Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: astral-sh/ty
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 0.0.23
Choose a base ref
...
head repository: astral-sh/ty
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 0.0.24
Choose a head ref
  • 11 commits
  • 15 files changed
  • 6 contributors

Commits on Mar 14, 2026

  1. Configuration menu
    Copy the full SHA
    2e3157b View commit details
    Browse the repository at this point in the history

Commits on Mar 16, 2026

  1. Update docker/build-push-action action to v7 (#3047)

    This PR contains the following updates:
    
    | Package | Type | Update | Change |
    |---|---|---|---|
    |
    [docker/build-push-action](https://redirect.github.com/docker/build-push-action)
    | action | major | `v6.19.2` → `v7.0.0` |
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>docker/build-push-action (docker/build-push-action)</summary>
    
    ###
    [`v7.0.0`](https://redirect.github.com/docker/build-push-action/releases/tag/v7.0.0)
    
    [Compare
    Source](https://redirect.github.com/docker/build-push-action/compare/v6.19.2...v7.0.0)
    
    - Node 24 as default runtime (requires [Actions Runner
    v2.327.1](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)
    or later) by [@&#8203;crazy-max](https://redirect.github.com/crazy-max)
    in
    [#&#8203;1470](https://redirect.github.com/docker/build-push-action/pull/1470)
    - Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and
    `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [#&#8203;1473](https://redirect.github.com/docker/build-push-action/pull/1473)
    - Remove legacy export-build tool support for build summary by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [#&#8203;1474](https://redirect.github.com/docker/build-push-action/pull/1474)
    - Switch to ESM and update config/test wiring by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [#&#8203;1466](https://redirect.github.com/docker/build-push-action/pull/1466)
    - Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
    from 1.11.1 to 3.0.0 in
    [#&#8203;1454](https://redirect.github.com/docker/build-push-action/pull/1454)
    - Bump
    [@&#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
    from 0.62.1 to 0.79.0 in
    [#&#8203;1453](https://redirect.github.com/docker/build-push-action/pull/1453)
    [#&#8203;1472](https://redirect.github.com/docker/build-push-action/pull/1472)
    [#&#8203;1479](https://redirect.github.com/docker/build-push-action/pull/1479)
    - Bump minimatch from 3.1.2 to 3.1.5 in
    [#&#8203;1463](https://redirect.github.com/docker/build-push-action/pull/1463)
    
    **Full Changelog**:
    <docker/build-push-action@v6.19.2...v7.0.0>
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
    Automerge - At any time (no schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    🔕 **Ignore**: Close this PR and you won't be reminded about this update
    again.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
    this box
    
    ---
    
    This PR was generated by [Mend Renovate](https://mend.io/renovate/).
    View the [repository job
    log](https://developer.mend.io/github/astral-sh/ty).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Mar 16, 2026
    Configuration menu
    Copy the full SHA
    fa4db72 View commit details
    Browse the repository at this point in the history
  2. Update docker/login-action action to v4 (#3048)

    This PR contains the following updates:
    
    | Package | Type | Update | Change |
    |---|---|---|---|
    | [docker/login-action](https://redirect.github.com/docker/login-action)
    | action | major | `v3.7.0` → `v4.0.0` |
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>docker/login-action (docker/login-action)</summary>
    
    ###
    [`v4.0.0`](https://redirect.github.com/docker/login-action/releases/tag/v4.0.0)
    
    [Compare
    Source](https://redirect.github.com/docker/login-action/compare/v3.7.0...v4.0.0)
    
