Update maintenance

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/checkout	action	patch	v4.1.6 -> v4.1.7
actions/dependency-review-action	action	patch	v4.3.2 -> v4.3.3
filelock		minor	==3.14.0 -> ==3.15.4
packaging		minor	==24.0 -> ==24.1
pylint (changelog)		patch	==3.2.2 -> ==3.2.5
pypa/gh-action-pypi-publish	action	digest	87b624f -> fb9fc6a
step-security/harden-runner	action	patch	v2.8.0 -> v2.8.1
tox (changelog)		patch	==4.15.0 -> ==4.15.1
virtualenv		patch	==20.26.2 -> ==20.26.3

---

Release Notes

actions/checkout (actions/checkout)

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/checkout/pull/1739
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1697
• Check out other refs/* by commit by @​orhantoy in https://github.com/actions/checkout/pull/1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in https://github.com/actions/checkout/pull/1776

actions/dependency-review-action (actions/dependency-review-action)

v4.3.3: Notes for v4.3.3

Compare Source

What's Changed

• Allow slashes in purl package names by @​juxtin in https://github.com/actions/dependency-review-action/pull/765
• use the v3 version of the deps.dev API by @​josieang in https://github.com/actions/dependency-review-action/pull/741
• PR with suggestions - [Improvement]: Help streamline / simplify dependency review action README by @​am-stead in https://github.com/actions/dependency-review-action/pull/773
• fix show-openssf-scorecard-levels input by @​ramann in https://github.com/actions/dependency-review-action/pull/776
• Updates to the contribution guidelines by @​jonjanego in https://github.com/actions/dependency-review-action/pull/778
• Create issue templates by @​jonjanego in https://github.com/actions/dependency-review-action/pull/777
• Fix the max comment length issue by @​jhutchings1 and @​elireisman in https://github.com/actions/dependency-review-action/pull/767
• Bump project version to 4.3.3 in prep for a release by @​elireisman in https://github.com/actions/dependency-review-action/pull/781

New Contributors

• @​josieang made their first contribution in https://github.com/actions/dependency-review-action/pull/741
• @​am-stead made their first contribution in https://github.com/actions/dependency-review-action/pull/773
• @​ramann made their first contribution in https://github.com/actions/dependency-review-action/pull/776

Full Changelog: actions/dependency-review-action@v4.3.2...v4.3.3

tox-dev/py-filelock (filelock)

v3.15.4

Compare Source

What's Changed

• Pass file_lock as positional argument by @​kwist-sgr in https://github.com/tox-dev/filelock/pull/347

Full Changelog: tox-dev/filelock@3.15.3...3.15.4

v3.15.3

Compare Source

What's Changed

• Add test for virtualenv stability by @​gaborbernat in https://github.com/tox-dev/filelock/pull/344
• Fix TypeError: _CountedFileLock.__init__() got an unexpected keyword argument 'timeout' by @​kwist-sgr in https://github.com/tox-dev/filelock/pull/345

Full Changelog: tox-dev/filelock@3.15.2...3.15.3

v3.15.2

Compare Source

What's Changed

• Use a metaclass to implement the singleton pattern by @​kwist-sgr in https://github.com/tox-dev/filelock/pull/340

New Contributors

• @​kwist-sgr made their first contribution in https://github.com/tox-dev/filelock/pull/340

Full Changelog: tox-dev/filelock@3.15.1...3.15.2

v3.15.1

Compare Source

What's Changed

• Hotfix: Restore init method; more robust initialization for singleton locks by @​ethanbb in https://github.com/tox-dev/filelock/pull/338

Full Changelog: tox-dev/filelock@3.15.0...3.15.1

v3.15.0

Compare Source

What's Changed

• asyncio support by @​Ovizro in https://github.com/tox-dev/filelock/pull/332
• Don't initialize BaseFileLock when just returning existing instance by @​ethanbb in https://github.com/tox-dev/filelock/pull/334

New Contributors

• @​Ovizro made their first contribution in https://github.com/tox-dev/filelock/pull/332
• @​ethanbb made their first contribution in https://github.com/tox-dev/filelock/pull/334

