This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [bump-my-version](https://github.com/callowayproject/bump-my-version) | `1.2.7` → `1.3.0` |  |  |
---
### Release Notes
<details>
<summary>callowayproject/bump-my-version (bump-my-version)</summary>
### [`v1.3.0`](https://github.com/callowayproject/bump-my-version/blob/HEAD/CHANGELOG.md#130-2026-03-22)
[Compare Source](https://github.com/callowayproject/bump-my-version/compare/1.2.7...1.3.0)
[Compare the full difference.](https://github.com/callowayproject/bump-my-version/compare/1.2.7...1.3.0)
##### Fixes
- Refactor hook script execution to handle platform-specific argument parsing; update typing imports. [a46b63d](https://github.com/callowayproject/bump-my-version/commit/a46b63dec2559c23ce2bee134f295d5b3e3439d5)
##### New
- Add `allow_shell_hooks` option for safe hook execution; improve shell syntax handling. [036ee1a](https://github.com/callowayproject/bump-my-version/commit/036ee1a909aeea02eb8e4b144f856fb6d70444e9)
- Introduce `allow_shell_hooks` configuration to control shell metacharacters in hooks.
- Change default behavior to disallow shell syntax (`shell=False`) unless explicitly enabled.
- Add regex detection for shell syntax and migrate affected hooks.
- Update tests and fixtures to cover new functionality.
- Enhance documentation with migration guidance and best practices.
##### Other
- Standardize formatting, spacing, and indentation across documentation and templates for consistency. [1b9eb42](https://github.com/callowayproject/bump-my-version/commit/1b9eb429b1cf9c458aea70c1eea6507c59089827)
- Modularize CLI commands into individual files: `bump`, `replace`, `show`, `show-bump`, and `sample-config`; add corresponding tests and shared options file. [c35c431](https://github.com/callowayproject/bump-my-version/commit/c35c4315407e775a714a971281ddcbda8a334ecc)
- Make `--regex` option nullable; add tests for precedence between CLI flags and config. [c78bbef](https://github.com/callowayproject/bump-my-version/commit/c78bbefdac3d0ee21acf2864c81c0cf0ffa8b27c)
##### Updates
- Update pre-commit, improve `is_subpath` logic, and enhance documentation. [919c66b](https://github.com/callowayproject/bump-my-version/commit/919c66b6c58095908dfd9ccdabab1cb367260df5)
- Update `ruff-pre-commit` to v0.15.1 in pre-commit config.
- Refine `is_subpath` logic to handle edge cases and add path resolution.
- Add security test cases for path traversal in `test_is_subpath`.
- Extend `AGENTS.md` with pytest execution instructions.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
1.2.7→1.3.0Release Notes
callowayproject/bump-my-version (bump-my-version)
v1.3.0Compare Source
Compare the full difference.
Fixes
New
Add
allow_shell_hooksoption for safe hook execution; improve shell syntax handling. 036ee1aallow_shell_hooksconfiguration to control shell metacharacters in hooks.shell=False) unless explicitly enabled.Other
Standardize formatting, spacing, and indentation across documentation and templates for consistency. 1b9eb42
Modularize CLI commands into individual files:
bump,replace,show,show-bump, andsample-config; add corresponding tests and shared options file. c35c431Make
--regexoption nullable; add tests for precedence between CLI flags and config. c78bbefUpdates
Update pre-commit, improve
is_subpathlogic, and enhance documentation. 919c66bruff-pre-committo v0.15.1 in pre-commit config.is_subpathlogic to handle edge cases and add path resolution.test_is_subpath.AGENTS.mdwith pytest execution instructions.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.