Skip to content

build(deps): bump policyuniverse from 1.5.1.20230817 to 1.5.1.20231109 - #2108

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/policyuniverse-1.5.1.20231109
Open

build(deps): bump policyuniverse from 1.5.1.20230817 to 1.5.1.20231109#2108
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/policyuniverse-1.5.1.20231109

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor

Bumps policyuniverse from 1.5.1.20230817 to 1.5.1.20231109.

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 23, 2026 02:36
@dependabot dependabot Bot added the python Pull requests that update Python code label Jun 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 23, 2026 02:36
@cursor

cursor Bot commented Jun 23, 2026

Copy link
Copy Markdown

PR Summary

Medium Risk
Medium risk because policyuniverse is used by IAM policy detections to expand and classify AWS permissions, so behavior could change even though this PR only updates dependency metadata.

Overview
Updates the pinned policyuniverse runtime dependency to 1.5.1.20231109 and refreshes Pipfile.lock with the new package hashes.

This may affect IAM policy analysis behavior where detections rely on policyuniverse for AWS action expansion and categorization.

Reviewed by Cursor Bugbot for commit 9baab72. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [policyuniverse](https://github.com/Netflix-Skunkworks/policyuniverse) from 1.5.1.20230817 to 1.5.1.20231109.
- [Commits](https://github.com/Netflix-Skunkworks/policyuniverse/commits)

---
updated-dependencies:
- dependency-name: policyuniverse
  dependency-version: 1.5.1.20231109
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/policyuniverse-1.5.1.20231109 branch from 7b4f1ea to 9baab72 Compare July 7, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants