Comparing changes

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v6.0.2` → `v7.0.0` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2454](https://redirect.github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2458](https://redirect.github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2460](https://redirect.github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2461](https://redirect.github.com/actions/checkout/pull/2461) - Bump [@actions/core](https://redirect.github.com/actions/core) and [@actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2459](https://redirect.github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2463](https://redirect.github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2462](https://redirect.github.com/actions/checkout/pull/2462) ### [`v7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v7.0.0) - Block checking out fork PR for pull\_request\_target and workflow\_run by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2454](https://redirect.github.com/actions/checkout/pull/2454) - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2458](https://redirect.github.com/actions/checkout/pull/2458) - Bump flatted from 3.3.1 to 3.4.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2460](https://redirect.github.com/actions/checkout/pull/2460) - Bump js-yaml from 4.1.0 to 4.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2461](https://redirect.github.com/actions/checkout/pull/2461) - Bump [@actions/core](https://redirect.github.com/actions/core) and [@actions/tool-cache](https://redirect.github.com/actions/tool-cache) and Remove uuid by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2459](https://redirect.github.com/actions/checkout/pull/2459) - upgrade module to esm and update dependencies by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2463](https://redirect.github.com/actions/checkout/pull/2463) - Bump the minor-npm-dependencies group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2462](https://redirect.github.com/actions/checkout/pull/2462) ### [`v6.0.3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@yaananth](https://redirect.github.com/yaananth) in [#2439](https://redirect.github.com/actions/checkout/pull/2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://redirect.github.com/yaananth) in [#2414](https://redirect.github.com/actions/checkout/pull/2414) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 4am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/cache](https://redirect.github.com/actions/cache) | action | major | `v5` → `v6` | --- ### Release Notes <details> <summary>actions/cache (actions/cache)</summary> ### [`v6.0.0`](https://redirect.github.com/actions/cache/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/actions/cache/compare/v6.0.0...v6.0.0) #### What's Changed - Update packages, migrate to ESM by [@Samirat](https://redirect.github.com/Samirat) in [#1760](https://redirect.github.com/actions/cache/pull/1760) **Full Changelog**: <actions/cache@v5...v6.0.0> ### [`v6`](https://redirect.github.com/actions/cache/compare/v5.0.5...v6.0.0) [Compare Source](https://redirect.github.com/actions/cache/compare/v5.0.5...v6.0.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This follows [PEP 639](https://peps.python.org/pep-0639/) to improve the license metadata: - Use a text SPDX licence identifier instead of a table, which is deprecated - Remove licence classifier, which is deprecated

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | minor | `v6.2.0` → `v6.3.0` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v6.3.0`](https://redirect.github.com/actions/setup-python/releases/tag/v6.3.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v6.2.0...v6.3.0) ##### What's Changed ##### Enhancement - Add RHEL support and include Linux distro in cache keys by [@priyagupta108](https://redirect.github.com/priyagupta108) in [#1323](https://redirect.github.com/actions/setup-python/pull/1323) - Fix pip cache error handling on Windows by [@priyagupta108](https://redirect.github.com/priyagupta108) in [#1040](https://redirect.github.com/actions/setup-python/pull/1040) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@dependabot](https://redirect.github.com/dependabot) in [#1281](https://redirect.github.com/actions/setup-python/pull/1281) - Upgrade actions dependencies by [@gowridurgad](https://redirect.github.com/gowridurgad) with [@Copilot](https://redirect.github.com/Copilot) in [#1303](https://redirect.github.com/actions/setup-python/pull/1303) - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) to 5.1.0, log cache write denied by [@jasongin](https://redirect.github.com/jasongin) in [#1324](https://redirect.github.com/actions/setup-python/pull/1324) - Upgrade dependency versions and test workflow configuration by [@HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [#1322](https://redirect.github.com/actions/setup-python/pull/1322) ##### Documentation - Update advanced-usage.md by [@Dunky-Z](https://redirect.github.com/Dunky-Z) in [#811](https://redirect.github.com/actions/setup-python/pull/811) ##### New Contributors - [@gowridurgad](https://redirect.github.com/gowridurgad) with [@Copilot](https://redirect.github.com/Copilot) made their first contribution in [#1303](https://redirect.github.com/actions/setup-python/pull/1303) - [@jasongin](https://redirect.github.com/jasongin) made their first contribution in [#1324](https://redirect.github.com/actions/setup-python/pull/1324) - [@Dunky-Z](https://redirect.github.com/Dunky-Z) made their first contribution in [#811](https://redirect.github.com/actions/setup-python/pull/811) **Full Changelog**: <actions/setup-python@v6...v6.3.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [typer](https://redirect.github.com/fastapi/typer) ([changelog](https://typer.tiangolo.com/release-notes/)) | `>0.16,<0.27` → `>0.16,<0.28` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/typer/0.27.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/typer/0.26.7/0.27.0?slim=true) | --- ### Release Notes <details> <summary>fastapi/typer (typer)</summary> ### [`v0.27.0`](https://redirect.github.com/fastapi/typer/releases/tag/0.27.0) [Compare Source](https://redirect.github.com/fastapi/typer/compare/0.26.8...0.27.0) ##### Breaking Changes - 💥 Update metavar printing. PR [#1863](https://redirect.github.com/fastapi/typer/pull/1863) by [@svlandeg](https://redirect.github.com/svlandeg). ##### Internal - ⬆ Bump the python-packages group across 1 directory with 5 updates. PR [#1896](https://redirect.github.com/fastapi/typer/pull/1896) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆️ Bump ty to 0.0.53. PR [#1877](https://redirect.github.com/fastapi/typer/pull/1877) by [@YuriiMotov](https://redirect.github.com/YuriiMotov). - ⬆ Bump the github-actions group across 1 directory with 4 updates. PR [#1897](https://redirect.github.com/fastapi/typer/pull/1897) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - 🔧 Set Dependabot schedule interval to "monthly". PR [#1873](https://redirect.github.com/fastapi/typer/pull/1873) by [@YuriiMotov](https://redirect.github.com/YuriiMotov). - ⬆ Bump pre-commit hooks. PR [#1895](https://redirect.github.com/fastapi/typer/pull/1895) by [@tiangolo](https://redirect.github.com/tiangolo). - 👷 Add GH workflow to bump pre-commit hook versions. PR [#1872](https://redirect.github.com/fastapi/typer/pull/1872) by [@YuriiMotov](https://redirect.github.com/YuriiMotov). - 👷 Fix latest-changes checkout target. PR [#1883](https://redirect.github.com/fastapi/typer/pull/1883) by [@tiangolo](https://redirect.github.com/tiangolo). - ⬆️ Update issue-manager to 0.8.1. PR [#1880](https://redirect.github.com/fastapi/typer/pull/1880) by [@tiangolo](https://redirect.github.com/tiangolo). - ⬆ Bump the github-actions group across 1 directory with 8 updates. PR [#1874](https://redirect.github.com/fastapi/typer/pull/1874) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump the python-packages group across 1 directory with 5 updates. PR [#1876](https://redirect.github.com/fastapi/typer/pull/1876) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆️ Update latest-changes to 0.6.1. PR [#1879](https://redirect.github.com/fastapi/typer/pull/1879) by [@tiangolo](https://redirect.github.com/tiangolo). - ⬆ Bump <https://github.com/crate-ci/typos> from v1.46.0 to 1.47.2 in the pre-commit group across 1 directory. PR [#1834](https://redirect.github.com/fastapi/typer/pull/1834) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump pydantic-settings from 2.14.1 to 2.14.2. PR [#1849](https://redirect.github.com/fastapi/typer/pull/1849) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). ### [`v0.26.8`](https://redirect.github.com/fastapi/typer/releases/tag/0.26.8) [Compare Source](https://redirect.github.com/fastapi/typer/compare/0.26.7...0.26.8) ##### Fixes - 🐛 Make second column of Rich help output reflect the type consistently, even when using `metavar`. PR [#1410](https://redirect.github.com/fastapi/typer/pull/1410) by [@svlandeg](https://redirect.github.com/svlandeg). - 🐛 Fix formatting in `NoSuchOption.format_message()`. PR [#1843](https://redirect.github.com/fastapi/typer/pull/1843) by [@foomunleong](https://redirect.github.com/foomunleong). ##### Docs - 📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR [#1850](https://redirect.github.com/fastapi/typer/pull/1850) by [@tiangolo](https://redirect.github.com/tiangolo). - 📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR [#1826](https://redirect.github.com/fastapi/typer/pull/1826) by [@phalberg](https://redirect.github.com/phalberg). ##### Internal - 👷 Simplify pull request workflow triggers. PR [#1858](https://redirect.github.com/fastapi/typer/pull/1858) by [@tiangolo](https://redirect.github.com/tiangolo). - 👷 Update issue-manager to 0.7.1. PR [#1857](https://redirect.github.com/fastapi/typer/pull/1857) by [@tiangolo](https://redirect.github.com/tiangolo). - ⬆️ Update issue-manager to 0.7.0. PR [#1856](https://redirect.github.com/fastapi/typer/pull/1856) by [@tiangolo](https://redirect.github.com/tiangolo). - 🔒️ Update zizmor workflow security checks. PR [#1854](https://redirect.github.com/fastapi/typer/pull/1854) by [@tiangolo](https://redirect.github.com/tiangolo). - ⬆️ Group Dependabot updates. PR [#1853](https://redirect.github.com/fastapi/typer/pull/1853) by [@tiangolo](https://redirect.github.com/tiangolo). - ⬆️ Update Dependabot ecosystem coverage. PR [#1851](https://redirect.github.com/fastapi/typer/pull/1851) by [@tiangolo](https://redirect.github.com/tiangolo). - 👷 Fix alls-green test dependency. PR [#1848](https://redirect.github.com/fastapi/typer/pull/1848) by [@tiangolo](https://redirect.github.com/tiangolo). - ⬆ Bump cryptography from 46.0.7 to 48.0.1. PR [#1841](https://redirect.github.com/fastapi/typer/pull/1841) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump pyjwt from 2.12.0 to 2.13.0. PR [#1839](https://redirect.github.com/fastapi/typer/pull/1839) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump the github-actions group across 1 directory with 3 updates. PR [#1828](https://redirect.github.com/fastapi/typer/pull/1828) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). - ⬆ Bump the python-packages group with 3 updates. PR [#1829](https://redirect.github.com/fastapi/typer/pull/1829) by [@dependabot\[bot\]](https://redirect.github.com/apps/dependabot). