fix(deps): update minor dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
@azure/storage-blob (source)	12.24.0 -> 12.25.0					dependencies	minor
@reduxjs/toolkit (source)	2.2.8 -> 2.3.0					dependencies	minor
actions/checkout	v4.1.7 -> v4.2.2					action	minor
actions/upload-artifact	v4.3.6 -> v4.4.3					action	minor
azure-identity (source)	==1.17.1 -> ==1.19.0					packages	minor
azure-keyvault-secrets (source)	==4.8.0 -> ==4.9.0					packages	minor
azure-storage-blob (source)	==12.22.0 -> ==12.23.1					packages	minor
azure/login	v2.1.1 -> v2.2.0					action	minor
black (changelog)	==24.8.0 -> ==24.10.0					dev-packages	minor
cypress (source)	13.13.3 -> 13.15.1					devDependencies	minor
docker/build-push-action	v6.7.0 -> v6.9.0					action	minor
docker/setup-buildx-action	v3.6.1 -> v3.7.1					action	minor
eslint-plugin-import	2.29.1 -> 2.31.0					dependencies	minor
eslint-plugin-testing-library	6.3.4 -> 6.4.0					dependencies	minor
flake8-bugbear (changelog)	==24.4.26 -> ==24.8.19					dev-packages	minor
globals	15.9.0 -> 15.11.0					devDependencies	minor
ipython	==8.26.0 -> ==8.29.0					dev-packages	minor
marshmallow-sqlalchemy (changelog)	==1.0.0 -> ==1.1.0					packages	minor
msw (source)	2.3.5 -> 2.5.1					devDependencies	minor	2.5.2
mypy (source, changelog)	==1.11.2 -> ==1.13.0					packages	minor
nox	==2024.4.15 -> ==2024.10.9					dev-packages	minor
numpy (source, changelog)	==2.0.1 -> ==2.1.2					dev-packages	minor
pytest-bdd (source)	==7.2.0 -> ==7.3.0					dev-packages	minor
sass	1.79.6 -> 1.80.4					dependencies	minor
zaproxy/action-full-scan	v0.10.0 -> v0.11.0					action	minor

---

Release Notes

Azure/azure-sdk-for-js (@​azure/storage-blob)

v12.25.0

Compare Source

reduxjs/redux-toolkit (@​reduxjs/toolkit)

v2.3.0

Compare Source

This feature release adds a new RTK Query upsertQueryEntries util to batch-upsert cache entries more efficiently, passes through additional values for use in prepareHeaders, and exports additional TS types around query options and selectors.

Changelog

upsertQueryEntries

RTK Query already had an upsertQueryData thunk that would upsert a single cache entry. However, some users wanted to upsert many cache entries (potentially hundreds or thousands), and found that upsertQueryData had poor performance in those cases. This is because upsertQueryData runs the full async request handling sequence, including dispatching both pending and fulfilled actions, each of which run the main reducer and update store subscribers. That means there's 2N store / UI updates per item, so upserting hundreds of items becomes extremely perf-intensive.

RTK Query now includes an api.util.upsertQueryEntries action that is meant to handle the batched upsert use case more efficiently. It's a single synchronous action that accepts an array of many {endpointName, arg, value} entries to upsert. This results in a single store update, making this vastly better for performance vs many individual upsertQueryData calls.

We see this as having two main use cases. The first is prefilling the cache with data retrieved from storage on app startup (and it's worth noting that upsertQueryEntries can accept entries for many different endpoints as part of the same array).

The second is to act as a "pseudo-normalization" tool. RTK Query is not a "normalized" cache. However, there are times when you may want to prefill other cache entries with the contents of another endpoint, such as taking the results of a getPosts list endpoint response and prefilling the individual getPost(id) endpoint cache entries, so that components that reference an individual item endpoint already have that data available.

Currently, you can implement the "pseudo-normalization" approach by dispatching upsertQueryEntries in an endpoint lifecycle, like this:

const api = createApi({
  endpoints: (build) => ({
    getPosts: build.query<Post[], void>({
      query: () => '/posts',
      async onQueryStarted(_, { dispatch, queryFulfilled }) {
        const res = await queryFulfilled
        const posts = res.data

        // Pre-fill the individual post entries with the results
        // from the list endpoint query
        dispatch(
          api.util.upsertQueryEntries(
            posts.map((post) => ({
              endpointName: 'getPost',
              arg: { id: post.id },
              value: post,
            })),
          ),
        )
      },
    }),
    getPost: build.query<Post, Pick<Post, 'id'>>({
      query: (post) => `post/${post.id}`,
    }),
  }),
})

Down the road we may add a new option to query endpoints that would let you provide the mapping function and have it automatically update the corresponding entries.

For additional comparisons between upsertQueryData and upsertQueryEntries, see the upsertQueryEntries API reference.

prepareHeaders Options

The prepareHeaders callback for fetchBaseQuery now receives two additional values in the api argument:

• arg: the URL string or FetchArgs object that was passed in to fetchBaseQuery for this endpoint
• extraOptions: any extra options that were provided to the base query

Additional TS Types

We've added a TypedQueryStateSelector type that can be used to pre-type selectors for use with selectFromResult:

const typedSelectFromResult: TypedQueryStateSelector<
  PostsApiResponse,
  QueryArgument,
  BaseQueryFunction,
  SelectedResult
> = (state) => ({ posts: state.data?.posts ?? EMPTY_ARRAY })

function PostsList() {
  const { posts } = useGetPostsQuery(undefined, {
    selectFromResult: typedSelectFromResult,
  })
}

We've also exported several additional TS types around base queries and tag definitions.

What's Changed

• Fix serializeQueryArgs type by @​Reedgern in https://github.com/reduxjs/redux-toolkit/pull/4658
• Add the TypedQueryStateSelector helper type by @​aryaemami59 in https://github.com/reduxjs/redux-toolkit/pull/4656
• Pass query args to prepareHeaders function by @​kyletsang in https://github.com/reduxjs/redux-toolkit/pull/4638
• Implement a util function to batch-upsert cache entries by @​markerikson in https://github.com/reduxjs/redux-toolkit/pull/4561
• fetchBaseQuery: expose extraOptions to prepareHeaders by @​phryneas in https://github.com/reduxjs/redux-toolkit/pull/4291

Full Changelog: reduxjs/redux-toolkit@v2.2.8...v2.3.0

actions/checkout (actions/checkout)

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/upload-artifact (actions/upload-artifact)

v4.4.3

Compare Source

What's Changed

• Undo indirect dependency updates from #​627 by @​joshmgross in https://github.com/actions/upload-artifact/pull/632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

• Bump @actions/artifact to 2.1.11 by @​robherley in https://github.com/actions/upload-artifact/pull/627
  • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

• Add a section about hidden files by @​joshmgross in https://github.com/actions/upload-artifact/pull/607
• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/upload-artifact/pull/621
• Update @​actions/artifact to latest version, includes symlink and timeout fixes by @​robherley in https://github.com/actions/upload-artifact/pull/625

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/upload-artifact/pull/621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

Azure/azure-sdk-for-python (azure-identity)

v1.19.0

Compare Source

1.19.0 (2021-09-30)

Breaking Changes in the Provisional azure.core.rest package

• azure.core.rest.HttpResponse and azure.core.rest.AsyncHttpResponse are now abstract base classes. They should not be initialized directly, instead
  your transport responses should inherit from them and implement them.

• The properties of the azure.core.rest responses are now all read-only

• HttpLoggingPolicy integrates logs into one record #​19925

v1.18.0

Compare Source

1.18.0 (2024-09-19)

Features Added

• All credentials now implement the SupportsTokenInfo or AsyncSupportsTokenInfo protocol. Each credential now has a get_token_info method which returns an AccessTokenInfo object. The get_token_info method is an alternative method to get_token that improves support for more complex authentication scenarios. (#​36882)
  • Information on when a token should be refreshed is now saved in AccessTokenInfo (if available).

Other Changes

• Added identity config validation to ManagedIdentityCredential to avoid non-deterministic states (e.g. both resource_id and object_id are specified). (#​36950)
• Additional validation was added for ManagedIdentityCredential in Azure Cloud Shell environments. (#​36438)
• Bumped minimum dependency on azure-core to >=1.31.0.

azure/login (azure/login)

v2.2.0: Azure Login Action v2.2.0

Compare Source

What's Changed

• Replace az --version with az version by @​MoChilia in https://github.com/Azure/login/pull/450
• Update documentation for setting audience when environment is set by @​jcantosz in https://github.com/Azure/login/pull/455
• Fix #​459: Errors when registering cloud profile for AzureStack by @​MoChilia in https://github.com/Azure/login/pull/466
• Fix typo by @​KronosTheLate in https://github.com/Azure/login/pull/483
• move pre cleanup to main and add pre-if and post-if by @​YanaXu in https://github.com/Azure/login/pull/484

New Contributors

• @​jcantosz made their first contribution in https://github.com/Azure/login/pull/455
• @​KronosTheLate made their first contribution in https://github.com/Azure/login/pull/483

Full Changelog: Azure/login@v2.1.1...v2.2.0

psf/black (black)

v24.10.0

Compare Source

Highlights

• Black is now officially tested with Python 3.13 and provides Python 3.13
  mypyc-compiled wheels. (#​4436) (#​4449)
• Black will issue an error when used with Python 3.12.5, due to an upstream memory
  safety issue in Python 3.12.5 that can cause Black's AST safety checks to fail. Please
  use Python 3.12.6 or Python 3.12.4 instead. (#​4447)
• Black no longer supports running with Python 3.8 (#​4452)

Stable style

• Fix crashes involving comments in parenthesised return types or X | Y style unions.
  (#​4453)
• Fix skipping Jupyter cells with unknown %% magic (#​4462)

Preview style

• Fix type annotation spacing between * and more complex type variable tuple (i.e. def fn(*args: *tuple[*Ts, T]) -> None: pass) (#​4440)

Caching

• Fix bug where the cache was shared between runs with and without --unstable (#​4466)

Packaging

• Upgrade version of mypyc used to 1.12 beta (#​4450) (#​4449)
• blackd now requires a newer version of aiohttp. (#​4451)

Output

• Added Python target version information on parse error (#​4378)
• Add information about Black version to internal error messages (#​4457)

cypress-io/cypress (cypress)

v13.15.1

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-15-1

v13.15.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-15-0

v13.14.2

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-14-2

v13.14.1

Compare Source

v13.14.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-14-0

docker/build-push-action (docker/build-push-action)

v6.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.38.0 to 0.39.0 in https://github.com/docker/build-push-action/pull/1234
• Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/build-push-action/pull/1232

Full Changelog: docker/build-push-action@v6.8.0...v6.9.0

v6.8.0

Compare Source

• Bump @​docker/actions-toolkit from 0.37.1 to 0.38.0 in https://github.com/docker/build-push-action/pull/1230

Full Changelog: docker/build-push-action@v6.7.0...v6.8.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.7.1

Compare Source

• Switch back to uuid package by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/369

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

v3.7.0

Compare Source

• Always set buildkitd-flags if opt-in by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/363
• Remove uuid package and switch to crypto by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/366
• Bump @​docker/actions-toolkit from 0.35.0 to 0.39.0 in https://github.com/docker/setup-buildx-action/pull/362
• Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/setup-buildx-action/pull/354

Full Changelog: docker/setup-buildx-action@v3.6.1...v3.7.0

import-js/eslint-plugin-import (eslint-plugin-import)

v2.31.0

Compare Source

Added

• support eslint v9 ([#​2996], thanks [@​G-Rath] [@​michaelfaith])
• [order]: allow validating named imports ([#​3043], thanks [@​manuth])
• [extensions]: add the checkTypeImports option ([#​2817], thanks [@​phryneas])

Fixed

• ExportMap / flat config: include languageOptions in context ([#​3052], thanks [@​michaelfaith])
• [no-named-as-default]: Allow using an identifier if the export is both a named and a default export ([#​3032], thanks [@​akwodkiewicz])
• [export]: False positive for exported overloaded functions in TS ([#​3065], thanks [@​liuxingbaoyu])
• exportMap: export map cache is tainted by unreliable parse results ([#​3062], thanks [@​michaelfaith])
• exportMap: improve cacheKey when using flat config ([#​3072], thanks [@​michaelfaith])
• adjust "is source type module" checks for flat config ([#​2996], thanks [@​G-Rath])

Changed

• [Docs] [no-relative-packages]: fix typo ([#​3066], thanks [@​joshuaobrien])
• [Performance] [no-cycle]: dont scc for each linted file ([#​3068], thanks [@​soryy708])
• [Docs] [no-cycle]: add disableScc to docs ([#​3070], thanks [@​soryy708])
• [Tests] use re-exported RuleTester ([#​3071], thanks [@​G-Rath])
• [Docs] [no-restricted-paths]: fix grammar ([#​3073], thanks [@​unbeauvoyage])
• [Tests] [no-default-export], [no-named-export]: add test case (thanks [@​G-Rath])

v2.30.0

Compare Source

Added

• [dynamic-import-chunkname]: add allowEmpty option to allow empty leading comments ([#​2942], thanks [@​JiangWeixian])
• [dynamic-import-chunkname]: Allow empty chunk name when webpackMode: 'eager' is set; add suggestions to remove name in eager mode ([#​3004], thanks [@​amsardesai])
• [no-unused-modules]: Add ignoreUnusedTypeExports option ([#​3011], thanks [@​silverwind])
• add support for Flat Config ([#​3018], thanks [@​michaelfaith])

Fixed

• [no-extraneous-dependencies]: allow wrong path ([#​3012], thanks [@​chabb])
• [no-cycle]: use scc algorithm to optimize ([#​2998], thanks [@​soryy708])
• [no-duplicates]: Removing duplicates breaks in TypeScript ([#​3033], thanks [@​yesl-kim])
• [newline-after-import]: fix considerComments option when require ([#​2952], thanks [@​developer-bandi])
• [order]: do not compare first path segment for relative paths ([#​2682]) ([#​2885], thanks [@​mihkeleidast])

