1
trufflesecurity/trufflehog		minor	v3.97.9 → v3.99.2	v3.99.7 (+4)

---

Release Notes

astral-sh/setup-uv

v10.3.0: 🌈 Add Python architecture selection

Compare Source

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

• Use macOS 15 runners for tests @​charliermarsh (#​1081)

🚀 Enhancements

• Add python-arch support @​zanieb (#​1079)

🧰 Maintenance

• chore: update known checksums for 0.13.0 @​github-actions[bot] (#​1089)
• chore: update known checksums for 0.12.24 @​github-actions[bot] (#​1084)
• chore: update known checksums for 0.12.23 @​github-actions[bot] (#​1082)
• chore: update known checksums for 0.12.22 @​github-actions[bot] (#​1080)
• chore: update known checksums for 0.12.21 @​github-actions[bot] (#​1078)
• chore: update known checksums for 0.12.20 @​github-actions[bot] (#​1076)
• chore: update known checksums for 0.12.19 @​github-actions[bot] (#​1068)
• chore: update known checksums for 0.12.18 @​github-actions[bot] (#​1065)

⬆️ Dependency updates

• chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 @​dependabot[bot] (#​1077)

pydantic/pydantic (pydantic)

v2.14.1

Compare Source

GitHub release

The code released in v2.5.0 is functionally identical to that of v2.5.0b1.

What's Changed

Packaging

• Update pydantic-core from 2.10.1 to 2.14.1, significant changes from these updates are described below, full changelog here
• Update to pyright==1.1.335 by @​Viicos in #​8075

New Features

• Allow plugins to catch non ValidationError errors by @​adriangb in #​7806
• Support __doc__ argument in create_model() by @​chris-spann in #​7863
• Expose regex_engine flag - meaning you can use with the Rust or Python regex libraries in constraints by @​utkini in #​7768
• Save return type generated from type annotation in ComputedFieldInfo by @​alexmojaki in #​7889
• Adopting ruff formatter by @​Luca-Blight in #​7930
• Added validation_error_cause to config by @​zakstucke in #​7626
• Make path of the item to validate available in plugin by @​hramezani in #​7861
• Add CallableDiscriminator and Tag by @​dmontagu in #​7983
  • CallableDiscriminator renamed to Discriminator by @​dmontagu in #​8047
• Make union case tags affect union error messages by @​dmontagu in #​8001
• Add examples and json_schema_extra to @computed_field by @​alexmojaki in #​8013
• Add JsonValue type by @​dmontagu in #​7998
• Allow str as argument to Discriminator by @​dmontagu in #​8047
• Add SchemaSerializer.__reduce__ method to enable pickle serialization by @​edoakes in pydantic/pydantic-core#1006

Changes

• Significant Change: replace ultra_strict with new smart union implementation, the way unions are validated has changed significantly to improve performance and correctness, we have worked hard to absolutely minimise the number of cases where behaviour has changed, see the PR for details - by @​davidhewitt in pydantic/pydantic-core#867
• Add support for instance method reassignment when extra='allow' by @​sydney-runkle in #​7683
• Support JSON schema generation for Enum types with no cases by @​sydney-runkle in #​7927
• Warn if a class inherits from Generic before BaseModel by @​alexmojaki in #​7891

Performance

• New custom JSON parser, jiter by @​samuelcolvin in pydantic/pydantic-core#974
• PGO build for MacOS M1 by @​samuelcolvin in pydantic/pydantic-core#1063
• Use __getattr__ for all package imports, improve import time by @​samuelcolvin in #​7947

Fixes

• Fix mypy issue with subclasses of RootModel by @​sydney-runkle in #​7677
• Properly rebuild the FieldInfo when a forward ref gets evaluated by @​dmontagu in #​7698
• Fix failure to load SecretStr from JSON (regression in v2.4) by @​sydney-runkle in #​7729
• Fix defer_build behavior with TypeAdapter by @​sydney-runkle in #​7736
• Improve compatibility with legacy mypy versions by @​dmontagu in #​7742
• Fix: update TypeVar handling when default is not set by @​pmmmwh in #​7719
• Support specification of strict on Enum type fields by @​sydney-runkle in #​7761
• Wrap weakref.ref instead of subclassing to fix cloudpickle serialization by @​edoakes in #​7780
• Keep values of private attributes set within model_post_init in subclasses by @​alexmojaki in #​7775
• Add more specific type for non-callable json_schema_extra by @​alexmojaki in #​7803
• Raise an error when deleting frozen (model) fields by @​alexmojaki in #​7800
• Fix schema sorting bug with default values by @​sydney-runkle in #​7817
• Use generated alias for aliases that are not specified otherwise by @​alexmojaki in #​7802
• Support strict specification for UUID types by @​sydney-runkle in #​7865
• JSON schema: fix extra parameter handling by @​me-and in #​7810
• Fix: support pydantic.Field(kw_only=True) with inherited dataclasses by @​PrettyWood in #​7827
• Support validate_call decorator for methods in classes with __slots__ by @​sydney-runkle in #​7883
• Fix pydantic dataclass problem with dataclasses.field default by @​hramezani in #​7898
• Fix schema generation for generics with union type bounds by @​sydney-runkle in #​7899
• Fix version for importlib_metadata on python 3.7 by @​sydney-runkle in #​7904
• Support | operator (Union) in PydanticRecursiveRef by @​alexmojaki in #​7892
• Fix display_as_type for TypeAliasType in python 3.12 by @​dmontagu in #​7929
• Add support for NotRequired generics in TypedDict by @​sydney-runkle in #​7932
• Make generic TypeAliasType specifications produce different schema definitions by @​alexdrydew in #​7893
• Added fix for signature of inherited dataclass by @​howsunjow in #​7925
• Make the model name generation more robust in JSON schema by @​joakimnordling in #​7881
• Fix plurals in validation error messages (in tests) by @​Iipin in #​7972
• PrivateAttr is passed from Annotated default position by @​tabassco in #​8004
• Don't decode bytes (which may not be UTF8) when displaying SecretBytes by @​alexmojaki in #​8012
• Use classmethod instead of classmethod[Any, Any, Any] by @​Mr-Pepe in #​7979
• Clearer error on invalid Plugin by @​samuelcolvin in #​8023
• Correct pydantic dataclasses import by @​samuelcolvin in #​8027
• Fix misbehavior for models referencing redefined type aliases by @​dmontagu in #​8050
• Fix Optional field with validate_default only performing one field validation by @​sydney-runkle in pydantic/pydantic-core#1002
• Fix definition-ref bug with Dict keys by @​sydney-runkle in pydantic/pydantic-core#1014
• Fix bug allowing validation of bool types with coerce_numbers_to_str=True by @​sydney-runkle in pydantic/pydantic-core#1017
• Don't accept NaN in float and decimal constraints by @​davidhewitt in pydantic/pydantic-core#1037
• Add lax_str and lax_int support for enum values not inherited from str/int by @​michaelhly in pydantic/pydantic-core#1015
• Support subclasses in lists in Union of List types by @​sydney-runkle in pydantic/pydantic-core#1039
• Allow validation against max_digits and decimals to pass if normalized or non-normalized input is valid by @​sydney-runkle in pydantic/pydantic-core#1049
• Fix: proper pluralization in ValidationError messages by @​Iipin in pydantic/pydantic-core#1050
• Disallow the string '-' as datetime input by @​davidhewitt in pydantic/speedate#52 & pydantic/pydantic-core#1060
• Fix: NaN and Inf float serialization by @​davidhewitt in pydantic/pydantic-core#1062
• Restore manylinux-compatible PGO builds by @​davidhewitt in pydantic/pydantic-core#1068

New Contributors

pydantic

• @​schneebuzz made their first contribution in #​7699
• @​edoakes made their first contribution in #​7780
• @​alexmojaki made their first contribution in #​7775
• @​NickG123 made their first contribution in #​7751
• @​gowthamgts made their first contribution in #​7830
• @​jamesbraza made their first contribution in #​7848
• @​laundmo made their first contribution in #​7850
• @​rahmatnazali made their first contribution in #​7870
• @​waterfountain1996 made their first contribution in #​7878
• @​chris-spann made their first contribution in #​7863
• @​me-and made their first contribution in #​7810
• @​utkini made their first contribution in #​7768
• @​bn-l made their first contribution in #​7744
• @​alexdrydew made their first contribution in #​7893
• @​Luca-Blight made their first contribution in #​7930
• @​howsunjow made their first contribution in #​7925
• @​joakimnordling made their first contribution in #​7881
• @​icfly2 made their first contribution in #​7976
• @​Yummy-Yums made their first contribution in #​8003
• @​Iipin made their first contribution in #​7972
• @​tabassco made their first contribution in #​8004
• @​Mr-Pepe made their first contribution in #​7979
• @​0x00cl made their first contribution in #​8010
• @​barraponto made their first contribution in #​8032

pydantic-core

• @​sisp made their first contribution in pydantic/pydantic-core#995
• @​michaelhly made their first contribution in pydantic/pydantic-core#1015

v2.14.0

Compare Source

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post.
Several minor changes (considered non-breaking changes according to our versioning policy)
are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

• Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #​13873
• Add __namespace__ parameter to create_model() by @​Viicos in #​13895

Changes

• Add an ordered-dict core schema by @​Viicos in #​13796
• Add a counter core schema by @​Viicos in #​13824
• Do not mutate model_config attribute by @​Viicos in #​13825
• Reject newlines in NameEmail validation by @​Viicos in #​13897

