Skip to content

build(deps): combine Dependabot uv.lock bumps (certifi, virtualenv, filelock) - #261

Merged
e-lo merged 7 commits into
mainfrom
deps/combined-dependabot
Oct 28, 2026
Merged

e-lo merged 7 commits into
mainfrom
deps/combined-dependabot

Conversation

@e-lo

@e-lo e-lo commented Oct 28, 2026

Copy link
Copy Markdown
Owner

Combines the open Dependabot PRs into one lockfile update:

Merged Dependabot's own branches so the lockfile keeps its current uv format; the three merged with no conflicts. Only uv.lock changes. filelock and packaging are transitive. Nothing in src/tests imports them directly.

Verified locally: uv lock --check passes, and the full suite gives 4239 passed, 6 skipped (live LLM/calibration/plugin opt-ins).

Dependabot closes the individual PRs on its own once this merges.

🤖 Generated with Claude Code

dependabot Bot and others added 7 commits October 20, 2026 20:10
Bumps [certifi](https://github.com/certifi/python-certifi) from 2026.4.22 to 2026.10.19.
- [Commits](certifi/python-certifi@2026.04.22...2026.10.19)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.10.19
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.29.0 to 4.2.1.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.0...4.2.1)

---
updated-dependencies:
- dependency-name: filelock
  dependency-version: 4.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.14.5 to 21.14.13.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.14.5...21.14.13)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 21.14.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@e-lo
e-lo merged commit c963103 into main Oct 28, 2026
8 checks passed
@e-lo
e-lo deleted the deps/combined-dependabot branch October 28, 2026 19:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant