← Back to issue list

build(deps): resolve OSVs

View original Github issue

Metadata

Project
craft-grammar
Number
#180
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged following two approvals and successful CI checks. Updated pytest from v9.0.2 to v9.0.3 to resolve OSV security vulnerabilities across one dependency file.

Suggested action: —

No scores available.

Issue body

- [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? --- ``` ❯ uv lock -P pytest Resolved 120 packages in 721ms Updated pytest v9.0.2 -> v9.0.3 ```

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged following two approvals and successful CI checks. Updated pytest from v9.0.2 to v9.0.3 to resolve OSV security vulnerabilities across one dependency file.
qwen3.6-35b-a3b-mtp-q6 — — Merged updates pytest from v9.0.2 to v9.0.3 via uv lock to resolve OSV vulnerabilities. The maintainer merged the dependency bump directly without review comments.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#81 build(deps): resolve OSVs craft-artifacts merged Merged after two approvals. Updates pygments to 2.20.0 and pytest to 9.0.3 to resolve OSV security vulnerabilities. CI checks passed, and the six-line dependency lock update was successfully integrated.
89%
#224 build(deps): update pytest for OSV craft-platforms merged Merged an update to the pytest dependency to resolve compatibility with Python versions unsupported by pytest 9. Approved by two reviewers, passed CI checks, and modified four files.
86%
#6179 build(deps): update pytest snapcraft merged Merged a pytest dependency update to resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. The change modifies one file with minimal adjustments.
84%
#945 build(deps): resolve OSVs craft-providers merged Merged dependency updates resolving OSV vulnerabilities. Bumps cryptography to 46.0.7 and pytest to 9.0.3 to fix minimum dependency test failures. Conflicts resolved automatically before final merge.
84%
#131 build(deps): resolve OSVs debcraft merged Merged dependency updates to resolve OSV vulnerabilities. Updated cryptography, pygments, pytest, requests, and craft-parts via uv lock. Approved by two reviewers with all CI checks passing. Changes accepted despite minor pinning discussions.
84%
#321 build(deps): bump pytest imagecraft merged Merged a dependency update bumping pytest to resolve an OSV vulnerability. Approved by two reviewers with all CI checks passing. The change modified a single file with minimal adjustments.
83%
#1550 build(deps): bump pytest craft-parts merged Merged to bump pytest, resolving an OSV security vulnerability. Approved by two reviewers with all CI checks passing. The update required a minimal three-line configuration change.
82%
#524 build(deps): bump pytest starbase merged Merged a dependency update bumping pytest to resolve an OSV. Approved by two reviewers with all CI checks passing. The change updates a single file.
82%
#453 build(deps): bump pytest craft-cli merged Merged a dependency update to bump pytest, resolving an OSV scanner vulnerability. Approved by one reviewer and passed all CI checks across multiple platforms and Python versions.
82%
#143 build(deps): resolve OSVs debcraft merged Resolved OSV security vulnerabilities by updating idna to v3.18 and urllib3 to v2.7.0. Approved by a reviewer, passed all CI checks, and merged.
82%