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish) | action | patch | `v1.14.0` → `v1.14.1` | --- ### Release Notes <details> <summary>pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)</summary> ### [`v1.14.1`](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/v1.14.0...v1.14.1) [Compare Source](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/v1.14.0...v1.14.1) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | major | `v6.3.0` → `v7.0.0` | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v7.0.0`](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v7.0.0...v7.0.0) ### [`v7`](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v6.3.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/cache](https://redirect.github.com/actions/cache) | action | minor | `v6` → `v6.1.0` | --- ### Release Notes <details> <summary>actions/cache (actions/cache)</summary> ### [`v6.1.0`](https://redirect.github.com/actions/cache/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/actions/cache/compare/v6.0.0...v6.1.0) ##### What's Changed - Bump [@actions/cache](https://redirect.github.com/actions/cache) to v6.1.0 - handle read-only cache access by [@jasongin](https://redirect.github.com/jasongin) in [#1768](https://redirect.github.com/actions/cache/pull/1768) **Full Changelog**: <actions/cache@v6...v6.1.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | pinDigest | → `9c091bb` | | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | pinDigest | → `3e5f45b` | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | pinDigest | → `5fda3b9` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | pinDigest | → `043fb46` | | [pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish) | action | pinDigest | → `ba38be9` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.1) - Bump github/codeql-action from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2475](https://redirect.github.com/actions/checkout/pull/2475) - Bump actions/setup-node from 4 to 6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2477](https://redirect.github.com/actions/checkout/pull/2477) - Bump docker/build-push-action from 6.5.0 to 7.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2478](https://redirect.github.com/actions/checkout/pull/2478) - Bump docker/login-action from 3.3.0 to 4.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2479](https://redirect.github.com/actions/checkout/pull/2479) - Bump actions/checkout from 6 to 7 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2488](https://redirect.github.com/actions/checkout/pull/2488) - Bump actions/upload-artifact from 4 to 7 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2476](https://redirect.github.com/actions/checkout/pull/2476) - eslint 9 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2474](https://redirect.github.com/actions/checkout/pull/2474) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2499](https://redirect.github.com/actions/checkout/pull/2499) - skip running unsafe pr check if input is default by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2518](https://redirect.github.com/actions/checkout/pull/2518) - trim only ascii whitespace for branch by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2521](https://redirect.github.com/actions/checkout/pull/2521) - escape values passed to --unset by [@aiqiaoy](https://redirect.github.com/aiqiaoy) in [#2530](https://redirect.github.com/actions/checkout/pull/2530) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Small changes to improve ruff checks