Changed

• [Docs] no-extraneous-dependencies: Make glob pattern description more explicit ([#​2944], thanks [@​mulztob])
• [no-unused-modules]: add console message to help debug [#​2866]
• [Refactor] ExportMap: make procedures static instead of monkeypatching exportmap ([#​2982], thanks [@​soryy708])
• [Refactor] ExportMap: separate ExportMap instance from its builder logic ([#​2985], thanks [@​soryy708])
• [Docs] order: Add a quick note on how unbound imports and --fix ([#​2640], thanks [@​minervabot])
• [Tests] appveyor -> GHA (run tests on Windows in both pwsh and WSL + Ubuntu) ([#​2987], thanks [@​joeyguerra])
• [actions] migrate OSX tests to GHA ([ljharb#37], thanks [@​aks-])
• [Refactor] exportMapBuilder: avoid hoisting ([#​2989], thanks [@​soryy708])
• [Refactor] ExportMap: extract "builder" logic to separate files ([#​2991], thanks [@​soryy708])
• [Docs] [order]: update the description of the pathGroupsExcludedImportTypes option ([#​3036], thanks [@​liby])
• [readme] Clarify how to install the plugin ([#​2993], thanks [@​jwbth])

testing-library/eslint-plugin-testing-library (eslint-plugin-testing-library)

v6.4.0

Compare Source

Features

• support ESLint v9 (#​928) (657ed01)

PyCQA/flake8-bugbear (flake8-bugbear)

v24.8.19

Compare Source

• B910: implement to suggest using Counter() instead of defaultdict(int) (#​489)
• B901: Do not trigger with explicit Generator return type (#​481)
• B008: add some comments, rename b008_extend_immutable_calls (#​476)
• B040: exception with note added not reraised or used (#​477)
• B039, Add ContextVar with mutable literal or function call as default
• B040: Add Exception with added note not reraised. (#​474)
• Run tests in Python 3.13
• Type annotated code (#​481 + #​483)
• Replace hash with unsafe_hash (#​486)

sindresorhus/globals (globals)

v15.11.0

Compare Source

v15.10.0

Compare Source

• Update globals (#​264) 3cbce2d

ipython/ipython (ipython)

v8.29.0

Compare Source

v8.28.0

Compare Source

v8.27.0

Compare Source

marshmallow-code/marshmallow-sqlalchemy (marshmallow-sqlalchemy)

v1.1.0

Compare Source

mswjs/msw (msw)

v2.5.1

Compare Source

v2.5.1 (2024-10-24)

Bug Fixes

• update@inquirer/confirm requirement to 5.0.0 (#​2325) (b65c0a8) @​greysteil @​kettanaito

v2.5.0

Compare Source

v2.5.0 (2024-10-22)

Features

• isolate parent and child frames when handling requests (#​2324) (a1a81ba) @​kettanaito

v2.4.13

Compare Source

v2.4.13 (2024-10-22)

Bug Fixes

• update @inquirer/confirm to 4.0 (#​2300) (0cf9cce) @​greysteil @​kettanaito

v2.4.12

Compare Source

v2.4.12 (2024-10-21)

Bug Fixes

• node: preserve headers instanceof when recording raw headers (#​2321) (a58a300) @​paoloricciuti

v2.4.11

Compare Source

v2.4.11 (2024-10-14)

Bug Fixes

• update dependencies (#​2313) (8f68f0a) @​kettanaito

v2.4.10

Compare Source

v2.4.10 (2024-10-11)

Bug Fixes

• setupWorker: perform worker update in the background (#​2311) (8e40724) @​kettanaito

v2.4.9

Compare Source

v2.4.9 (2024-09-20)

Bug Fixes

• ClientRequest: support Request as init when recording raw headers (#​2293) (bf982ea) @​kettanaito

v2.4.8

Compare Source

v2.4.8 (2024-09-17)

Bug Fixes

• address express and path-to-regexp vulnerabilities (#​2285) (e3487bc) @​markmssd

v2.4.7

Compare Source

v2.4.7 (2024-09-15)

Bug Fixes

• ClientRequest: prevent duplicates when recording set headers (#​2284) (e04eb8f) @​kettanaito
• use Object.defineProperty for Headers proxy (#​2283) (94e17be) @​kettanaito

v2.4.6

Compare Source

v2.4.6 (2024-09-13)

Bug Fixes

• xhr: clone request body before calculating its size (#​2282) (397444b) @​kettanaito

v2.4.5

Compare Source

v2.4.5 (2024-09-11)

Bug Fixes

• remove cookies with max-age=0 from cookie store (#​2275) (c307ab2) @​kettanaito

v2.4.4

Compare Source

v2.4.4 (2024-09-08)

Bug Fixes

• fetch: follow mocked redirect responses (#​2268) (f5785bf) [@​kettanaito](https://redirect.gi

[johndeange]

Very old renovate PR - closing out to generate a new version.