Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/checkout	action	patch	v6.0.2 → v6.0.3
jubilant	dependency-groups	minor	==1.9.0 → ==1.10.0
opentelemetry-api	project.dependencies	minor	==1.41.1 → ==1.42.1
ops (changelog)	project.dependencies	patch	==3.7.0 → ==3.7.1
playwright (changelog)	dependency-groups	minor	==1.59.0 → ==1.60.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

canonical/jubilant (jubilant)

v1.10.0

Compare Source

Features

• Add add_machine command (#​305)

Fixes

• Add ./ for relative pathlib.Path objects in deploy (#​317)

Documentation

• Replace the PGP key with the upstream page in SECURITY.md (#​316)
• Improve support for agents, with Sphinx Stack upgrade (#​322)

CI

• Use sbomber to security scan and generate SBOM on release (#​325)

open-telemetry/opentelemetry-python (opentelemetry-api)

v1.42.1

Compare Source

Fixed

• Preserve the random trace ID flag when creating child spans instead of always
  setting the random trace id bit depending on the available trace id
  generator.
  (#​5241)

v1.42.0

Compare Source

Added

• opentelemetry-api, opentelemetry-sdk: add support for 'random-trace-id'
  flags in W3C traceparent header trace flags. Implementations of IdGenerator
  that do randomly generate the 56 least significant bits, should also
  implement a is_trace_id_random methods that returns True.
  (#​4854)
• logs: add exception support to Logger emit and LogRecord attributes
  (#​4908)
• opentelemetry-exporter-otlp-proto-grpc: make retryable gRPC error codes
  configurable for gRPC exporters
  (#​4917)
• opentelemetry-sdk: Add create_logger_provider/configure_logger_provider
  to declarative file configuration, enabling LoggerProvider instantiation from
  config files without reading env vars
  (#​4990)
• opentelemetry-exporter-otlp-json-common: add
  'opentelemetry-exporter-otlp-json-common' package for OTLP JSON exporters
  (#​4996)
• opentelemetry-sdk: Add service resource detector support to declarative
  file configuration via detection_development.detectors[].service
  (#​5003)
• opentelemetry-docker-tests: add docker-tests coverage of
  opentelemetry-exporter-otlp-proto-grpc and
  opentelemetry-exporter-otlp-proto-http metrics export
  (#​5030)
• Add registry keyword argument to PrometheusMetricReader to allow passing
  a custom Prometheus registry
  (#​5055)
• Add WeaverLiveCheck test util
  (#​5088)
• opentelemetry-sdk: add load_entry_point shared utility to declarative
  file configuration for loading plugins via entry points; refactor propagator
  loading to use it
  (#​5093)
• opentelemetry-sdk: add sampler plugin loading to declarative file
  configuration via the opentelemetry_sampler entry point group, matching the
  spec's PluginComponentProvider mechanism
  (#​5095)
• opentelemetry-sdk: add propagator plugin loading to declarative file
  configuration via the opentelemetry_propagator entry point group, matching
  the spec's PluginComponentProvider mechanism
  (#​5098)
• opentelemetry-sdk: add exporter plugin loading to declarative file
  configuration for all three signals (traces, metrics, logs) via the
  opentelemetry_*_exporter entry point groups, matching the spec's
  PluginComponentProvider mechanism
  (#​5128)
• opentelemetry-sdk: add generic resource detector plugin loading to
  declarative file configuration via the opentelemetry_resource_detector
  entry point group, matching the spec's PluginComponentProvider mechanism
  (#​5129)
• opentelemetry-sdk: add additional_properties support to generated config
  models via custom datamodel-codegen template, enabling plugin/custom
  component names to flow through typed dataclasses
  (#​5131)
• Add ability to selectively enable exporting of SDK internal metrics with the
  OTEL_PYTHON_SDK_INTERNAL_METRICS_ENABLED environment variable.
  (#​5151)

Changed

• opentelemetry-semantic-conventions: use X | Y union annotation
  (#​5096)
• opentelemetry-api: update EnvironmentGetter and EnvironmentSetter to
  use normalized environment variable names
  (#​5119)
• Apply fixes for UP ruff rule
  (#​5133)
• opentelemetry-sdk: only load entrypoints for resource detectors if they are
  configured via OTEL_EXPERIMENTAL_RESOURCE_DETECTORS
  (#​5145)
• ci: wait for tracecontext server readiness instead of a fixed sleep in
  scripts/tracecontext-integration-test.sh
  (#​5149)
• Switch to SPDX license headers and add CI enforcement
  (#​5177)
• opentelemetry-semantic-conventions: Bump semantic conventions to 1.41.1,
  this changes the metrics name of K8S_CONTAINER_CPU_LIMIT_UTILIZATION and
  K8S_CONTAINER_CPU_REQUEST_UTILIZATION.
  (#​5200)

Removed

• opentelemetry-api: remove third-party importlib-metadata in favor of
  standard library since Python >= 3.10 is now required
  (#​3234)
• Drop Python 3.9 support
  (#​5076)

Fixed

• opentelemetry-sdk: Allow declarative OTLP HTTP exporters to map
  compression: deflate instead of rejecting it as unsupported.
  (#​5075)
• Fix incorrect code example in create_tracer() docstring
  (#​5077)
• opentelemetry-sdk: Fix ProcessResourceDetector to use sys.orig_argv so
  that process.command, process.command_line, and process.command_args
  reflect the original invocation for python -m <module> runs (where
  sys.argv[0] is rewritten to the module path)
  (#​5083)
• opentelemetry-sdk: fix YAML structure injection via environment variable
  substitution in declarative file configuration; values containing newlines
  are now emitted as quoted YAML scalars per spec requirement
  (#​5091)
• opentelemetry-sdk: Fix mutable attributes reference in metrics, attributes
  passed to instrument add/record are now copied so that subsequent
  mutations do not affect recorded data points
  (#​5106)
• opentelemetry-sdk: make resource detector ordering deterministic
  (#​5120)
• Fix incorrect type annotation on detectors parameter of
  get_aggregated_resources
  (#​5135)
• opentelemetry-api: Enforce W3C Baggage size limits on outbound propagation
  in W3CBaggagePropagator.inject(). Previously only inbound extraction
  enforced limits; now inject also caps entries at 180, individual pairs at
  4096 bytes, and total header at 8192 bytes per the W3C Baggage spec. The
  extract path max_pairs limit now counts all size-valid entries rather than
  only successfully parsed ones.
  (#​5163)
• opentelemetry-sdk: fix multi-processor force_flush skipping remaining
  processors when one returns None
  (#​5179)
• opentelemetry-test-utils: fix weaver live check hanging when weaver log
  output fills the pipe buffer
  (#​5208)

canonical/operator (ops)

v3.7.1

Compare Source

Fixes

• Pass the endpoint name through to relation-get (#​2499)

Documentation

• Add a how-to guide focused on debugging charms (#​2386)
• Add metadata descriptions to the debug and public listing how-to guides (#​2415)
• Update tutorials and how-tos to use pytest-jubilant (#​2406)
• Add how-to guide about CI (#​2405)
• Test COS Lite integration with the k8s-5-observe charm (#​2411)
• Update tutorials and example charms to match Charmcraft 4.2 (#​2407)
• Update api_demo_server version to support non-amd64 architectures (#​2448)
• Pin to 24.04 when launching VMs (#​2457)
• Explain how to remove errored apps in k8s tutorial (#​2445)
• Align example charms with pre-release Charmcraft (#​2444)
• Add how-to guide for naming and initialising a charm (#​2449)
• Add a how-to guide about publishing a charm (#​2420)
• In the tutorials, recommend initing from GitHub (#​2459)
• Fix integration tests of K8s tutorial charms (#​2471)
• Replace the PGP key with the upstream page in SECURITY.md (#​2474)
• Bump api_demo_server to 1.0.4 in docs and example charms (#​2473)
• Refresh the machine workloads how-to (#​2443)
• Add COS Lite integration tests to K8s tutorial (#​2478)
• Add git workflow guidance for contributors (#​2453)
• Update profile guidance in HACKING.md (#​2486)
• Explain how to add an icon to a charm (#​2451)
• Adopt latest Charmcraft profiles, incl juju_setup marker on integration tests (#​2497)
• Improve support for agents, with Sphinx Stack upgrade (#​2495)
• Improve how-to about managing files in containers (#​2470)
• Improve Container.pull docs to avoid leaky files (#​2508)
• Clarify Secret manage-permission error in testing.State (#​2510)

Tests

• Extend the type checking of the ops-scenario tests (#​2234, #​2235)
• Wait on ExecProcess after expected TypeError (#​2509)

CI

• Drop external action for checking PR title format (#​2388)
• Add a dependabot cooldown (#​2413)
• Sort the directory entries when updating the best practices list (#​2422)
• Configure dependabot for the example charms (#​2426)
• Pin zizmor and TIOBE tool versions in pyproject.toml rather than the workflow (#​2437)
• Add 26.04 to smoke tests and remove outdated metadata.yaml (#​2450)
• Use charmcraft test for example charm (#​2440)
• Add workflow_dispatch trigger to workflows where it is useful (#​2468)
• Ensure the correct job is selected in updating charm pins (#​2500)

Microsoft/playwright-python (playwright)

v1.60.0

Compare Source

🐍 Python improvements

• New FormData class for building multipart/form-data request bodies — pass to api_request_context.post(form=…) etc.
• expect.soft(...) soft assertions collect multiple failures in a test instead of stopping at the first one. Requires up-to-date pytest integration to work.
• All timeout parameters now accept datetime.timedelta — applies wherever a timeout is taken, e.g. page.goto(), locator.click(), expect(...).to_be_visible().
• Async context manager support across more APIs — async with now works for objects returned from screencast.show_actions(), screencast.show_overlays(), etc.
• page.expect_request(...) and page.expect_response(...) now accept async predicates.
• Typed overloads for expect_event / wait_for_event so the event payload type is inferred per event name.

🌐 HAR recording on Tracing

tracing.start_har() / tracing.stop_har() expose HAR recording as a first-class tracing API, with the same content, mode and url_filter options as record_har:

context.tracing.start_har("trace.har")
page = context.new_page()
page.goto("https://playwright.dev")
context.tracing.stop_har()

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic DataTransfer in the page context — works cross-browser and is great for testing upload zones:

page.locator("#dropzone").drop(
    files={"name": "note.txt", "mime_type": "text/plain", "buffer": b"hello"},
)

page.locator("#dropzone").drop(
    data={
        "text/plain": "hello world",
        "text/uri-list": "https://example.com",
    },
)

🎯 Aria snapshots

• expect(page).to_match_aria_snapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator("body").
• New boxes option on locator.aria_snapshot() / page.aria_snapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

New APIs

Browser, Context and Page

• Event browser.on("context") — fired when a new context is created on the browser.
• BrowserContext now mirrors lifecycle events from its pages: browser_context.on("download"), browser_context.on("frameattached"), browser_context.on("framedetached"), browser_context.on("framenavigated"), browser_context.on("pageclose"), browser_context.on("pageload").

Locators and Assertions

• New option description in page.get_by_role() / locator.get_by_role() / frame.get_by_role() / frame_locator.get_by_role() for matching the accessible description.
• New option pseudo in expect(locator).to_have_css() reads computed styles from ::before or ::after.
• New option style in locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hide_highlight() to clear all highlights.

Network

• web_socket_route.protocols() returns the WebSocket subprotocols requested by the page.
• New option no_defaults in browser_type.connect_over_cdp() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.

Errors

• New web_error.location() mirrors console_message.location().
• console_message.location() now exposes line / column properties (line_number / column_number are deprecated).

🛠️ Other improvements

• Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

Breaking Changes ⚠️

• Removed long-deprecated handle option on browser_context.expose_binding() and page.expose_binding().

Browser Versions

• Chromium 148.0.7778.96
• Mozilla Firefox 150.0.2
• WebKit 26.4

This version was also tested against the following stable channels:

• Google Chrome 147
• Microsoft Edge 147

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.