`uv` 0.12.0 is now the latest stable release on PyPI. - https://github.com/astral-sh/uv/releases/tag/0.12.0 Continues the existing pattern of tracking each new uv minor (#1352, #1396, #1434). Closes #1472 Co-authored-by: Laurence de Jong <laurence.dejong@nebul.com> Co-authored-by: johnthagen <johnthagen@users.noreply.github.com>

Ruff 0.16 has started Python formatting code blocks in README files - https://astral.sh/blog/ruff-v0.16.0#markdown-code-block-formatting Remove some trailing spaces to reduce the diff if users format the generated README.

) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish) | action | patch | `v1.14.1` → `v1.14.2` | --- ### Release Notes <details> <summary>pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)</summary> ### [`v1.14.2`](https://redirect.github.com/pypa/gh-action-pypi-publish/releases/tag/v1.14.2) [Compare Source](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/v1.14.1...v1.14.2) <p align="right"><i>This one probably won't touch you visibly so just bookmark <a href="https://ep2026.europython.eu/session/defending-open-source-from-ai-slop-a-maintainer-s-practical-guide">@webknjaz's EuroPython 2026 “AI” slop rant for when it's published on YouTube</a> or <a href="https://redirect.github.com/sponsors/webknjaz">encourage him to come back with more to share next year</a>!</i></p> #### 🛠️ Urgh… Another release!? Again? Explain yourself! Looking at the diff, you'll only witness updates across the dependency tree. That's it! It's not a security fix or anything like that even, no. But you'll want this update. > \[!tip] > So what *most* people will find useful is [@takluyver](https://redirect.github.com/takluyver)[💰](https://redirect.github.com/sponsors/takluyver)'s update of Twine to v7 that we use internally ([#416](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/416)). This version will let them upload their sdists and wheels containing core packaging metadata v2.5 to (Test)PyPI. #### 🧐 Tell me why.. <details> <summary> The rest of the updates bump things related to <code>pypi-attestations</code> and <code>sigstore</code>, which has the most interesting backstory here. @facutuesca<a href="https://redirect.github.com/sponsors/facutuesca">💰</a> sent a patch in #417 but a bunch more helped out. </summary> TL;DR non-pure-python projects with C-extensions tend to have dozens (sometimes hundreds) wheels to upload to PyPI per release. They are often quite big and take time to transfer over the network. People started noticing problems and coming up with DIY sharding workarounds like [aio-libs/aiohttp#13226](https://redirect.github.com/aio-libs/aiohttp/pull/13226) around July 23. On this date, projects with a good amount of bytes to publish would start getting timeouts 5 minutes after the PyPI publishing job begun. The same job that worked just fine before. I had to start pinging upstream library and ecosystem people, on GitHub and privately, to start making sense of what was happening. Eventually, we collectively concluded that GitHub must've shortened the lifetime of their OIDC identity — it seems to have used to be 10 minutes long (at some point in the past) and is now 5 minutes, apparently. It's not documented clearly, and we have not been able to get any clarity by attempting to contact GitHub through private channels, using personal connections. Over the course of investigation, [@facutuesca](https://redirect.github.com/facutuesca)[💰](https://redirect.github.com/sponsors/facutuesca) found and fixed a related underlying cache invalidation bug in [sigstore/sigstore-python#1838](https://redirect.github.com/sigstore/sigstore-python/pull/1838), which he then coordinated propagation through the dependency chain updates in sigstore-python, pypi-attestations, gh-action-pypi-publish and gh-action-sigstore-python. Mike's also discovered that Sigstore's Rekor slowdown seems to have become the main contributing cause of the last week's incident. He's collected some data to support this claim: <https://publishing-five-minute-timeout.tiiny.site>. <center> <a href="https://xkcd.com/2549/"> <img src="https://imgs.xkcd.com/comics/edge_cake_2x.png" alt="Edge Cake XKCD feels just like this release"> </a> </center> </details> #### 🫶 New Contributors - [@davidbrochart](https://redirect.github.com/davidbrochart) made their first contribution in [#415](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/415) - [@takluyver](https://redirect.github.com/takluyver) made their first contribution in [#416](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/416) **🪞 Full Diff**: <pypa/gh-action-pypi-publish@v1.14.1...v1.14.2> **🧔‍♂️ Release Manager:** [@webknjaz](https://redirect.github.com/sponsors/webknjaz) [🇺🇦](https://stand-with-ukraine.pp.ua) **🙏 Special Thanks** to [@davidbrochart](https://redirect.github.com/davidbrochart)[💰](https://redirect.github.com/sponsors/davidbrochart) and [@Dreamsorcerer](https://redirect.github.com/Dreamsorcerer)[💰](https://redirect.github.com/sponsors/Dreamsorcerer) for turning my attention (in [#415](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/415) and in private) to the newly surfaced corner case in GitHub's behavior that only affected a narrow category of projects while many others remained blissfully unaware. [@bdraco](https://redirect.github.com/bdraco)[💰](https://redirect.github.com/sponsors/bdraco) came up with a DIY sharding workaround for aiohttp that served as a demo for other projects. [@miketheman](https://redirect.github.com/miketheman)[💰](https://redirect.github.com/sponsors/miketheman) confirmed the Warehouse-side details. Also, [@jku](https://redirect.github.com/jku)[💰](https://redirect.github.com/sponsors/jku) and [@woodruffw](https://redirect.github.com/woodruffw)[💰](https://redirect.github.com/sponsors/woodruffw) helped work through, review and release the Sigstore ecosystem upstream libs. **💬 Discuss** [on Bluesky 🦋](https://bsky.app/profile/did:plc:ve6s3mxkefjaxty3m4fdqumn/post/3mrsqy2xba22j), [on Mastodon 🐘](https://mastodon.social/@webknjaz/117005132816750073) and [on GitHub][release discussion]. [![GH Sponsors badge]][GH Sponsors URL] [GH Sponsors badge]: https://img.shields.io/badge/%40webknjaz-transparent?logo=githubsponsors&logoColor=%23EA4AAA&label=Sponsor&color=2a313c [GH Sponsors URL]: https://redirect.github.com/sponsors/webknjaz [release discussion]: https://redirect.github.com/pypa/gh-action-pypi-publish/discussions/419 </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/openapi-generators/openapi-python-client).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Prevents OpenAPI Document content from escaping strings, docstrings, and f-strings in generated code by systematically rewriting all string handling. Solves GHSA-5293-mq8x-g3xj

