build(docs): bump pygments
Metadata
Current evaluation
Merged as commit 40bdfae, updating the documentation lockfile to bump Pygments and resolve an OSV security warning. All reported CI checks passed.
Resolution: closed resolved
Reason: PR #435 was merged as commit 40bdfae. It updated the Pygments documentation dependency and passed the OSV scanner, lint checks, and all test jobs.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
---
Bump pygments to resolve an OSV warning.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged as commit 40bdfae, updating the documentation lockfile to bump Pygments and resolve an OSV security warning. All reported CI checks passed. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #435 (commit 40bdfae), bumping the Pygments documentation dependency to address an OSV security warning. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged after bumping pygments to resolve an OSV security warning. Approved by two reviewers with all CI checks passing. Lint errors were resolved in a separate PR. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/craft-cli#434
(confidence 85%)
The author noted that lint errors were fixed in PR #434 before this dependency update.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #517 build(deps): bump pygments | starbase | merged | Merged the Pygments dependency bump in #517 (commit c9fecdf), clearing the reported OSV security warning. | |
| #6142 build(docs): bump pygments | snapcraft | merged | Merged PR #6142 (commit f92f0a484) by mr-cal, bumping the Pygments docs dependency to clear an OSV alert; mirrors the same fix in canonical/craft-cli#435. | |
| #177 build(deps): bump pygments | craft-grammar | merged | Merged the Pygments dependency bump in #177 via commit de39544, resolving an OSV warning with all CI checks passing. | |
| #1529 build(deps): bump pygments to 2.20.0 | craft-parts | merged | Merged PR #1529 as commit 5ed85e12, updating Pygments to 2.20.0 to resolve an OSV; all listed CI checks passed. | |
| #4286 build(deps): bump pygments from 2.13.0 to 2.15.0 in /docs/.sphinx | snapcraft | merged | Merged PR #4286 updated the documentation toolchain from Pygments 2.13.0 to 2.15.0 in commit f4721a956. | |
| #940 build(deps): update cryptography, pygments, requests | craft-providers | merged | Merged PR #940 as commit eb8549f, updating cryptography, Pygments, and requests to resolve three OSV warnings. | |
| #5484 build(deps): update dependency pygments to v2.19.1 (main) | snapcraft | merged | Renovate PR merged: bumped Pygments 2.15.0 -> 2.19.1 in the docs requirements via commit 20c577c2d, with all CI checks green. | |
| #1501 build(docs): update and clean docs dependencies | craft-parts | merged | Merged as 753f2044: updated and cleaned documentation dependencies, removing sphinx-pydantic after migration to pydantic-kitbash. | |
| #81 build(deps): resolve OSVs | craft-artifacts | merged | Merged as commit 32dec6c in craft-artifacts, bumping Pygments 2.19.2→2.20.0 and pytest 9.0.2→9.0.3 in uv.lock to clear OSV-scanner advisories. Approved by 2 reviewers despite a failing typecheck-with-ty job. | |
| #313 build(deps): resolve osvs | imagecraft | merged | Merged in commit 10f3370, updating Pygments and cryptography to resolve OSV findings. |