Skip to content

chore(deps): update dependencies and GitHub Actions - #2354

Merged
vdusek merged 9 commits into
masterfrom
renovate/pypi-filelock-vulnerability
Oct 26, 2026
Merged

vdusek merged 9 commits into
masterfrom
renovate/pypi-filelock-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps filelock for the security advisories below and folds in the remaining Renovate updates, so all dependency and GitHub Actions updates land in one PR.

Python:

GitHub Actions:

  • pypa/gh-action-pypi-publish digest -> 7245906
  • astral-sh/setup-uv v10.3.0 -> v10.3.2
  • actions/setup-python v7.0.0 -> v7.1.0

Website:

  • markdownlint ^0.41.1 -> ^0.42.0
  • markdownlint-cli ^0.49.1 -> ^0.50.0
  • oxfmt ^0.72.0 -> ^0.74.0
  • pnpm 12.11.2 -> 12.15.0

The pytest-asyncio >=1.4.0,<1.5.0 update is left out. It would replace the Python 3.10 pin (>=1.0.0,<1.1.0), which exists because 1.1+ can hang tests on 3.10 (see the comment in pyproject.toml).

✍️ Drafted by Claude Code

@github-actions github-actions Bot added the t-tooling Issues with this label are in the ownership of the tooling team. label Oct 26, 2026
@vdusek vdusek changed the title chore(deps): update dependency filelock to v4.2.1 [security] chore(deps): update dependencies and GitHub Actions Oct 26, 2026
@renovate

renovate Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@codecov

codecov Bot commented Oct 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.12%. Comparing base (449b82b) to head (5994943).

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #2354      +/-   ##
==========================================
+ Coverage   94.10%   94.12%   +0.01%     
==========================================
  Files         184      184              
  Lines       13647    13647              
==========================================
+ Hits        12843    12845       +2     
+ Misses        804      802       -2     
Flag Coverage Δ
unit 94.12% <ø> (+0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@vdusek
vdusek merged commit cd6f748 into master Oct 26, 2026
134 checks passed
@vdusek
vdusek deleted the renovate/pypi-filelock-vulnerability branch October 26, 2026 06:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

t-tooling Issues with this label are in the ownership of the tooling team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants