Repository navigation
deps: fastapi 0.162.0, pytest-asyncio 1.4.1.post1, ruff 0.17.2 — Dependabot #29 #30 #31 relocked - #33
Merged
Merged
Conversation
…ndabot #29 #30 #31 as one relocked change The bot's three requirements.txt edits as proposed: fastapi>=0.162.0 and pytest-asyncio>=1.4.1 for the pipe and the judge, ruff==0.17.2 for all three. A bot PR cannot regenerate requirements.lock from the venv the gate ran against, so merged as authored it fails the lock check; the locks here come from scripts/relock.sh after a green gate. fastapi 0.162.0 is the only release since the locked 0.161.1, a tagged release on its own repository from its release workflow. pytest-asyncio resolves to 1.4.1.post1, the newest, tagged upstream. ruff is pinned exactly as the bot proposed, 0.17.2, and found nothing new. Those three are the only pins that moved; pip-audit is clean on every lock. STACK GATE GREEN.
This was referenced Nov 2, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependabot's three grouped PRs (#29 hookjudge, #30 hookrelay, #31 hookprobe) as one change, the way #11 and #18 did it. A bot PR edits
requirements.txtbut cannot regeneraterequirements.lockfrom the venv the gate ran against, so merged as authored it fails the lock check.The bot's edits, as proposed:
fastapi>=0.162.0andpytest-asyncio>=1.4.1for the pipe and the judge,ruff==0.17.2for all three.What the locks moved: fastapi 0.161.1 to 0.162.0, the only release since, tagged on its own repository by its release workflow; pytest-asyncio 1.4.0 to 1.4.1.post1, the newest, tagged upstream; ruff 0.17.1 to 0.17.2, pinned exactly as proposed, which found nothing new. Nothing else moved, and pip-audit is clean on every lock.
fastapi is a runtime dependency of the pipe and the judge, so their images take it at the next build or release; ruff and pytest-asyncio are tooling.
Gate: STACK GATE GREEN locally; CI read back before merging. Done by Claude (claude-opus-5-5) at the repository owner's request.