Update maintenance

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/dependency-review-action	action	patch	v4.8.0 -> v4.8.1
filelock		minor	==3.19.1 -> ==3.20.0
pglast	install	minor	==7.7 -> ==7.10
pglast		minor	==7.7 -> ==7.10
platformdirs (changelog)		minor	==4.4.0 -> ==4.5.0
pylint (changelog)		patch	==4.0.1 -> ==4.0.2
python	uses-with	minor	3.13 -> 3.14
step-security/harden-runner	action	patch	v2.13.1 -> v2.13.2
tomli (changelog)		minor	==2.2.1 -> ==2.3.0
tox (changelog)		minor	==4.30.3 -> ==4.32.0
virtualenv		minor	==20.34.0 -> ==20.35.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

v4.8.1: Dependency Review Action v4.8.1

Compare Source

What's Changed

• (bug) Fix spamming link test in deprecation warning (again) by @​ahpook in #​1000
• Bump version for 4.8.1 release by @​ahpook in #​1001

Full Changelog: actions/dependency-review-action@v4...v4.8.1

tox-dev/py-filelock (filelock)

v3.20.0

Compare Source

What's Changed

• Add tox.toml to sdist by @​mtelka in tox-dev/filelock#436
• Update docs with example by @​znichollscr in tox-dev/filelock#438
• Add 3.14 support and drop 3.9 by @​gaborbernat in tox-dev/filelock#448

New Contributors

• @​mtelka made their first contribution in tox-dev/filelock#436
• @​znichollscr made their first contribution in tox-dev/filelock#438

Full Changelog: tox-dev/filelock@3.19.1...3.20.0

lelit/pglast (pglast)

v7.10

Compare Source

v7.9

Compare Source

v7.8

Compare Source

tox-dev/platformdirs (platformdirs)

v4.5.0

Compare Source

What's Changed

• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​376
• Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in the all group by @​dependabot[bot] in #​378
• Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in /.github/workflows by @​dependabot[bot] in #​379
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​381
• Add support for Python 3.14 by @​hugovk in #​382
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​383
• Update Windows file paths in README by @​ParadaCarleton in #​385
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​384
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​387
• Bump astral-sh/setup-uv from 6 to 7 in the all group by @​dependabot[bot] in #​388
• Drop 3.9 support by @​gaborbernat in #​389

New Contributors

• @​ParadaCarleton made their first contribution in #​385

Full Changelog: tox-dev/platformdirs@4.4.0...4.5.0

pylint-dev/pylint (pylint)

v4.0.2

Compare Source

False Positives Fixed

• Fix false positive for invalid-name on a partially uninferable module-level constant.

  Closes #​10652

• Fix a false positive for invalid-name on exclusive module-level assignments
  composed of three or more branches. We won't raise disallowed-name on module-level names that can't be inferred
  until a further refactor to remove this false negative is done.

  Closes #​10664

• Fix false positive for invalid-name for TypedDict instances.

  Closes #​10672

actions/python-versions (python)

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

step-security/harden-runner (step-security/harden-runner)

v2.13.2

Compare Source

What's Changed

• Fixed an issue where there was a limit of 512 allowed endpoints when using block egress policy. This restriction has been removed, allowing for an unlimited number of endpoints to be configured.
• Harden Runner now automatically detects if the agent is already pre-installed on a custom VM image used by a GitHub-hosted runner. When detected, the action will skip reinstallation and use the existing agent.

Full Changelog: step-security/harden-runner@v2.13.1...v2.13.2

hukkin/tomli (tomli)

v2.3.0

Compare Source

• Added
  • Binary wheels for Python 3.14 (also free-threaded)
• Performance
  • Reduced import time

tox-dev/tox (tox)

v4.32.0

Compare Source

What's Changed

• docs: Add Python 3.14 and 3.14t to config examples by @​cclauss in #​3626
• Fix broken log message (in that branch it did not match the arguments). by @​ionelmc in #​3634
• Allow braced range syntax in internal sections of tox.ini file by @​marcosboger in #​3631
• fix: ensure log folder is created before writing the execution logs by @​ssbarnea in #​3633
• TST: add weekly compatibility checks for CPython 3.15 by @​neutrinoceros in #​3629

New Contributors

• @​ionelmc made their first contribution in #​3634
• @​marcosboger made their first contribution in #​3631
• @​neutrinoceros made their first contribution in #​3629

Full Changelog: tox-dev/tox@4.31.0...4.32.0

v4.31.0

Compare Source

What's Changed

• Address a type-conversion noted during doc builds by @​kurtmckee in #​3623
• Add 3.14, drop 3.9 and support | union style by @​gaborbernat in #​3624

Full Changelog: tox-dev/tox@4.30.3...4.31.0

pypa/virtualenv (virtualenv)

v20.35.4

Compare Source

What's Changed

• release 20.35.3 by @​gaborbernat in #​2981
• fix: Prevent NameError when accessing _DISTUTILS_PATCH during file ov… by @​gracetyy in #​2982
• Upgrade pip and fix 3.15 picking old wheel by @​gaborbernat in #​2989

New Contributors

• @​gracetyy made their first contribution in #​2982

Full Changelog: pypa/virtualenv@20.35.3...20.35.4

v20.35.3

Compare Source

What's Changed

• release 20.35.1 by @​gaborbernat in #​2976
• Revert out effort to extract discovery by @​gaborbernat in #​2978
• release 20.35.2 by @​gaborbernat in #​2980
• test_too_many_open_files fails by @​gaborbernat in #​2979

Full Changelog: pypa/virtualenv@20.35.1...20.35.3

v20.35.2

Compare Source

What's Changed

• release 20.35.1 by @​gaborbernat in #​2976
• Revert out effort to extract discovery by @​gaborbernat in #​2978

Full Changelog: pypa/virtualenv@20.35.1...20.35.2

v20.35.1

Compare Source

What's Changed

• release 20.34.0 by @​gaborbernat in #​2954
• refactor: Decouple discovery module by @​esafak in #​2956
• feat: ensure creation of python3.exe and python3 on Windows by @​esafak in #​2957
• fix: Use getattr for tcl/tk library paths by @​esafak in #​2945
• fix: Import fs_is_case_sensitive absolutely in py_info.py by @​esafak in #​2960
• Declare 3.14 support by @​gaborbernat in #​2970
• release 20.35.0 by @​gaborbernat in #​2971
• fix: Patch get_interpreter to handle missing cache and app_data by @​esafak in #​2974
• Fix backwards incompatible changes on PythonInfo by @​gaborbernat in #​2975

Full Changelog: pypa/virtualenv@20.34.0...20.35.1

v20.35.0

Compare Source

What's Changed

• release 20.34.0 by @​gaborbernat in #​2954
• refactor: Decouple discovery module by @​esafak in #​2956
• feat: ensure creation of python3.exe and python3 on Windows by @​esafak in #​2957
• fix: Use getattr for tcl/tk library paths by @​esafak in #​2945
• fix: Import fs_is_case_sensitive absolutely in py_info.py by @​esafak in #​2960
• chore(deps): bump pypa/gh-action-pypi-publish from 1.12.3 to 1.13.0 in /.github/workflows by @​dependabot[bot] in #​2964
• Declare 3.14 support by @​gaborbernat in #​2970

Full Changelog: pypa/virtualenv@20.34.0...20.35.0

---

Configuration

📅 Schedule: Branch creation - "every month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}