> [!IMPORTANT] > Merging this pull request will create this release ## 🚨Security ### Arbitrary code generation vulnerability Prior to this release, malicious OpenAPI documents could cause openapi-python-client to generate arbitrary code, which would then be executed by consumers of the generated client. If you generate code from OpenAPI documents you don't control, you should upgrade to this release as **soon as possible** and validate any previously-generated code. See [the GitHub advisory](GHSA-5293-mq8x-g3xj) for more details. ## 🚀 Features - Update `uv_build` to 0.12 when using `--meta=uv` (#1473) ## 🐛 Fixes - Apply PEP 639 for improved license metadata (#1459) - update generated code to use `StrEnum` and `-> Self` (#1474) - Remove trailing spaces in README example code (#1475) - Stopped generating empty docstrings for models with no description ### Fixed invalid Python identifiers when resolving naming conflicts When two property or parameter names conflicted after conversion to `snake_case` (e.g. `foo-bar` and `fooBar`), the conflict-resolution path preserved delimiters like `-`, `.`, and spaces in the generated Python identifiers, producing invalid code which failed generation. Conflicting names now keep their original casing but have any characters which are invalid in Python identifiers stripped (e.g. `foobar` and `fooBar`). ### Improve readability of error messages Errors and warnings which include a snippet of your OpenAPI document now render that snippet as JSON, making them much easier to read. ## 📝Notes ### Breaking changes for all custom templates **ALL** custom templates are expected to break with this version as a result of the security fix. 1. The `utils` global has been renamed to `strings` 2. Most string values can no longer be rendered directly into templates, you must describe how the value is being used so it can be properly escaped using either a Python function or Jinja filter: 1. `strings.snake_case()` / `| snakecase` (existing) 2. `strings.kebab_case()` / `| kebabcase` (existing) 3. `strings.pascal_case()` / `| pascalcase` (existing) 4. `python_identifier()` (existing) 5. `class_name()` (existing) 6. `strings.safe_for_docstring()` / `| safe_for_docstring` for values which get injected into a `"""` docstring 7. `strings.in_f_string_literal()` / `| in_f_string_literal` for values that go into `f""` f-strings 8. `strings.in_double_quote_literal()` / `| in_double_quote_literal` for values that go into **non-f-string** `""` literals 9. `.as_unembedded_code()` / `| as_unembedded_code` ONLY for `PythonCode` values—those that are intended to be Python code which is not embedded into any string/docstring. Examples include usages of `.python_code`, `.get_type_string()`, `.get_instance_type_string()`, `.get_type_strings_in_union()`. You *should not* assume these values are safe to put in docstrings, string literals, or f-string literals. Use the dedicated helpers for those. As always, you can check the diff of the built in templates for examples. You will also want to check generated output for "UntrustedString", which is how any string now requiring one of those functions will appear. ### Many control characters now stripped from string literals Out of an abundance of caution, most Unicode control characters are now stripped from string literals. If your API uses control characters as part of const values, enums, or JSON body property names you may have issues with this new version. Most APIs are not expected to be affected by this change. Co-authored-by: knope-bot[bot] <152252888+knope-bot[bot]@users.noreply.github.com>

Navigation Menu

Uh oh!

Uh oh!

Comparing changes

Open a pull request

Commits on Jun 21, 2026

Commits on Jun 23, 2026

Commits on Jun 29, 2026

Commits on Jul 15, 2026

Commits on Jul 19, 2026

Commits on Jul 20, 2026

Commits on Jul 27, 2026

Commits on Aug 3, 2026

Commits on Aug 4, 2026

Commits on Aug 9, 2026

Commits on Aug 30, 2026

This comparison is taking too long to generate.

Uh oh!