Full Changelog: tox-dev/filelock@3.14.0...3.15.0

pypa/packaging (packaging)

v24.1

Compare Source

What's Changed

• pyupgrade/black/isort/flake8 → ruff by @​DimitriPapadopoulos in https://github.com/pypa/packaging/pull/769
• Add support for Python 3.13 and drop EOL 3.7 by @​hugovk in https://github.com/pypa/packaging/pull/783
• Bump the github-actions group with 4 updates by @​dependabot in https://github.com/pypa/packaging/pull/782
• Fix typo in _parser docstring by @​pradyunsg in https://github.com/pypa/packaging/pull/784
• Modernise type annotations using FA rules from ruff by @​pradyunsg in https://github.com/pypa/packaging/pull/785
• Document markers.default_environment() by @​edgarrmondragon in https://github.com/pypa/packaging/pull/753
• Bump the github-actions group with 3 updates by @​dependabot in https://github.com/pypa/packaging/pull/789
• Work around platform.python_version() returning non PEP 440 compliant version for non-tagged CPython builds by @​sbidoul in https://github.com/pypa/packaging/pull/802

New Contributors

• @​dependabot made their first contribution in https://github.com/pypa/packaging/pull/782
• @​edgarrmondragon made their first contribution in https://github.com/pypa/packaging/pull/753

Full Changelog: pypa/packaging@24.0...24.1

pylint-dev/pylint (pylint)

v3.2.5

Compare Source

What's new in Pylint 3.2.5 ?

Release date: 2024-06-28

Other Bug Fixes

• Fixed a false positive unreachable-code when using typing.Any as return type in python
  3.8, the typing.NoReturn are not taken into account anymore for python 3.8 however.

  Closes #​9751

v3.2.4

Compare Source

What's new in Pylint 3.2.4?

Release date: 2024-06-26

False Positives Fixed

• Prevent emitting possibly-used-before-assignment when relying on names
  only potentially not defined in conditional blocks guarded by functions
  annotated with typing.Never or typing.NoReturn.

  Closes #​9674

Other Bug Fixes

• Fixed a crash when the lineno of a variable used as an annotation wasn't available for undefined-variable.

  Closes #​8866

• Fixed a crash when the start value in an enumerate was non-constant and impossible to infer
  (like inenumerate(apples, start=int(random_apple_index)) for unnecessary-list-index-lookup.

  Closes #​9078

• Fixed a crash in symilar when the -d or -i short option were not properly recognized.
  It's still impossible to do -d=1 (you must do -d 1).

  Closes #​9343

v3.2.3

Compare Source

False Positives Fixed

• Classes with only an Ellipsis (...) in their body do not trigger 'multiple-statements'
  anymore if they are inlined (in accordance with black's 2024 style).

  Closes #​9398

• Fix a false positive for redefined-outer-name when there is a name defined in an exception-handling block which shares the same name as a local variable that has been defined in a function body.

  Closes #​9671

• Fix a false positive for use-yield-from when using the return value from the yield atom.

  Closes #​9696

step-security/harden-runner (step-security/harden-runner)

v2.8.1

Compare Source

What's Changed

• Bug fix: Update isGitHubHosted implementation by @​varunsh-coder in https://github.com/step-security/harden-runner/pull/425
  The previous implementation incorrectly identified large GitHub-hosted runners as self-hosted runners. As a result, harden-runner was not executing on these large GitHub-hosted runners.

Full Changelog: step-security/harden-runner@v2...v2.8.1

tox-dev/tox (tox)

v4.15.1

Compare Source

What's Changed

• fix skip with package = wheel by @​MarcinKonowalczyk in https://github.com/tox-dev/tox/pull/3269
• Fixed typo in user guide. by @​carltongibson in https://github.com/tox-dev/tox/pull/3277
• Fix broad build privileges @​ GHA release workflow by @​webknjaz in https://github.com/tox-dev/tox/pull/3281
• Allow ConfigSet.add_config to receive parameterized generics for of_type. by @​ssbarnea in https://github.com/tox-dev/tox/pull/3288
• Fix section substitution with setenv by @​JJLLWW in https://github.com/tox-dev/tox/pull/3289

New Contributors

• @​MarcinKonowalczyk made their first contribution in https://github.com/tox-dev/tox/pull/3269
• @​carltongibson made their first contribution in https://github.com/tox-dev/tox/pull/3277
• @​JJLLWW made their first contribution in https://github.com/tox-dev/tox/pull/3289

Full Changelog: tox-dev/tox@4.15.0...4.15.1

pypa/virtualenv (virtualenv)

v20.26.3

Compare Source

What's Changed

• release 20.26.2 by @​gaborbernat in https://github.com/pypa/virtualenv/pull/2724
• Bump embeded wheels by @​gaborbernat in https://github.com/pypa/virtualenv/pull/2741

Full Changelog: pypa/virtualenv@20.26.2...20.26.3

---

Configuration

📅 Schedule: Branch creation - "every month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}