Update dependencies

[ngcpp-dependency-manager]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/cache	action	major	v5 → v6
astral-sh/ruff-pre-commit	repository	patch	v0.15.18 → v0.15.20
fmt	bazel_dep	minor	12.1.0 → 12.2.0
pymdown-extensions		major	==10.21.3 → ==11.0
rules_cc	bazel_dep	patch	0.2.19 → 0.2.20
rules_python	bazel_dep	minor	2.0.3 → 2.1.0

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v6.1.0 - handle read-only cache access by @​jasongin in #​1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

• Update packages, migrate to ESM by @​Samirat in #​1760

Full Changelog: actions/cache@v5...v6.0.0

v6

Compare Source

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

v0.15.20

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.15.20

v0.15.19

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.15.19

fmtlib/fmt (fmt)

v12.2.0

Compare Source

• Added a C11 API that brings fast, type-safe formatting to C. The new
  fmt-c library and fmt/fmt-c.h header use _Generic to dispatch on
  argument types and outperform printf/sprintf. For example:

  #include <fmt/fmt-c.h>
  
  fmt_print(stdout, "The answer is {}.\n", 42);

  (#​4663,
  #​4671,
  #​4696,
  #​4693,
  #​4694,
  #​4712,
  #​4789).
  Thanks @​Soumik15630m, @​Ferdi265 and @​localspook.

• Added a separate fmt::fmt-module CMake target for C++20 modules and a
  CI workflow that exercises module-based builds
  (#​4684,
  #​4685,
  #​4707,
  #​4708,
  #​4702,
  #​4709).
  Thanks @​MathewBensonCode.

• Enabled the full Dragonbox lookup cache by default for floating-point
  formatting unless optimizing for binary size (__OPTIMIZE_SIZE__),
  giving a ~10–25% speedup. Thanks Matthias Kretz for the suggestion.
  Average time per double on Apple M1 Pro (clang 17, random digits,
  smaller is better) measured with
  dtoa-benchmark:

  Method	Time (ns)
  fmt (full)	22.07
  fmt (compact)	29.55
  ryu	35.21
  double-conversion	81.81
  sprintf	726.27
  ostringstream	864.34

• Improved integer formatting performance by ~3%
  (#​4630). Thanks @​user202729.

• Optimized formatting into back-insert iterators by using bulk container
  append/insert methods (e.g. on std::vector<char> and custom string
  types) (#​4679). Thanks @​user202729.

• Reduced binary size of debug builds (~200k to ~85k in the bloat test) and
  improved compile speed when consteval is unavailable.

• Made path formatting lossless, preserving ill-formed UTF-16
  sequences when converting std::filesystem::path to a narrow string.

• Added support for formatting std::unexpected
  (#​4675). Thanks @​17steen.

• Added overloads of fmt::println that take a fmt::text_style
  (#​4782). Thanks @​ahoarau.

• Added support for positional arguments as width and precision specifiers
  in fmt::printf (#​4643).
  Thanks @​KareemOtoum.

• Made FMT_STRING a no-op when FMT_USE_CONSTEVAL is enabled, since the
  consteval format-string constructor already provides compile-time
  validation
  (#​4611,
  #​4612). Thanks @​friedkeenan.

• Promoted fmt::detail::named_arg to the public API as fmt::named_arg and
  deprecated the detail alias
  (#​4683,
  #​4687). Thanks @​TPPPP72.

• Moved the std::byte formatter from fmt/format.h to fmt/std.h.

• Provided a default definition for fmt::is_contiguous
  (#​4731,
  #​4770). Thanks @​user202729 and @​phprus.

• Added the FMT_USE_FLOCKFILE macro to disable the use of flockfile
  (#​4646,
  #​4666). Thanks @​mvastola.

• Added include_guard(GLOBAL) so that {fmt} can be used in multiple
  submodules of the same project
  (#​4672). Thanks @​torsten48.

• Improved constexpr support
  (#​4659,
  #​4591).
  Thanks @​elbeno and @​17steen.

• Deprecated the implicit conversion from fmt::format_string and
  fmt::basic_fstring to string_view to align with std::format_string;
  use format_string::get() instead.

• Opted out std::complex from tuple formatting so that the dedicated
  std::complex formatter is always used.

• Removed the fmt::say function.

• Deprecated the std::initializer_list overload of fmt::join and the array
  overload of fmt::vformat_to.

• Made the <fmt/core.h> header equivalent to <fmt/base.h> by
  default. Code that relied on <fmt/core.h> pulling in <fmt/format.h>
  must now either include <fmt/format.h> directly or define
  FMT_DEPRECATED_HEAVY_CORE to opt back in.

• Improved wchar_t support: fmt::join now accepts wchar_t and other
  non-char separators, and fmt::format_to_n now works with fmt::runtime
  on wchar_t
  (#​4686,
  #​4714,
  #​4715).
  Thanks @​Yancey2023 and @​sunmy2019.

• Fixed formatting of std::tm with a null tm_zone
  (#​4790). Thanks @​Carmel0.

• Fixed compile-time formatting in fmt/ranges.h, fmt/style.h and
  fmt/std.h (#​4759). Thanks @​j4niwzis.

• Fixed an ambiguity between formatter<std::optional<T>> in fmt/std.h
  and fmt/ranges.h on C++26 (P3168R2)
  (#​4761). Thanks @​phprus.

• Fixed a GCC PCH breakage triggered by a scoped #pragma GCC optimize.

• Fixed a TSAN false positive in the locale handling code
  (#​4755).

• Fixed compile-time format string checks truncating string literals at
  an embedded null byte
  (#​4732). Thanks @​user202729.

• Fixed out-of-bounds reads in printf formatting
  (#​4741,
  #​4742,
  #​4800).
  Thanks @​Algunenano and @​aizu-m.

• Fixed the return type of the f(un)lockfile wrappers on Windows
  (#​4739). Thanks @​mvastola.

• Worked around a CUDA issue when handling UTF-32 literals
  (#​4719). Thanks @​Cazadorro.

• Fixed missing named-argument validation for compiled format strings
  (#​4638). Thanks @​JaeheonShim.

• Fixed fmt::format_to_n in <fmt/compile.h> failing to compile when
  <iterator> is not transitively included
  (#​4615).

• Fixed handling of pointers in format string compilation with
  FMT_BUILTIN_TYPES=0.

• Stopped assuming nul termination of the format string in fmt::printf.
  Thanks @​ZUENS2020 for reporting.

• Fixed a build error when locale support is disabled
  (#​4627). Thanks @​marcel-behlau-elfin.

• Fixed a fallback range formatter for types with a container_type member
  (#​4123,
  #​4660). Thanks @​Soumik15630m.

• Fixed C++20 concept detection
  (#​4653). Thanks @​tearfur.

• Fixed a clang compilation failure
  (#​4718). Thanks @​mccakit.

• Fixed various MSVC warnings, including C4305 and conversion warnings on
  x86 (#​4668,
  #​4594).
  Thanks @​kanren3 and @​blizzard4591.

• Updated the Android Gradle Plugin to 9.x
  (#​4651,
  #​4658). Thanks @​Soumik15630m.

• Made various code, build and test improvements
  (#​4625,
  #​4639,
  #​4644,
  #​4656,
  #​4680,
  #​4681,
  #​4704,
  #​4710,
  #​4713,
  #​4729,
  #​4751,
  #​4758,
  #​4799).
  Thanks @​ZephyrLykos, @​togunchan, @​kagancansit, @​BerndPetrovitsch,
  @​Skylion007, @​st0rmbtw, @​localspook and @​EXtremeExploit.

• Improved documentation, including a rewrite of the format string syntax,
  better handling of doxygen tags, documenting output_file, fixing CSS so
  that whitespace is displayed properly, and various smaller fixes
  (#​4622,
  #​4626,
  #​4631,
  #​4667,
  #​4616,
  #​4748).
  Thanks @​heavywatal, @​ZephyrLykos, @​user202729, @​ssszcmawo, @​bigmoonbit
  and @​Powerbyte7.

• Added building of release artifacts and SLSA provenance in CI, added a
  CodeQL workflow, and added the security policy in .github/SECURITY.md.

facelessuser/pymdown-extensions (pymdown-extensions)

v11.0

Compare Source

11.0

• BREAK: B64: Restricts relative links to base_path by default. Can be disabled by setting new restrict_path
  option to False. The new root_path can be specified if paths are desired to be restricted to a different
  location separate base_path which is also used as a relative base for image paths.
• NEW: Drop Python 3.9 support.
• FIX: Tabbed: Fix issue where an empty title would cause an exception.

bazelbuild/rules_cc (rules_cc)

v0.2.20

Compare Source

Using bzlmod with Bazel 6 or later:

1. [Bazel 6] Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_cc", version = "0.2.20")

Using WORKSPACE:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_cc",
    sha256 = "69e05df29f0010ba248ef8dafc1f084c8fd2f5c553da634422d8167f5c4b277b",
    strip_prefix = "rules_cc-0.2.20",
    url = "https://github.com/bazelbuild/rules_cc/releases/download/0.2.20/rules_cc-0.2.20.tar.gz",
)

load("@​rules_cc//cc:extensions.bzl", "compatibility_proxy_repo")

compatibility_proxy_repo()

Full Changelog: bazelbuild/rules_cc@0.2.19...0.2.20

bazel-contrib/rules_python (rules_python)

v2.1.0

Compare Source

{#v2-1-0-removed}

Removed

• (build_data) Removed CONFIG_MODE from build data
  (#​3793).
• (coverage) Support for python 3.8 has been dropped from the bundled
  coverage.py wheel set, since coverage.py 7.6.2 dropped it.

{#v2-1-0-changed}

Changed

• (bzlmod) How default runtimes are registered has changed to use a manifest
  of SHAs and URLs. TOOL_VERSIONS in python/versions.bzl is now empty under
  bzlmod.
• (gazelle) WORKSPACE's bazel-gazelle dependency bumped from 0.36.0 to 0.47.0.
  The go version was also bumped from 1.21.13 to 1.22.9.
• (gazelle) python_generate_pyi_deps and python_generate_pyi_srcs now
  default to true.
• (pypi) The data files of a wheel (bin, includes, etc) are now always included
  as a library's data dependencies.
• (coverage) When configure_coverage_tool = True is set but the bundled
  coverage.py wheel set has no entry for the requested python version and
  platform, a warning is now printed instead of silently producing an empty
  coverage report.

{#v2-1-0-fixed}

Fixed

• (gazelle) py_library and py_test targets with missing source files can now be
  removed by Gazelle (#​3375).
  However map_kind and alias_kind will not be removed unless people are running a
  gazelle version that includes
  bazel-gazelle#2362
• (bootstrap) Fixed a potential race condition with symlink creation during
  startup.
• (gazelle) Fixed handling of auto-included __init__.py files when generating py_binary
  targets (#​3729).
• (entry_point) From now on mypy type checking will be skipped on the generated
  files (#​3126).
• (pypi) Support --experimental_isolated_extension_usages
  (#​3668).
• (uv) use the astral.sh mirror as the preferred url for binary downloads,
  with github.com as a fallback; for uv >= 0.11.0, read the checksums directly
  from the dist-manifest contents.
• (pypi) Fix importlib.metadata.files by ensuring RECORD is included in
  installed wheel targets, except when built from sdist
  (#​3024).
• (system_python) Fix AttributeError exception on Debian 10 Buster
  python installations which may not set sys._base_executable
  (#​3774).
• (windows) Fix py_test/py_binary failure when the target name contains
  path separators; the bootstrap stub is now declared as a sibling of the
  .exe launcher
  (#​3789).
• Fix the forwarding of target_compatible_with from compile_pip_requirements
  towards the underlying *.update target.
  (#​3787)
• (uv) allow user overwrite the build environment using --action_env to allow
  setting authentication for the index URL.
  (#​3405)
• (uv) fix the execution of the uv pip compile in the sandbox. Work
  towards better supporting uv out of the box on our platforms.
  (#​1975)
• (uv) automatically pass the --project parameter based on the source files.
  (#​3087)
• (coverage) handle nested coverage collection
  (#​3823)

{#v2-1-0-added}

Added

• (toolchain) Added {obj}PyRuntimeInfo.interpreter_files_to_run so action
  consumers can execute an in-build runtime interpreter with its runfiles.
• (toolchains) Support dynamically fetching and registering Python runtimes
  from a python-build-standalone manifest file using
  python.override(add_runtime_manifest_urls = ..., runtime_manifest_sha = ...).
• (toolchain) Added {obj}python.override.toolchain_target_settings to allow
  adding config_setting labels to all registered toolchains.
• (windows) Full venv support for Windows is available. Set
  {obj}--venvs_site_packages=yes to enable.
• (test/binaries) When {obj}--venv_site_packages=yes is enabled,
  wheel data, bin, and include files are populated into the venv.
• (runfiles) Added a pathlib-compatible API: {obj}Runfiles.root()
  Fixes #​3296.
• (gazelle) Support alias_kind directive.
  Fixes #​3183.
• (pypi) package_metadata support, fixes
  #​2054.
• (coverage) Add support for python 3.14 and bump coverage.py to 7.10.7.

{#v2-0-3}

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.