Skip to content

chore: patch research benchmark dependencies - #44

Merged
ithiria894 merged 1 commit into
mainfrom
chore/research-dependency-alerts
Oct 16, 2026
Merged

ithiria894 merged 1 commit into
mainfrom
chore/research-dependency-alerts

Conversation

@ithiria894

Copy link
Copy Markdown
Member

Summary

Regenerate the current CPython 3.10 Linux research benchmark lock for the two transitive packages covered by open Dependabot alerts.

  • multidict: 6.8.0 → 6.9.1
  • urllib3: 2.7.0 → 2.8.0

The historical requirements-bench-2026-06-03.freeze remains unchanged for reproducibility. These research files are excluded from the npm package.

Verification

  • uv pip compile resolved all 114 packages successfully using the command recorded in the lock header
  • both versions meet the first-patched versions in Dependabot alerts #71, #72, #74, and #75
  • git diff --check passed

@ithiria894
ithiria894 merged commit 39cf32f into main Oct 16, 2026
2 checks passed
@ithiria894
ithiria894 deleted the chore/research-dependency-alerts branch October 16, 2026 22:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant