Skip to content

chore(deps): Bump 6 Python dependencies#92

Merged
usnavy13 merged 18 commits into
devfrom
deps/bump-dependencies
May 7, 2026
Merged

chore(deps): Bump 6 Python dependencies#92
usnavy13 merged 18 commits into
devfrom
deps/bump-dependencies

Conversation

@usnavy13
Copy link
Copy Markdown
Owner

@usnavy13 usnavy13 commented May 7, 2026

Summary

Merges 6 Dependabot dependency bumps into dev:

  • python-dotenv 1.2.1 → 1.2.2
  • pytest 9.0.2 → 9.0.3
  • uvicorn[standard] 0.41.0 → 0.42.0
  • redis 7.2.0 → 7.4.0
  • pytest-cov 4.1.0 → 7.1.0
  • fastapi 0.129.0 → 0.135.2

3 GitHub Actions Dependabot PRs (#67, #68, #69) were skipped — they target docker-publish.yml which was deleted on dev and replaced by new CI workflows.

Test plan

  • 498/498 unit tests pass
  • flake8 clean
  • mypy clean
  • Docker image builds and runs successfully
  • Integration tests pass against running stack

🤖 Generated with Claude Code

usnavy13 and others added 17 commits March 3, 2026 17:41
Release v1.2.0: nsjail sandboxing, PTC, and multi-language enhancements
Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
fix: resolve socket hang up errors for large file execution
fix: make sandbox uid configurable across all languages
Bumps [uvicorn[standard]](https://github.com/Kludex/uvicorn) from 0.41.0 to 0.42.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.41.0...0.42.0)

---
updated-dependencies:
- dependency-name: uvicorn[standard]
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.129.0 to 0.135.2.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.129.0...0.135.2)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.135.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [redis](https://github.com/redis/redis-py) from 7.2.0 to 7.4.0.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v7.2.0...v7.4.0)

---
updated-dependencies:
- dependency-name: redis
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pytest-cov](https://github.com/pytest-dev/pytest-cov) from 4.1.0 to 7.1.0.
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v4.1.0...v7.1.0)

---
updated-dependencies:
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
feat: improve execution continuity, PTC contracts, and deployment workflows
ci: remove obsolete runtime image publishing
Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.2 to 9.0.3.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…pipeline

- Remove nightly.yml entirely
- Slim ci.yml from 11 jobs to 3 (static, unit, integration) — PR checks only, no Docker builds
- Release.yml (unchanged) handles multi-arch image builds on merge to main/dev

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@usnavy13 usnavy13 merged commit e109628 into dev May 7, 2026
3 checks passed
@usnavy13 usnavy13 deleted the deps/bump-dependencies branch May 15, 2026 19:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant