Update maintenance

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
black (changelog)	==24.4.2 -> ==24.8.0						minor
pglast	==6.2 -> ==6.3					install	minor
pglast	==6.2 -> ==6.3						minor
pyparsing	==3.1.2 -> ==3.1.3						patch
step-security/harden-runner	v2.9.0 -> v2.9.1					action	patch
tox (changelog)	==4.16.0 -> ==4.18.0						minor

---

Release Notes

psf/black (black)

v24.8.0

Compare Source

Stable style

• Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#​4363)

Packaging

• Packaging metadata updated: docs are explictly linked, the issue tracker is now also
  linked. This improves the PyPI listing for Black. (#​4345)

Parser

• Fix regression where Black failed to parse a multiline f-string containing another
  multiline string (#​4339)
• Fix regression where Black failed to parse an escaped single quote inside an f-string
  (#​4401)
• Fix bug with Black incorrectly parsing empty lines with a backslash (#​4343)
• Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#​4422)
• Fix incorrect line numbers in the tokenizer for certain tokens within f-strings
  (#​4423)

Performance

• Improve performance when a large directory is listed in .gitignore (#​4415)

Blackd

• Fix blackd (and all extras installs) for docker container (#​4357)

lelit/pglast (pglast)

v6.3

Compare Source

step-security/harden-runner (step-security/harden-runner)

v2.9.1

Compare Source

What's Changed

Release v2.9.1 by @​h0x0er and @​varunsh-coder in #​440
This release includes two changes:

1. Updated markdown displayed in the job summary by the Harden-Runner Action.
2. Fixed a bug affecting Enterprise Tier customers where the agent attempted to upload telemetry for jobs with disable-telemetry set to true. No telemetry was uploaded as the endpoint was not in the allowed list.

Full Changelog: step-security/harden-runner@v2...v2.9.1

tox-dev/tox (tox)

v4.18.0

Compare Source

What's Changed

• Fix #​3278 - Boost temporary directories cleanup in tests by @​ziima in https://github.com/tox-dev/tox/pull/3323
• Fix absolute base python paths conflicting by @​gaborbernat in https://github.com/tox-dev/tox/pull/3325
• Fix #​3318 - Suppress spinner in parallel runs in CI by @​ziima in https://github.com/tox-dev/tox/pull/3321

Full Changelog: tox-dev/tox@4.17.1...4.18.0

v4.17.1

Compare Source

What's Changed

• Restore limited <major>.<minor> environment name support by @​gaborbernat in https://github.com/tox-dev/tox/pull/3319
• fix(tox_env.python): do not process absolute paths to interpreter as PythonSpec by @​paveldikov in https://github.com/tox-dev/tox/pull/3311

New Contributors

• @​paveldikov made their first contribution in https://github.com/tox-dev/tox/pull/3311

Full Changelog: tox-dev/tox@4.17.0...4.17.1

v4.17.0

Compare Source

What's Changed

• Fix user guide system overview so nodes don't overlap. by @​Tom01098 in https://github.com/tox-dev/tox/pull/3307
• Table with list of default env vars per OS by @​seyidaniels in https://github.com/tox-dev/tox/pull/3291
• Add GraalPy and test both GraalPy and Jython env identifiers by @​timfel in https://github.com/tox-dev/tox/pull/3312
• Add on platform constat to core by @​gaborbernat in https://github.com/tox-dev/tox/pull/3315

New Contributors

• @​Tom01098 made their first contribution in https://github.com/tox-dev/tox/pull/3307
• @​timfel made their first contribution in https://github.com/tox-dev/tox/pull/3312

Full Changelog: tox-dev/tox@4.16.0...4.17.0

---

Configuration

📅 Schedule: Branch creation - "every month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}