    - Node 24 as default runtime (requires [Actions Runner
    v2.327.1](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)
    or later) by [@&#8203;crazy-max](https://redirect.github.com/crazy-max)
    in
    [#&#8203;929](https://redirect.github.com/docker/login-action/pull/929)
    - Switch to ESM and update config/test wiring by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [#&#8203;927](https://redirect.github.com/docker/login-action/pull/927)
    - Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
    from 1.11.1 to 3.0.0 in
    [#&#8203;919](https://redirect.github.com/docker/login-action/pull/919)
    - Bump
    [@&#8203;aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr)
    from 3.890.0 to 3.1000.0 in
    [#&#8203;909](https://redirect.github.com/docker/login-action/pull/909)
    [#&#8203;920](https://redirect.github.com/docker/login-action/pull/920)
    - Bump
    [@&#8203;aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public)
    from 3.890.0 to 3.1000.0 in
    [#&#8203;909](https://redirect.github.com/docker/login-action/pull/909)
    [#&#8203;920](https://redirect.github.com/docker/login-action/pull/920)
    - Bump
    [@&#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
    from 0.63.0 to 0.77.0 in
    [#&#8203;910](https://redirect.github.com/docker/login-action/pull/910)
    [#&#8203;928](https://redirect.github.com/docker/login-action/pull/928)
    - Bump
    [@&#8203;isaacs/brace-expansion](https://redirect.github.com/isaacs/brace-expansion)
    from 5.0.0 to 5.0.1 in
    [#&#8203;921](https://redirect.github.com/docker/login-action/pull/921)
    - Bump js-yaml from 4.1.0 to 4.1.1 in
    [#&#8203;901](https://redirect.github.com/docker/login-action/pull/901)
    
    **Full Changelog**:
    <docker/login-action@v3.7.0...v4.0.0>
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
    Automerge - At any time (no schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    🔕 **Ignore**: Close this PR and you won't be reminded about this update
    again.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
    this box
    
    ---
    
    This PR was generated by [Mend Renovate](https://mend.io/renovate/).
    View the [repository job
    log](https://developer.mend.io/github/astral-sh/ty).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Mar 16, 2026
    Configuration menu
    Copy the full SHA
    7da93b8 View commit details
    Browse the repository at this point in the history
  3. Update docker/metadata-action action to v6 (#3049)

    This PR contains the following updates:
    
    | Package | Type | Update | Change |
    |---|---|---|---|
    |
    [docker/metadata-action](https://redirect.github.com/docker/metadata-action)
    | action | major | `v5.10.0` → `v6.0.0` |
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>docker/metadata-action (docker/metadata-action)</summary>
    
    ###
    [`v6.0.0`](https://redirect.github.com/docker/metadata-action/releases/tag/v6.0.0)
    
    [Compare
    Source](https://redirect.github.com/docker/metadata-action/compare/v5.10.0...v6.0.0)
    
    - Node 24 as default runtime (requires [Actions Runner
    v2.327.1](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)
    or later) by [@&#8203;crazy-max](https://redirect.github.com/crazy-max)
    in
    [#&#8203;605](https://redirect.github.com/docker/metadata-action/pull/605)
    - List inputs now preserve `#` inside values while still supporting
    full-line `#` comments by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [#&#8203;607](https://redirect.github.com/docker/metadata-action/pull/607)
    - Switch to ESM and update config/test wiring by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [#&#8203;602](https://redirect.github.com/docker/metadata-action/pull/602)
    - Bump lodash from 4.17.21 to 4.17.23 in
    [#&#8203;588](https://redirect.github.com/docker/metadata-action/pull/588)
    - Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
    from 1.11.1 to 3.0.0 in
    [#&#8203;599](https://redirect.github.com/docker/metadata-action/pull/599)
    - Bump
    [@&#8203;actions/github](https://redirect.github.com/actions/github)
    from 6.0.1 to 9.0.0 in
    [#&#8203;597](https://redirect.github.com/docker/metadata-action/pull/597)
    - Bump
    [@&#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
    from 0.68.0 to 0.79.0 in
    [#&#8203;604](https://redirect.github.com/docker/metadata-action/pull/604)
    - Bump
    [@&#8203;isaacs/brace-expansion](https://redirect.github.com/isaacs/brace-expansion)
    from 5.0.0 to 5.0.1 in
    [#&#8203;600](https://redirect.github.com/docker/metadata-action/pull/600)
    - Bump semver from 7.7.3 to 7.7.4 in
    [#&#8203;603](https://redirect.github.com/docker/metadata-action/pull/603)
    
    **Full Changelog**:
    <docker/metadata-action@v5.10.0...v6.0.0>
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
    Automerge - At any time (no schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    🔕 **Ignore**: Close this PR and you won't be reminded about this update
    again.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
    this box
    