Fixes

• Call enum constructors in both validation modes by @​Viicos in #​13792
• Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #​13821
• Catch OverflowError during ByteSize validation by @​Viicos in #​13850
• Require multiple_of constraints to be positive by @​Viicos in #​13862
• Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #​13859
• Handle TypeError gracefully during docstring extraction by @​Viicos in #​13874
• Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #​13891
• Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #​13892
• Encode JSON Schema defaults with a consistent configuration by @​Viicos in #​13893
• Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #​13898
• Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #​13899
• Handle OS errors during ZoneInfo validation by @​Viicos in #​13912
• Handle exceptions during Decimal validation by @​Viicos in #​13940
• Rebuild incomplete types during serialization inference by @​Viicos in #​13922
• Reject large exponents in Fraction validation by @​Viicos in #​13944
• Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #​13945

New Contributors

• @​saquibjawedbit made their first contribution in #​13859

trufflesecurity/trufflehog

v3.99.2

Compare Source

What's Changed

• Copy over dedupe cache size into the engine from the config by @​camgunz in #​5402

Full Changelog: trufflesecurity/trufflehog@v3.99.1...v3.99.2

v3.99.1

Compare Source

What's Changed

• Update github-actions by @​renovate[bot] in #​5363
• [INT-1084] Make the results deduplication cache size configurable by @​camgunz in #​5399

Full Changelog: trufflesecurity/trufflehog@v3.99.0...v3.99.1

v3.99.0

Compare Source

What's Changed

• Fix Sumo Logic detector ignoring configured verifier endpoints by @​unsmith in #​5395
• Add OAuth2 (ROPC) auth for verification requests by @​unsmith in #​5392

Full Changelog: trufflesecurity/trufflehog@v3.98.1...v3.99.0

v3.98.1

Compare Source

What's Changed

• Add postman source documentation by @​kashifkhan0771 in #​5389
• Add a TruffleHog dectector for Kong Konnect Platform by @​mrwanny in #​5305
• Add api_timeout_seconds to Gerrit source proto by @​kashifkhan0771 in #​5394

New Contributors

• @​mrwanny made their first contribution in #​5305

Full Changelog: trufflesecurity/trufflehog@v3.98.0...v3.98.1

v3.98.0

Compare Source

What's Changed

• Int 595 verify asymmetry by @​shahzadhaider1 in #​5261
• return error body for fetchBearerToken by @​jordanTunstill in #​5301
• Update module github.com/charmbracelet/bubbletea to v1.3.10 by @​renovate[bot] in #​5281
• Update github.com/trufflesecurity/ldap-verify digest to 3142cc9 by @​renovate[bot] in #​5280
• [INT-1086] Don't reuse maps; editing them afterwards edits them for all results by @​camgunz in #​5351
• [INT-1091] Treat Square 403 as verified on INSUFFICIENT_SCOPES by @​MuneebUllahKhan222 in #​5367
• feat: add --no-ignore-tag to report secrets on trufflehog:ignore lines by @​thiswillnevermatch in #​5293
• Fix failing TestGHCRListImages test in CI by @​MuneebUllahKhan222 in #​5368
• Revert duplicate --no-ignore-tag changes from #​5293 by @​shahzadhaider1 in #​5369
• Show progress inside S3 buckets by @​shahzadhaider1 in #​5330
• fix(output): escape special characters in --github-actions output by @​kenanyararbas in #​5353
• fix(detectors): remove stray fmt.Printf in portainertoken by @​Gracy769 in #​5334
• resolve race condition in result deduplication cache by @​kvnphvm in #​5359
• added entropy filter and improved verification for gitlab v2/v3 by @​jordanTunstill in #​5358
• Update Okta domain pat to account for mil and fedramp by @​kvnphvm in #​5355
• Corpora bench reports clean when a detector produces zero matches on both sides by @​kvnphvm in #​5357
• Add huggingface source documentation by @​kashifkhan0771 in #​5373
• Add Gitlab source documentation by @​kashifkhan0771 in #​5371
• Add Github source documentation by @​kashifkhan0771 in #​5370
• fix(detectors/auth0oauth): match Auth0 Private Cloud auth0app.com domains by @​saghaulor in #​5354
• List only the include prefixes in S3 scans by @​shahzadhaider1 in #​5377
• fix(github): switch back to fetching access token through apiClient, by @​mariduv in #​5380
• Fix NetSuite detector running out of memory on dense input by @​shahzadhaider1 in #​5383
• Add Jenkins source documentation by @​kashifkhan0771 in #​5388
• docs: point five internal links at files that exist by @​CalvinTjoaquinn in #​5375
• Add pkg/ssrf shared egress guard; use it for WithNoLocalIP and analyzer clients by @​bill-rich in #​5288

New Contributors

• @​thiswillnevermatch made their first contribution in #​5293
• @​kenanyararbas made their first contribution in #​5353
• @​Gracy769 made their first contribution in #​5334
• @​CalvinTjoaquinn made their first contribution in #​5375

Full Changelog: trufflesecurity/trufflehog@v3.97.9...v3.98.0

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.