build(deps): bump the all-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the all-dependencies group with 6 updates in the / directory:

Package	From	To
portage	3.0.77	3.0.78
ruff	0.15.12	0.15.15
rust-just	1.50.0	1.51.0
basedpyright	1.39.3	1.39.6
zizmor	1.24.1	1.25.2
ansible	13.6.0	13.7.0

Updates portage from 3.0.77 to 3.0.78

Changelog

Sourced from portage's changelog.

portage-3.0.78 (2026-05-03)

This release has several big changes to binary package support: signature verification is enabled by default, and there are new EXPERIMENTAL configuration options for controlling binpkg use per repository and binary repository.

There are many miscellaneous improvements as well.

Breaking changes:

• cnf: enable verify-signature by default in binrepos.conf (bug #945384, bug #969086)

  PGP signature verification is now enabled by default for all binary repositories.

  Signature verification is not supported for the old 'xpak' binary format (i.e. it requires the new 'gpkg' format).

  The new default can be overridden in /etc/portage/binrepos.conf with either:

  [DEFAULT]
  verify-signature = false
  

  or

  [reponame]
  verify-signature = false
  

  or with FEATURES="binpkg-ignore-signature" in /etc/portage/make.conf.

  To set up signing for binpkgs, a signing keyring must reside (by default) at /root/.gnupg and a verification keyring must reside (by default) at /etc/portage/gnupg. The verification keyring must mark the signing key as trusted. Signing is toggled by FEATURES="binpkg-signing".

Features:

• config: binrepos.conf: Add 'getbinpkg-exclude', 'getbinpkg-include' (bug #463964).

  NOTE: This feature is considered experimental and subject to change based on feedback.

• config: repos.conf: Add 'usepkg-exclude', 'usepkg-include' (bug #463964).

  NOTE: This feature is considered experimental and subject to change based on feedback.

• emerge: Add --getbinpkg-include, --getbinpkg-exclude (bug #463964).

... (truncated)

Commits

• 8be771d NEWS, meson.build: prepare for portage-3.0.78
• 5e91893 emaint: report masking reasons from porttree rather than vartree
• 2fb3616 NEWS: update
• d59727a emaint: hide failures to determine ebuild masking reasons
• 8cc7660 netlink: update ifaddrmsg struct to match docs
• 9034350 netlink: clean up socket logic
• c568ef9 estrip: Don't break the debuglink CRC with the salted build ID
• ac461a2 fowners: move path logic into global scope
• 90e6e99 fowners: add compat to resolve_owner for older EAPIs
• 6e0d845 fowners: use numeric-uid-gid w/ custom target root
• Additional commits viewable in compare view

Updates ruff from 0.15.12 to 0.15.15

Release notes

Sourced from ruff's releases.

0.15.15

Release Notes

Released on 2026-05-28.

Preview features

• Fix Markdown closing fence handling (#25310)
• [pyflakes] Report duplicate imports in typing.TYPE_CHECKING block (F811) (#22560)

Bug fixes

• [pyflakes] Treat function-scope bare annotations as locals per PEP 526 (F821) (#21540)

Performance

• Avoid redundant TokenValue drops in the lexer (#25300)
• Reduce memory usage by dropping token-excess capacity and improve performance by approximating the initial tokens Vec size (#25354)
• Use ThinVec in AST to shrink Stmt (#25361)

Documentation

• Fix line-length example for --config option (#25389)
• [flake8-comprehensions] Document RecursionError edge case in __len__ (C416) (#25286)
• [mccabe] Improve example (C901) (#25287)
• [pyupgrade] Clarify fix safety docs (UP007, UP045) (#25288)
• [refurb] Document FURB192 exception change for empty sequences (#25317)
• [ruff] Document false negative for user-defined types (RUF013) (#25289)

Formatter

• Fix formatting of lambdas nested within f-strings (#25398)

Server

• Return code action for codeAction/resolve requests that contain no or no valid URL (#25365)

Other changes

• Expand semantic syntax errors for invalid walruses (#25415)

Contributors

• @​chirizxc
• @​ntBre
• @​adityasingh2400
• @​charliermarsh
• @​fallintoplace
• @​martin-schlossarek
• @​MichaReiser

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.15

Released on 2026-05-28.

Preview features

• Fix Markdown closing fence handling (#25310)
• [pyflakes] Report duplicate imports in typing.TYPE_CHECKING block (F811) (#22560)

Bug fixes

• [pyflakes] Treat function-scope bare annotations as locals per PEP 526 (F821) (#21540)

Performance

• Avoid redundant TokenValue drops in the lexer (#25300)
• Reduce memory usage by dropping token-excess capacity and improve performance by approximating the initial tokens Vec size (#25354)
• Use ThinVec in AST to shrink Stmt (#25361)

Documentation

• Fix line-length example for --config option (#25389)
• [flake8-comprehensions] Document RecursionError edge case in __len__ (C416) (#25286)
• [mccabe] Improve example (C901) (#25287)
• [pyupgrade] Clarify fix safety docs (UP007, UP045) (#25288)
• [refurb] Document FURB192 exception change for empty sequences (#25317)
• [ruff] Document false negative for user-defined types (RUF013) (#25289)

Formatter

• Fix formatting of lambdas nested within f-strings (#25398)

Server

• Return code action for codeAction/resolve requests that contain no or no valid URL (#25365)

Other changes

• Expand semantic syntax errors for invalid walruses (#25415)

Contributors

• @​chirizxc
• @​ntBre
• @​adityasingh2400
• @​charliermarsh
• @​fallintoplace
• @​martin-schlossarek
• @​MichaReiser
• @​Ruchir28

... (truncated)

Commits

• db5aa0a Bump 0.15.15 (#25431)
• 366fe21 [ty] Improve diagnostics for syntax errors in forward annotations (#25158)
• e2e1e64 [ty] Remove excess capacity from more Salsa cached collections (#25411)
• 1bd77e1 [ty] Use diagnostic message as tie breaker when sorting (#25424)
• 7e1bc1e Add agent skills for working on ty (#25422)
• 574e107 Expand semantic syntax errors for invalid walruses (#25415)
• 4a7ca06 [ty] Display docs for matching parameter when hovering over the name of an ar...
• 5432709 Refine a few agents instructions (#25423)
• 3cb09eb [ty] Support typing.TypeForm (#25334)
• c8cd59f [ty] Infer class attributes assigned by metaclass initialization (#25342)
• Additional commits viewable in compare view

Updates rust-just from 1.50.0 to 1.51.0

Release notes

Sourced from rust-just's releases.

1.51.0

Added

• Add no-cd setting (#2981 by hans-d)

Changed

• Allow [env] attribute to take expressions (#3329 by casey)
• Allow using expressions with [working-directory] (#3326 by casey)
• Read justfile from standard input with --justfile - (#3325 by casey)
• Make parent_directory() of bare filename return . (#3313 by casey)
• Make [env] override module-level exports (#3312 by casey)

Fixed

• Fail on deep recursion instead of overflowing stack (#3319 by casey)
• Invoke chooser selections separately (#3311 by casey)
• Don't evaluate unused assertions (#3310 by casey)
• Respect lazy setting in submodules (#3308 by casey)
• Fix overrides not being visible in user-defined functions (#3307 by casey)
• Don't panic on invalid datetime format string (#3304 by casey)

Misc

• Use cargo-limit commands in justfile (#3331 by casey)
• Simplify code more (#3330 by casey)
• Update install-dev-deps recipe with compatible mdbook (#3328 by casey)
• Simplify code (#3327 by casey)
• Link to duplicate recipe issue in readme (#3321 by casey)
• Remove periods from error messages (#3316 by casey)
• Avoid multi-sentence error messagess (#3315 by casey)
• Make error messages lowercase (#3314 by casey)
• Actually bump version to 1.50.0 (#3303 by casey)

Changelog

Sourced from rust-just's changelog.

Commits

• 1949b3d Merge pull request #476 from gnpaone/sync-action
• f55bd7f chore: sync files from source repo
• a3ee985 Merge pull request #475 from gnpaone/sync-action
• f28ab0e chore: sync files from source repo
• 7a16ca9 Merge pull request #474 from gnpaone/dependabot/npm_and_yarn/npm/rust-just/ty...
• def1fb7 npm(deps-dev): bump @​types/node from 25.6.0 to 25.6.2 in /npm/rust-just
• 283029b Merge pull request #473 from gnpaone/sync-action
• 5db9a03 chore: sync files from source repo
• 37311da Merge pull request #472 from gnpaone/dependabot/npm_and_yarn/npm/rust-just/ty...
• 8604618 npm(deps-dev): bump @​typescript-eslint/eslint-plugin in /npm/rust-just
• Additional commits viewable in compare view

Updates basedpyright from 1.39.3 to 1.39.6

Commits

• ad82d91 1.39.6
• cf60738 fix vscode config for formatting markdown files now that we use two formatter...
• 29e303a print stderr from npm commands when build fails
• f133f3d uncomment some test code which started causing a test to fail. no idea why i ...
• f71e96b remove python 3.9 check from TypeAlias4 test because typeshed has dropped s...
• e4c40b7 fix tests
• d7c522b ruff ignore new benchmarkData files from upstream
• a7cf33d fix eslint in vscode
• 14c96be fix logic for reporting invalid pythonPlatform detected by the new eslint v...
• 280802c remove remnants of webpack
• Additional commits viewable in compare view

Updates zizmor from 1.24.1 to 1.25.2

Release notes

Sourced from zizmor's releases.

v1.25.2

Bug Fixes 🐛🔗

• Fixed a bug where the unpinned-tools audit would incorrectly flag the aquasecurity/trivy-action action as installing an unpinned tool version, rather than aquasecurity/setup-trivy (#2018)

v1.25.1

Bug Fixes 🐛🔗

• Fixed a bug where the cache-poisoning audit would fail to consider release events as exempt from cache usage findings when filtered by a tag condition (#2004)

• Fixed a typo when suggesting --fix flags for findings (#2010)

  Many thanks to @​0xdea for implementing this fix!

• Fixed a typo in unpinned-tools annotations (#2008)

  Many thanks to @​martincostello for implementing this fix!

• Fixed a bug where the github-app audit would incorrectly flag some safe uses of actions/create-github-app-token as unsafe (#2011)

v1.25.0

New Features 🌈🔗

• zizmor's finding severities can now be remapped on a per-audit basis. See the configuration for details (#1913)

  Many thanks to @​Proximyst for proposing and implementing this improvement!

• New audit: github-app detects dangerous usages of GitHub App installation tokens (#1926)

• New audit: [unpinned-tools] detects actions that install tools without pinning to a specific version (#1820)

• zizmor now accepts the --no-ignores flag to disable all ignore comments and configurations when reporting findings (#1935)

• zizmor's LSP now honors the --persona flag on the CLI (#1943)

• zizmor is now aware of Docker-based action definitions, in addition to the pre-existing support for "composite" actions (#1965)

Enhancements🔗

• Recommend gh issue edit --add-label / gh pr edit --add-label as a replacement for actions-ecosystem/action-add-labels in superfluous-actions

• Recommend gh issue edit --remove-label / gh pr edit --remove-label as a replacement for actions-ecosystem/action-remove-labels in superfluous-actions

• Recommend jq as a replacement for sergeysova/jq-action in superfluous-actions

• Recommend git add, git commit, and git push as a replacement for stefanzweifel/git-auto-commit-action in superfluous-actions

• Recommend git add, git commit, and git push as a replacement for EndBug/add-and-commit in superfluous-actions

• tibdex/github-app-token is now recognized as an archived action by archived-uses (#1910)

... (truncated)

Changelog

Sourced from zizmor's changelog.

1.25.2

Bug Fixes 🐛

• Fixed a bug where the [unpinned-tools] audit would incorrectly flag the @​aquasecurity/trivy-action action as installing an unpinned tool version, rather than @​aquasecurity/setup-trivy (#2018)

1.25.1

Bug Fixes 🐛

• Fixed a bug where the [cache-poisoning] audit would fail to consider release events as exempt from cache usage findings when filtered by a tag condition (#2004)

• Fixed a typo when suggesting --fix flags for findings (#2010)

  Many thanks to @​0xdea for implementing this fix!

• Fixed a typo in [unpinned-tools] annotations (#2008)

  Many thanks to @​martincostello for implementing this fix!

• Fixed a bug where the [github-app] audit would incorrectly flag some safe uses of @​actions/create-github-app-token as unsafe (#2011)

1.25.0

New Features 🌈

• zizmor's finding severities can now be remapped on a per-audit basis. See the configuration for details (#1913)

  Many thanks to @​Proximyst for proposing and implementing this improvement!

• New audit: [github-app] detects dangerous usages of GitHub App installation tokens (#1926)

• New audit: [unpinned-tools] detects actions that install tools without pinning to a specific version (#1820)

• zizmor now accepts the --no-ignores flag to disable all ignore comments and configurations when reporting findings (#1935)

• zizmor's LSP now honors the --persona flag on the CLI (#1943)

• zizmor is now aware of Docker-based action definitions, in addition to the pre-existing support for "composite" actions (#1965)

... (truncated)

Commits

• b50d8f6 zizmor 1.25.2 (#2022)
• e8c9648 Bump rustls-webpki to 0.103.13 (#2021)
• 9e19bde Bump aws-lc crates (#2020)
• 49cb189 Bump rand to 0.9.4 (#2019)
• bfdb649 unpinned-tools: fix trivy action being detected (#2018)
• 9300d3b ww/release (#2016)
• 331917a chore: drop serde_yaml rename (#2015)
• 506f085 github-app: test repositories, not repository (#2011)
• 53dea37 unpinned-tools, docs: fix typos (#2008)
• 8068e11 fix: replace --fix=unsafe with --fix=unsafe-only in suggestion (#2010)
• Additional commits viewable in compare view

Updates ansible from 13.6.0 to 13.7.0

Commits

• 21f5fed Ansible 13.7.0: Dependencies, changelog and porting guide (#681)
• ccebf9c Pin netbox.netbox due to breaking change in 3.23.0 (#680)
• dc23548 Schedule community.mysql removal (#678)
• 59e063f Restrict community.mysql to < 4.3.0 for Ansible 13 (#677)
• 13ad7a9 Add the ansible.mysql collection to Ansible 13 and 14 (#675)
• 16eaa15 Also restrict cyberark.pas for Ansible 9 (used for antsibull-core builds).
• dde3809 Ansible 14.0.0a4: Dependencies, changelog and porting guide (#674)
• 028618c Restrict cyberark.pas to < 1.0.40. (#673)
• 5127d3f Ansible 14.0.0a3: Dependencies, changelog and porting guide (#672)
• faaa6cf Unpin hitachivantara.vspone_block (#671)
• See full diff in compare view

[Synss]

@dependabot rebase

[dependabot]

The base commit for this pull request has not changed.

[Synss]

@dependabot rebase

[dependabot]

The base commit for this pull request has not changed.

[Synss]

@dependabot recreate