build(deps): resolve OSVs
Metadata
Current evaluation
Merged after two approvals. Updates pygments to 2.20.0 and pytest to 9.0.3 to resolve OSV security vulnerabilities. CI checks passed, and the six-line dependency lock update was successfully integrated.
Suggested action: —
No scores available.
Issue body
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
---
```
❯ uv lock -P pytest -P pygments
Using CPython 3.14.2
Resolved 118 packages in 516ms
Updated pygments v2.19.2 -> v2.20.0
Updated pytest v9.0.2 -> v9.0.3
```
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged after two approvals. Updates pygments to 2.20.0 and pytest to 9.0.3 to resolve OSV security vulnerabilities. CI checks passed, and the six-line dependency lock update was successfully integrated. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged dependency update to resolve OSV vulnerabilities. Updated pygments to v2.20.0 and pytest to v9.0.3 via uv lock. Changes were integrated into the main branch. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #180 build(deps): resolve OSVs | craft-grammar | merged | Merged following two approvals and successful CI checks. Updated pytest from v9.0.2 to v9.0.3 to resolve OSV security vulnerabilities across one dependency file. | |
| #131 build(deps): resolve OSVs | debcraft | merged | Merged dependency updates to resolve OSV vulnerabilities. Updated cryptography, pygments, pytest, requests, and craft-parts via uv lock. Approved by two reviewers with all CI checks passing. Changes accepted despite minor pinning discussions. | |
| #313 build(deps): resolve osvs | imagecraft | merged | Merged after approval by two reviewers. Bumps pygments and cryptography dependencies to resolve OSVs. Integrated despite failing spread tests on Ubuntu versions. | |
| #517 build(deps): bump pygments | starbase | merged | Merged a dependency update to bump pygments, resolving an OSV security warning. Approved by two reviewers, passed all CI checks, and integrated with a minimal three-line change. | |
| #1529 build(deps): bump pygments to 2.20.0 | craft-parts | merged | Merged to update pygments to 2.20.0, resolving an OSV vulnerability. Approved by two reviewers and passed all CI checks. | |
| #177 build(deps): bump pygments | craft-grammar | merged | Merged pull request that bumps the pygments dependency to fix an OSV security warning. Approved by two reviewers and passed all CI checks before integration. | |
| #945 build(deps): resolve OSVs | craft-providers | merged | Merged dependency updates resolving OSV vulnerabilities. Bumps cryptography to 46.0.7 and pytest to 9.0.3 to fix minimum dependency test failures. Conflicts resolved automatically before final merge. | |
| #224 build(deps): update pytest for OSV | craft-platforms | merged | Merged an update to the pytest dependency to resolve compatibility with Python versions unsupported by pytest 9. Approved by two reviewers, passed CI checks, and modified four files. | |
| #353 build(deps): bump libraries for OSVs | craft-store | merged | Merged after updating cryptography, markdown, and pygments to patch OSV vulnerabilities. Approved by two reviewers and passed all CI checks. | |
| #6179 build(deps): update pytest | snapcraft | merged | Merged a pytest dependency update to resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. The change modifies one file with minimal adjustments. |