Repository navigation
build(deps): refresh transitive dependencies in the lockfile - #102
Merged
Merged
Conversation
Dependabot only tracks the direct dependencies declared in pyproject.toml, so the transitive entries in uv.lock had drifted. All fifteen direct dependencies were already current; these are the indirect ones: annotated-types 0.7.0 -> 0.8.0 anyio 4.14.2 -> 4.15.1 certifi 2026.2.25 -> 2026.10.19 charset-normalizer 3.4.7 -> 3.5.2 greenlet 3.4.0 -> 3.5.6 idna 3.19 -> 3.20 lxml 6.1.0 -> 6.1.3 pyee 13.0.1 -> 14.0.0 soupsieve 2.9 -> 3.0.3 tzdata 2026.1 -> 2026.5 certifi carries the CA bundle and was eight months stale, which is the reason to do this rather than wait. The two major bumps are both indirect and were verified rather than assumed. soupsieve backs BeautifulSoup's CSS selectors: the one selector this repo uses, "select#semester option" in src/utils/jw.py, returns identical results under both html.parser and lxml. pyee is a patchright transitive and is not imported directly; the patchright sync and async entry points still load. Local verification: ruff check and ruff format clean, 92 tests pass. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependabot only tracks the direct dependencies declared in
pyproject.toml. All fifteen direct deps are already current, but the transitive entries inuv.lockhad drifted —certifi, which carries the CA bundle, was eight months stale.The two major bumps were verified, not assumed
soupsieve backs BeautifulSoup's CSS selector engine. The only selector in this repo is
select#semester option(src/utils/jw.py); under soupsieve 3.0.3 it returns identical results with bothhtml.parserandlxml.pyee is a patchright transitive and is never imported directly here;
patchright.sync_apiandpatchright.async_apiboth still load on 14.0.0.Verification
uv sync --frozen --group dev,ruff checkclean,ruff format --checkclean (53 files), 92 tests pass.🤖 Generated with Claude Code