Skip to content

chore(deps): combine dependabot dependency updates#241

Merged
saidsef merged 1 commit into
mainfrom
chore/combine-dependabot-prs
May 13, 2026
Merged

chore(deps): combine dependabot dependency updates#241
saidsef merged 1 commit into
mainfrom
chore/combine-dependabot-prs

Conversation

@saidsef
Copy link
Copy Markdown
Owner

@saidsef saidsef commented May 13, 2026

Summary

Combines 5 open dependabot PRs into a single update:

Note: PR #238 (pydantic-core 2.46.3 -> 2.46.4) is excluded - updating it independently conflicts with pydantic==2.13.3 which pins pydantic-core==2.46.3 exactly. That upgrade requires a coordinated pydantic + pydantic-core bump.

Test plan

  • Docker container builds successfully with updated dependencies
  • All hash-pinned entries in requirements.txt match the upstream release hashes

Batch update 5 dependencies from open dependabot PRs (#234-#237, #239):

- authlib 1.7.0 -> 1.7.1 (PR #239)
- cryptography 47.0.0 -> 48.0.0 (PR #234)
- jsonschema-path 0.4.5 -> 0.4.6 (PR #237)
- pydantic-settings 2.14.0 -> 2.14.1 (PR #235)
- uv 0.11.12 -> 0.11.13 (PR #236)

Note: pydantic-core (PR #238) excluded - bumping it independently
conflicts with pydantic==2.13.3 which pins pydantic-core==2.46.3 exactly.
@saidsef saidsef self-assigned this May 13, 2026
@saidsef saidsef added the dependencies Pull requests that update a dependency file label May 13, 2026
@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results
Complexity 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@github-actions
Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 5 package(s) with unknown licenses.
See the Details below.

License Issues

requirements.txt

PackageVersionLicenseIssue Type
authlib1.7.1NullUnknown License
cryptography48.0.0NullUnknown License
jsonschema-path0.4.6NullUnknown License
pydantic-settings2.14.1NullUnknown License
uv0.11.13NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
pip/authlib 1.7.1 UnknownUnknown
pip/cryptography 48.0.0 UnknownUnknown
pip/jsonschema-path 0.4.6 UnknownUnknown
pip/pydantic-settings 2.14.1 UnknownUnknown
pip/uv 0.11.13 UnknownUnknown

Scanned Files

  • requirements.txt

@saidsef saidsef merged commit 7a95ec6 into main May 13, 2026
6 checks passed
@saidsef saidsef deleted the chore/combine-dependabot-prs branch May 13, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant