From a62ea24b9b940294d2425ffd8b80a50aa168adeb Mon Sep 17 00:00:00 2001 From: itswl Date: Mon, 19 Oct 2026 10:31:14 +0800 Subject: [PATCH] =?UTF-8?q?deps:=20fastapi=200.146.0,=20ruff=200.17.0,=20p?= =?UTF-8?q?ytest-cov=207.1.0=20=E2=80=94=20Dependabot=20#6=20#7=20#8=20as?= =?UTF-8?q?=20one=20relocked=20change?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The three requirements.txt edited exactly as the bot proposed (fastapi >=0.143.0 for the pipe and the judge, pytest-cov >=7.1.0 and ruff ==0.17.0 for all three), the new versions installed into each service's own venv, the component gates run green against them, the locks regenerated from those venvs with scripts/relock.sh (fastapi 0.142.2 -> 0.146.0, ruff 0.16.10 -> 0.17.0; pytest-cov was already locked at 7.1.0), the whole gate run again including the two image builds. A bot PR cannot relock, so merging one as-authored turns the gate red; the three are closed pointing at this. --- hookjudge/requirements.lock | 4 ++-- hookjudge/requirements.txt | 6 +++--- hookprobe/requirements.lock | 2 +- hookprobe/requirements.txt | 4 ++-- hookrelay/requirements.lock | 4 ++-- hookrelay/requirements.txt | 6 +++--- 6 files changed, 13 insertions(+), 13 deletions(-) diff --git a/hookjudge/requirements.lock b/hookjudge/requirements.lock index 860b4593..83f32709 100644 --- a/hookjudge/requirements.lock +++ b/hookjudge/requirements.lock @@ -12,7 +12,7 @@ click==8.4.2 coverage==7.16.2 cyclonedx-python-lib==11.12.0 defusedxml==0.7.1 -fastapi==0.142.2 +fastapi==0.146.0 filelock==3.32.3 h11==0.16.0 httpcore==1.0.9 @@ -48,7 +48,7 @@ python-dotenv==1.2.3 PyYAML==6.0.3 requests==2.34.2 rich==15.0.0 -ruff==0.16.10 +ruff==0.17.0 sortedcontainers==2.4.0 starlette==1.6.0 stevedore==5.9.0 diff --git a/hookjudge/requirements.txt b/hookjudge/requirements.txt index 97befd2c..e063a803 100644 --- a/hookjudge/requirements.txt +++ b/hookjudge/requirements.txt @@ -1,5 +1,5 @@ # Four runtime dependencies, chosen to stay four. -fastapi>=0.142.2 +fastapi>=0.143.0 uvicorn[standard]>=0.54.0 aiosqlite>=0.22.1 httpx>=0.28.1 @@ -7,8 +7,8 @@ httpx>=0.28.1 # Test + lint pytest>=9.1.1 pytest-asyncio>=1.4.0 -pytest-cov>=7.0 -ruff==0.16.10 +pytest-cov>=7.1.0 +ruff==0.17.0 bandit>=1.9.4 pip-audit>=2.10.1 mypy>=2.4.0 diff --git a/hookprobe/requirements.lock b/hookprobe/requirements.lock index 0c4d4e1f..255598ae 100644 --- a/hookprobe/requirements.lock +++ b/hookprobe/requirements.lock @@ -61,7 +61,7 @@ referencing==0.37.0 requests==2.34.2 rich==15.0.0 rpds-py==2026.6.3 -ruff==0.16.10 +ruff==0.17.0 sniffio==1.3.1 sortedcontainers==2.4.0 sse-starlette==3.4.8 diff --git a/hookprobe/requirements.txt b/hookprobe/requirements.txt index 71d0e76b..1682dd48 100644 --- a/hookprobe/requirements.txt +++ b/hookprobe/requirements.txt @@ -8,8 +8,8 @@ claude-agent-sdk>=0.1.0 # Test + lint (tests never import the SDK; they inject fake engines) pytest>=9.1.1 httpx>=0.28.1 -pytest-cov>=7.0 -ruff==0.16.10 +pytest-cov>=7.1.0 +ruff==0.17.0 bandit>=1.9.4 pip-audit>=2.10.1 mypy>=2.4.0 diff --git a/hookrelay/requirements.lock b/hookrelay/requirements.lock index 68ce6cc4..cca7e0a3 100644 --- a/hookrelay/requirements.lock +++ b/hookrelay/requirements.lock @@ -12,7 +12,7 @@ click==8.4.2 coverage==7.16.2 cyclonedx-python-lib==11.12.0 defusedxml==0.7.1 -fastapi==0.142.2 +fastapi==0.146.0 filelock==3.32.3 h11==0.16.0 httpcore==1.0.9 @@ -48,7 +48,7 @@ python-dotenv==1.2.3 PyYAML==6.0.3 requests==2.34.2 rich==15.0.0 -ruff==0.16.10 +ruff==0.17.0 sortedcontainers==2.4.0 starlette==1.6.0 stevedore==5.9.0 diff --git a/hookrelay/requirements.txt b/hookrelay/requirements.txt index 9b1ce2a5..0f7f4dea 100644 --- a/hookrelay/requirements.txt +++ b/hookrelay/requirements.txt @@ -1,5 +1,5 @@ # Runtime — five dependencies, chosen to stay five. -fastapi>=0.142.2 +fastapi>=0.143.0 uvicorn[standard]>=0.54.0 aiosqlite>=0.22.1 httpx>=0.28.1 @@ -8,8 +8,8 @@ pyyaml>=6.0.3 # Test + lint pytest>=9.1.1 pytest-asyncio>=1.4.0 -pytest-cov>=7.0 -ruff==0.16.10 +pytest-cov>=7.1.0 +ruff==0.17.0 bandit>=1.9.4 pip-audit>=2.10.1 mypy>=2.4.0