Skip to content
This repository was archived by the owner on May 14, 2026. It is now read-only.

chore(deps): lock file maintenance [skip pre-commit.ci]#1236

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/lock-file-maintenance
Open

chore(deps): lock file maintenance [skip pre-commit.ci]#1236
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/lock-file-maintenance

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 6, 2026

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

🔧 This Pull Request updates lock files to use the latest dependency versions.


Configuration

📅 Schedule: Branch creation - "before 4am on Monday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 6, 2026

📚 Documentation Preview

Type URL Version Message
Production https://tux.atl.dev - -
Preview https://d092ef79-tux-docs.allthingslinux.workers.dev d092ef79-fed4-4a93-905d-e31518a97413 Preview: tux@5b5015e15569de1cd5b512b9dea30e10d8b1c513 on 1236/merge by renovate[bot] (run 536)

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 6, 2026

Dependency Review

The following issues were found:
  • ❌ 1 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 25 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 3c5e7aa.
Ensure that dependencies are being submitted on PR branches. Re-running this action after a short time may resolve the issue. See the documentation for more information and troubleshooting advice.

Vulnerabilities

uv.lock

NameVersionVulnerabilitySeverity
ecdsa0.19.2Minerva timing attack on P-256 in python-ecdsahigh
Only included vulnerabilities with severity high or higher.

License Issues

uv.lock

PackageVersionLicenseIssue Type
aiohttp3.13.5NullUnknown License
cryptography46.0.7NullUnknown License
django6.0.4NullUnknown License
fastapi0.136.0NullUnknown License
filelock3.28.0NullUnknown License
greenlet3.4.0NullUnknown License
mako1.3.11NullUnknown License
nodejs-wheel-binaries24.14.1NullUnknown License
packaging26.1NullUnknown License
platformdirs4.9.6NullUnknown License
pydantic2.13.2NullUnknown License
pymdown-extensions10.21.2NullUnknown License
pytest9.0.3NullUnknown License
python-discovery1.2.2NullUnknown License
rapidfuzz3.14.5NullUnknown License
ruff0.15.11NullUnknown License
starlette1.0.0NullUnknown License
types-aiofiles25.1.0.20260409NullUnknown License
types-mock5.2.0.20260408NullUnknown License
types-psutil7.2.2.20260408NullUnknown License
types-pytz2026.1.1.20260408NullUnknown License
types-pyyaml6.0.12.20260408NullUnknown License
virtualenv21.2.4NullUnknown License
ecdsa0.19.2NullUnknown License
tzdata2026.1NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
pip/ecdsa 0.19.2 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 3Found 5/14 approved changesets -- score normalized to 3
Security-Policy🟢 10security policy file detected
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing🟢 10project is fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST🟢 8SAST tool detected but not run on all commits
pip/aiohttp 3.13.5 UnknownUnknown
pip/anyio 4.13.0 UnknownUnknown
pip/attrs 26.1.0 UnknownUnknown
pip/click 8.3.2 UnknownUnknown
pip/coverage 7.13.5 UnknownUnknown
pip/cryptography 46.0.7 UnknownUnknown
pip/django 6.0.4 UnknownUnknown
pip/fastapi 0.136.0 UnknownUnknown
pip/filelock 3.28.0 UnknownUnknown
pip/greenlet 3.4.0 UnknownUnknown
pip/identify 2.6.19 🟢 5.9
Details
CheckScoreReason
Code-Review🟢 8Found 15/17 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/mako 1.3.11 UnknownUnknown
pip/nodejs-wheel-binaries 24.14.1 UnknownUnknown
pip/numpy 2.4.4 UnknownUnknown
pip/packaging 26.1 UnknownUnknown
pip/platformdirs 4.9.6 UnknownUnknown
pip/pyasn1 0.6.3 UnknownUnknown
pip/pydantic 2.13.2 UnknownUnknown
pip/pydantic-core 2.46.2 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/pygments 2.20.0 UnknownUnknown
pip/pymdown-extensions 10.21.2 UnknownUnknown
pip/pytest 9.0.3 UnknownUnknown
pip/pytest-cov 7.1.0 UnknownUnknown
pip/python-discovery 1.2.2 UnknownUnknown
pip/rapidfuzz 3.14.5 UnknownUnknown
pip/ruff 0.15.11 UnknownUnknown
pip/sentry-sdk 2.58.0 🟢 5.6
Details
CheckScoreReason
Code-Review🟢 9Found 23/25 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
License🟢 10license file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/starlette 1.0.0 UnknownUnknown
pip/types-aiofiles 25.1.0.20260409 UnknownUnknown
pip/types-mock 5.2.0.20260408 UnknownUnknown
pip/types-psutil 7.2.2.20260408 UnknownUnknown
pip/types-pytz 2026.1.1.20260408 UnknownUnknown
pip/types-pyyaml 6.0.12.20260408 UnknownUnknown
pip/tzdata 2026.1 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 7Found 16/22 approved changesets -- score normalized to 7
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/virtualenv 21.2.4 UnknownUnknown
pip/zensical 0.0.33 UnknownUnknown

Scanned Files

  • uv.lock

@sentry
Copy link
Copy Markdown

sentry Bot commented Apr 6, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 42.96%. Comparing base (c0e1a1e) to head (3c5e7aa).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1236      +/-   ##
==========================================
+ Coverage   42.83%   42.96%   +0.13%     
==========================================
  Files         233      233              
  Lines       18398    18398              
  Branches     2424     2424              
==========================================
+ Hits         7881     7905      +24     
+ Misses      10517    10493      -24     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 1f6594f to 3c5e7aa Compare April 18, 2026 17:20
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants