fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/stale	action	minor	v10.2.0 → v10.3.0
cosl	project.dependencies	minor	==1.7.0 → ==1.9.1
jubilant	dependency-groups	minor	==1.7.0 → ==1.10.0
ops (changelog)	project.dependencies	minor	==3.6.0 → ==3.7.1
pydantic (changelog)	project.dependencies	minor	==2.12.5 → ==2.13.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/stale (actions/stale)

v10.3.0

Compare Source

What's Changed

Bug Fix

• Enhancement: ignore stale labeling events by @​shamoon in #​1311

Dependency Updates

• Upgrade dependencies (@​actions/core, @​octokit/plugin-retry, @​typescript-eslint) by @​Copilot in #​1335

New Contributors

• @​shamoon made their first contribution in #​1311

Full Changelog: actions/stale@v10...v10.3.0

canonical/cos-lib (cosl)

v1.9.1

Compare Source

What's Changed

• feat: add JujuTopology.to_baggage() for telemetry labelling by @​Copilot in #​186

New Contributors

• @​Copilot made their first contribution in #​186

Full Changelog: canonical/cos-lib@1.9.0...1.9.1

v1.9.0

Compare Source

What's Changed

• refactor: InjectResult and SingleRuleFormat types by @​MichaelThamm in #​190

Full Changelog: canonical/cos-lib@1.8.0...1.9.0

v1.8.0

Compare Source

What's Changed

• refactor: Improved typing in the rules and cos_tool modules by @​MichaelThamm in #​189

Full Changelog: canonical/cos-lib@1.7.0...1.8.0

canonical/jubilant (jubilant)

v1.10.0

Compare Source

Features

• Add add_machine command (#​305)

Fixes

• Add ./ for relative pathlib.Path objects in deploy (#​317)

Documentation

• Replace the PGP key with the upstream page in SECURITY.md (#​316)
• Improve support for agents, with Sphinx Stack upgrade (#​322)

CI

• Use sbomber to security scan and generate SBOM on release (#​325)

v1.9.0

Compare Source

Features

• Implement add_cloud and update_cloud methods (#​283)

Fixes

• Correct behaviour when transparently handling Juju's snap confinement (#​275)

Documentation

• Restructure homepage and update intro to Jubilant (#​287)

CI

• Configure dependabot (#​288)
• Pin the versions of zizmor and codespell when run by pre-commit (#​303)
• Fix unit runs-on (#​302)
• Run CI (especially integration tests) every Monday morning (#​301)

v1.8.0

Compare Source

Breaking Changes

• Respect self.model in offer method (#​276)

Features

• Allow metadata_source to be passed down to the CLI via the bootstrap command (#​272)

Documentation

• WaitError is raised when error is true, not false. (#​256)
• Consistent markup for "true" and "false" (#​254)
• Include a directive for documentation in AGENTS.md (#​268)
• Replace juju.is links and change link in docs header (#​267)
• Remove pytest-operator migration guide (moved to Ops docs) (#​270)
• Fix docstring of consume() (#​269)
• Refocus tutorial on standalone usage (#​280)

Tests

• Remove requests dependency (#​262)

Refactoring

• Add the ssh key earlier, so that no retry is needed (#​264)

CI

• Correct copilot-collections permissions so that the job can create a PR if needed (#​253)
• Add Zizmor workflow, fix test_secrets ordering (#​274)

canonical/operator (ops)

v3.7.1

Compare Source

Fixes

• Pass the endpoint name through to relation-get (#​2499)

Documentation

• Add a how-to guide focused on debugging charms (#​2386)
• Add metadata descriptions to the debug and public listing how-to guides (#​2415)
• Update tutorials and how-tos to use pytest-jubilant (#​2406)
• Add how-to guide about CI (#​2405)
• Test COS Lite integration with the k8s-5-observe charm (#​2411)
• Update tutorials and example charms to match Charmcraft 4.2 (#​2407)
• Update api_demo_server version to support non-amd64 architectures (#​2448)
• Pin to 24.04 when launching VMs (#​2457)
• Explain how to remove errored apps in k8s tutorial (#​2445)
• Align example charms with pre-release Charmcraft (#​2444)
• Add how-to guide for naming and initialising a charm (#​2449)
• Add a how-to guide about publishing a charm (#​2420)
• In the tutorials, recommend initing from GitHub (#​2459)
• Fix integration tests of K8s tutorial charms (#​2471)
• Replace the PGP key with the upstream page in SECURITY.md (#​2474)
• Bump api_demo_server to 1.0.4 in docs and example charms (#​2473)
• Refresh the machine workloads how-to (#​2443)
• Add COS Lite integration tests to K8s tutorial (#​2478)
• Add git workflow guidance for contributors (#​2453)
• Update profile guidance in HACKING.md (#​2486)
• Explain how to add an icon to a charm (#​2451)
• Adopt latest Charmcraft profiles, incl juju_setup marker on integration tests (#​2497)
• Improve support for agents, with Sphinx Stack upgrade (#​2495)
• Improve how-to about managing files in containers (#​2470)
• Improve Container.pull docs to avoid leaky files (#​2508)
• Clarify Secret manage-permission error in testing.State (#​2510)

Tests

• Extend the type checking of the ops-scenario tests (#​2234, #​2235)
• Wait on ExecProcess after expected TypeError (#​2509)

CI

• Drop external action for checking PR title format (#​2388)
• Add a dependabot cooldown (#​2413)
• Sort the directory entries when updating the best practices list (#​2422)
• Configure dependabot for the example charms (#​2426)
• Pin zizmor and TIOBE tool versions in pyproject.toml rather than the workflow (#​2437)
• Add 26.04 to smoke tests and remove outdated metadata.yaml (#​2450)
• Use charmcraft test for example charm (#​2440)
• Add workflow_dispatch trigger to workflows where it is useful (#​2468)
• Ensure the correct job is selected in updating charm pins (#​2500)

v3.7.0

Compare Source

Features

• Enable interactive debugging via breakpoint in testing (#​2363)
• ops.testing autoload support for charmcraft extensions (#​2367)
• Allow testing.State.get_relation to accept relation objects (#​2359)
• Support charmcraft.yaml format as meta for testing.Context (#​2296)

Fixes

• Correct type annotation for StorageMeta.properties (#​2348)
• Move the testing.Container compatibility import so that mypy style checkers understand it (#​2343)
• Hold only copies of user provided meta/config/actions in testing.Context (#​2349)
• Deep-copy layer objects during testing.State plan rendering (#​2380)
• Return copies from testing.State secret_get and action_get (#​2379)
• Use timezone-aware datetimes in expiry calculation (#​2378)
• Warn before clearing non-empty container in testing (#​2365)

Documentation

• Replace links to juju.is by canonical.com/juju (#​2368)
• Refactor homepage to better put Ops in context (#​2370)
• Add pytest-operator migration guide from Jubilant docs (#​2381)
• Add a tip about AI help in the Jubilant migration guide (#​2382)
• Mention jhack scenario snapshot (#​2351)
• Update integration testing how-to guide (#​2390)
• Explain K8s charms briefly at the start of the tutorial (#​2392)
• Juju secrets identifier is now an opaque string (#​2387)

Tests

• Extend the type checking of the ops-scenario tests (#​2230)

CI

• Run ruff check --fix in tox -e format (#​2369)
• Check example charms with mypy in CI (#​2360)
• Update the list of published charms in the compatibility tests (#​2384)
• Adjust minimum Python version in broad charm compatibility tests (#​2317)

pydantic/pydantic (pydantic)

v2.13.4: 2026-05-06

Compare Source

v2.13.4 (2026-05-06)

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #​13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #​13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #​13129

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

v2.13.3

Compare Source

GitHub release

What's Changed

Fixes

• Handle AttributeError subclasses with from_attributes by @​Viicos in #​13096

v2.13.2

Compare Source

v2.13.1: 2026-04-15

Compare Source

v2.13.1 (2026-04-15)

What's Changed

Fixes

• Fix ValidationInfo.data missing with model_validate_json() by @​davidhewitt in #​13079

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0

Compare Source

GitHub release

The highlights of the v2.13 release are available in the blog post.
Several minor changes (considered non-breaking changes according to our versioning policy)
are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features

• Allow default factories of private attributes to take validated model data by @​Viicos in #​13013

Changes

• Warn when serializing fixed length tuples with too few items by @​arvindsaripalli in #​13016

Fixes

• Change type of Any when synthesizing _build_sources for BaseSettings.__init__() signature in the mypy plugin by @​Viicos in #​13049
• Fix model equality when using runtime extra configuration by @​Viicos in #​13062

Packaging

• Add zizmor for GitHub Actions workflow linting by @​Viicos in #​13039
• Update jiter to v0.14.0 to fix a segmentation fault on musl Linux by @​Viicos in #​13064

New Contributors

• @​arvindsaripalli made their first contribution in #​13016

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.