Fix Depandabot alerts in pyproject.toml + uv.lock - #854
Conversation
📋 License Check Report
Note: This project is MIT-licensed. LGPL and most permissive licenses are compatible. GPL and proprietary licenses require review. |
Codecov Report✅ All modified and coverable lines are covered by tests. 🚀 New features to boost your workflow:
|
📋 License Check Report
Note: This project is MIT-licensed. LGPL and most permissive licenses are compatible. GPL and proprietary licenses require review. |
There was a problem hiding this comment.
Pull request overview
This PR updates Python dependency versions to address Dependabot alerts by bumping beautifulsoup4 and sphinxcontrib-openapi, and regenerating the uv lockfile to reflect the resolved versions.
Changes:
- Bump
beautifulsoup4minimum version to>=4.15.0(dev group) and lock to4.15.0. - Bump
sphinxcontrib-openapiminimum version to>=0.9.0(docs group) and lock to0.9.0. - Update
uv.lockartifacts (sdist/wheel URLs, hashes, metadata specifiers) to match the new resolved dependency set.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| uv.lock | Locks updated dependency versions and associated artifacts/metadata to match the new minimum constraints. |
| pyproject.toml | Raises minimum versions for beautifulsoup4 (dev) and sphinxcontrib-openapi (docs) to remediate alerts. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
Legal