build(dep): update dependencies
Metadata
Current evaluation
Merged as commit e148af23 (charmcraft#2223), bumping dependencies in 2 files (+900/-756) to clear failing OSV security scanner checks; approved by 2 maintainers.
Resolution: closed resolved
Reason: PR #2223 was merged into the mainline as commit e148af23 with the title 'build(dep): update dependencies (#2223)'. Its stated purpose was to fix the repo's OSV scanner failures, which run via the Security scan job in .github/workflows/policy.yaml (osv-scanner with osv-scanner.toml config); the large lockfile/manifest update resolved those findings.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This fixes our OSV scanner failures.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged as commit e148af23 (charmcraft#2223), bumping dependencies in 2 files (+900/-756) to clear failing OSV security scanner checks; approved by 2 maintainers. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #2223 as commit e148af23, updating dependencies in two files (+900/-756) to resolve OSV scanner failures. Approved by two maintainers. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged dependency updates to resolve OSV scanner failures. Approved by two reviewers, the change modifies two files with 900 additions and 756 deletions. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged dependency update to resolve OSV scanner failures. The maintainer updated project dependencies, successfully addressing security vulnerability scanning errors. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/charmcraft#2583
(confidence 45%)
Later recurring bulk dependency-update commit 'build(deps): update all dependencies (#2583)', following the same pattern as this OSV-motivated bump.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1493 build(deps): update dependencies | charmcraft | merged | Merged dependency updates in charmcraft#1493 via commit c545a05f, changing two files (+47/-70). | |
| #1607 build(deps): update requirements | charmcraft | merged | Merged consolidated Renovate dependency updates in canonical/charmcraft#1607 via commit 685b159b, changing three files (+13/-12). | |
| #2727 build(deps): update dependencies | charmcraft | merged | Renovate-style dependency refresh by maintainer lengau merged into main as commit 174fd8ff (7 files, +1426/-1239), updating lockfiles/constraints ahead of the Charmcraft 4.3.0 release candidate. | |
| #1494 build(deps): update dependencies for 2.5 branch | charmcraft | merged | Merged dependency updates for the 2.5 branch in canonical/charmcraft#1494 via commit 4d9820b6; test failures were attributed to craft-providers#502. | |
| #697 Updated dependencies. | charmcraft | merged | Merged dependency updates from canonical/charmcraft#697 into main via caa98041 (change commit 19eb9589). | |
| #1353 chore(deps): update all dependencies | charmcraft | merged | Merged charmcraft#1353 via commit 18b4d9d7, updating all dependencies across three files (+23/-24). | |
| #874 build(deps): update dependencies | rockcraft | merged | Merged routine dependency-bump PR by maintainer tigarmo into main as commit 452a71dc (+1806/-1430 across 5 files), with 2 approvals and all lint, fast/slow, min-deps, schema and security checks green. | |
| #1119 build(deps): update dependency requests to v2.32.4 [security] (hotfix/2.7) - autoclosed | craft-parts | closed | Autoclosed unmerged; canonical/craft-parts#1121 replaced the requests update and landed as commit 53f7d360, using a version that passed OSV scanning. | |
| #2746 build(deps): update bugfixes (main) | charmcraft | merged | Renovate PR canonical/charmcraft#2746 merged into main, bumping ruff-pre-commit v0.15.17→v0.15.20 and fastapi 0.138.0→0.138.1 (+2/-2 in 2 files); approved, lint/tests passing. | |
| #2950 build(deps): update all dependencies | charmcraft | merged | Updated all dependencies to latest versions for Charmcraft 4.5, locking direct craft dependencies to minor versions. Merged into main via commit f437144. |