    ---
    
    This PR was generated by [Mend Renovate](https://mend.io/renovate/).
    View the [repository job
    log](https://developer.mend.io/github/astral-sh/ty).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Mar 16, 2026
    Configuration menu
    Copy the full SHA
    eb3f320 View commit details
    Browse the repository at this point in the history
  4. Update docker/setup-buildx-action action to v4 (#3050)

    This PR contains the following updates:
    
    | Package | Type | Update | Change |
    |---|---|---|---|
    |
    [docker/setup-buildx-action](https://redirect.github.com/docker/setup-buildx-action)
    | action | major | `v3.12.0` → `v4.0.0` |
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>docker/setup-buildx-action
    (docker/setup-buildx-action)</summary>
    
    ###
    [`v4.0.0`](https://redirect.github.com/docker/setup-buildx-action/releases/tag/v4.0.0)
    
    [Compare
    Source](https://redirect.github.com/docker/setup-buildx-action/compare/v3.12.0...v4.0.0)
    
    - Node 24 as default runtime (requires [Actions Runner
    v2.327.1](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)
    or later) by [@&#8203;crazy-max](https://redirect.github.com/crazy-max)
    in
    [#&#8203;483](https://redirect.github.com/docker/setup-buildx-action/pull/483)
    - Remove deprecated inputs/outputs by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [#&#8203;464](https://redirect.github.com/docker/setup-buildx-action/pull/464)
    - Switch to ESM and update config/test wiring by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [#&#8203;481](https://redirect.github.com/docker/setup-buildx-action/pull/481)
    - Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
    from 1.11.1 to 3.0.0 in
    [#&#8203;475](https://redirect.github.com/docker/setup-buildx-action/pull/475)
    - Bump
    [@&#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
    from 0.63.0 to 0.79.0 in
    [#&#8203;482](https://redirect.github.com/docker/setup-buildx-action/pull/482)
    [#&#8203;485](https://redirect.github.com/docker/setup-buildx-action/pull/485)
    - Bump js-yaml from 4.1.0 to 4.1.1 in
    [#&#8203;452](https://redirect.github.com/docker/setup-buildx-action/pull/452)
    - Bump lodash from 4.17.21 to 4.17.23 in
    [#&#8203;472](https://redirect.github.com/docker/setup-buildx-action/pull/472)
    - Bump minimatch from 3.1.2 to 3.1.5 in
    [#&#8203;480](https://redirect.github.com/docker/setup-buildx-action/pull/480)
    
    **Full Changelog**:
    <docker/setup-buildx-action@v3.12.0...v4.0.0>
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
    Automerge - At any time (no schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    🔕 **Ignore**: Close this PR and you won't be reminded about this update
    again.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
    this box
    
    ---
    
    This PR was generated by [Mend Renovate](https://mend.io/renovate/).
    View the [repository job
    log](https://developer.mend.io/github/astral-sh/ty).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Mar 16, 2026
    Configuration menu
    Copy the full SHA
    86d05eb View commit details
    Browse the repository at this point in the history
  5. Update actions/attest-build-provenance action to v4 (#3046)

    This PR contains the following updates:
    
    | Package | Type | Update | Change |
    |---|---|---|---|
    |
    [actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance)
    | action | major | `v3.1.0` → `v4.1.0` |
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>actions/attest-build-provenance
    (actions/attest-build-provenance)</summary>
    
    ###
    [`v4.1.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v4.1.0)
    
    [Compare
    Source](https://redirect.github.com/actions/attest-build-provenance/compare/v4.0.0...v4.1.0)
    
    > \[!NOTE]
    > As of version 4, `actions/attest-build-provenance` is simply a wrapper
    on top of
    [`actions/attest`](https://redirect.github.com/actions/attest).
    >
    > Existing applications may continue to use the
    `attest-build-provenance` action, but new implementations should use
    `actions/attest` instead.
    
    #### What's Changed
    
    - Update RELEASE.md docs by
    [@&#8203;bdehamer](https://redirect.github.com/bdehamer) in
    [#&#8203;836](https://redirect.github.com/actions/attest-build-provenance/pull/836)
    - Bump `actions/attest` from 4.0.0 to 4.1.0 by
    [@&#8203;bdehamer](https://redirect.github.com/bdehamer) in
    [#&#8203;838](https://redirect.github.com/actions/attest-build-provenance/pull/838)
    - Bump `@actions/attest` from 3.0.0 to 3.1.0 by
    [@&#8203;bdehamer](https://redirect.github.com/bdehamer) in
    [actions/attest#362](https://redirect.github.com/actions/attest/pull/362)
    - Bump `@actions/attest` from 3.1.0 to 3.2.0 by
    [@&#8203;bdehamer](https://redirect.github.com/bdehamer) in
    [actions/attest#365](https://redirect.github.com/actions/attest/pull/365)
    - Add new `subject-version` input for inclusion in storage record by
    [@&#8203;bdehamer](https://redirect.github.com/bdehamer) in
    [actions/attest#364](https://redirect.github.com/actions/attest/pull/364)
    - Add storage record content to README by
    [@&#8203;bdehamer](https://redirect.github.com/bdehamer) in
    [actions/attest#366](https://redirect.github.com/actions/attest/pull/366)
    
    **Full Changelog**:
    <actions/attest-build-provenance@v4.0.0...v4.1.0>
    
    ###
    [`v4.0.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v4.0.0)
    
    [Compare
    Source](https://redirect.github.com/actions/attest-build-provenance/compare/v3.2.0...v4.0.0)
    
    > \[!NOTE]
    > As of version 4, `actions/attest-build-provenance` is simply a wrapper
    on top of
    [`actions/attest`](https://redirect.github.com/actions/attest).
    >
    > Existing applications may continue to use the
    `attest-build-provenance` action, but new implementations should use
    `actions/attest` instead.
    
    #### What's Changed
    
    - Prepare v4 release by
    [@&#8203;bdehamer](https://redirect.github.com/bdehamer) in
    [#&#8203;835](https://redirect.github.com/actions/attest-build-provenance/pull/835)
    
    **Full Changelog**:
    <actions/attest-build-provenance@v3.2.0...v4.0.0>
    
    ###
    [`v3.2.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v3.2.0)
    
    [Compare
    Source](https://redirect.github.com/actions/attest-build-provenance/compare/v3.1.0...v3.2.0)
    
    #### What's Changed
    
    - Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
    from 1.11.1 to 2.0.1 by
    [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
    [#&#8203;776](https://redirect.github.com/actions/attest-build-provenance/pull/776)
    - Add more documentation on Artifact Metadata Storage Records by
    [@&#8203;malancas](https://redirect.github.com/malancas) in
    [#&#8203;797](https://redirect.github.com/actions/attest-build-provenance/pull/797)
    - Update actions/attest to latest version v3.2.0 by
    [@&#8203;malancas](https://redirect.github.com/malancas) in
    [#&#8203;812](https://redirect.github.com/actions/attest-build-provenance/pull/812)
    
    **Full Changelog**:
    <actions/attest-build-provenance@v3.1.0...v3.2.0>
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
    Automerge - At any time (no schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    🔕 **Ignore**: Close this PR and you won't be reminded about this update
    again.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
    this box
    
    ---
    
    This PR was generated by [Mend Renovate](https://mend.io/renovate/).
    View the [repository job
    log](https://developer.mend.io/github/astral-sh/ty).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Mar 16, 2026
    Configuration menu
    Copy the full SHA
    64fe9c2 View commit details
    Browse the repository at this point in the history
  6. Update astral-sh/setup-uv action to v7.6.0 (#3054)

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Mar 16, 2026
    Configuration menu
    Copy the full SHA
    3d12b2e View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    bc9e8a8 View commit details
    Browse the repository at this point in the history

Commits on Mar 18, 2026

  1. Typing FAQ: New entry explaining invariance (#3073)

    ## Summary
    
    Now that we do not union in `Unknown` into element types of invariant
    collections anymore, this question comes up more frequently. I'm taking
    a first stab at trying to explain this in a concise way. I am also
    planning to add a diagnostic hint that would be emitted in those
    situations, which could refer to this FAQ entry.
    sharkdp authored Mar 18, 2026
    Configuration menu
    Copy the full SHA
    95150e7 View commit details
    Browse the repository at this point in the history

Commits on Mar 19, 2026

  1. Update prek dependencies (#3045)

    This PR contains the following updates:
    
    | Package | Type | Update | Change | Pending |
    |---|---|---|---|---|
    |
    [astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit)
    | repository | patch | `v0.15.4` → `v0.15.5` | `v0.15.6` |
    |
    [astral-sh/uv-pre-commit](https://redirect.github.com/astral-sh/uv-pre-commit)
    | repository | patch | `0.10.7` → `0.10.9` | `0.10.11` (+1) |
    |
    [igorshubovych/markdownlint-cli](https://redirect.github.com/igorshubovych/markdownlint-cli)
    | repository | minor | `v0.47.0` → `v0.48.0` | |
    |
    [zizmorcore/zizmor-pre-commit](https://redirect.github.com/zizmorcore/zizmor-pre-commit)
    | repository | minor | `v1.22.0` → `v1.23.1` | |
    
    Note: The `pre-commit` manager in Renovate is not supported by the
    `pre-commit` maintainers or community. Please do not report any problems
    there, instead [create a Discussion in the Renovate
    repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
    if you have any questions.
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)</summary>
    
    ###
    [`v0.15.5`](https://redirect.github.com/astral-sh/ruff-pre-commit/releases/tag/v0.15.5)
    
    [Compare
    Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.15.4...v0.15.5)
    
    See: <https://github.com/astral-sh/ruff/releases/tag/0.15.5>
    
    </details>
    
    <details>
    <summary>astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)</summary>
    
    ###
    [`v0.10.9`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.10.9)
    
    [Compare
    Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.10.8...0.10.9)
    
    See: <https://github.com/astral-sh/uv/releases/tag/0.10.9>
    
    ###
    [`v0.10.8`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.10.8)
    
    [Compare
    Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.10.7...0.10.8)
    
    See: <https://github.com/astral-sh/uv/releases/tag/0.10.8>
    
    </details>
    
    <details>
    <summary>igorshubovych/markdownlint-cli
    (igorshubovych/markdownlint-cli)</summary>
    
    ###
    [`v0.48.0`](https://redirect.github.com/igorshubovych/markdownlint-cli/releases/tag/v0.48.0)
    
    [Compare
    Source](https://redirect.github.com/igorshubovych/markdownlint-cli/compare/v0.47.0...v0.48.0)
    
    - Update all dependencies via `Dependabot`
    
    </details>
    
    <details>
    <summary>zizmorcore/zizmor-pre-commit
    (zizmorcore/zizmor-pre-commit)</summary>
    
    ###
    [`v1.23.1`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.23.1)
    
    [Compare
    Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.23.0...v1.23.1)
    
    See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.23.1>
    
    ###
    [`v1.23.0`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.23.0)
    
    [Compare
    Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.22.0...v1.23.0)
    
    See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.23.0>
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
    Automerge - At any time (no schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    👻 **Immortal**: This PR will be recreated if closed unmerged. Get
    [config
    help](https://redirect.github.com/renovatebot/renovate/discussions) if
    that's undesired.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
    this box
    
    ---
    
    This PR was generated by [Mend Renovate](https://mend.io/renovate/).
    View the [repository job
    log](https://developer.mend.io/github/astral-sh/ty).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
    
    ---------
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    Co-authored-by: David Peter <[email protected]>
    renovate[bot] and sharkdp authored Mar 19, 2026
    Configuration menu
    Copy the full SHA
    a6f24e1 View commit details
    Browse the repository at this point in the history
  2. Bump version to 0.0.24 (#3084)

    Co-authored-by: Alex Waygood <[email protected]>
    sharkdp and AlexWaygood authored Mar 19, 2026
    Configuration menu
    Copy the full SHA
    8762330 View commit details
    Browse the repository at this point in the history
Loading