← Back to issue list

build(deps): bump pygments to 2.20.0

View original Github issue

Metadata

Project
craft-parts
Number
#1529
Type
pull request
State
merged
Author
smethnani
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #1529 as commit 5ed85e12, updating Pygments to 2.20.0 to resolve an OSV; all listed CI checks passed.

Resolution: closed resolved

Reason: PR #1529 was merged as commit 5ed85e12. It updates Pygments to 2.20.0 to address an OSV, and all listed CI checks passed.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Updates pygments to 2.20.0 to resolve an osv. - [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? - [ ] Have you added an entry to the changelog (`docs/reference/changelog.rst`)? ---

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #1529 as commit 5ed85e12, updating Pygments to 2.20.0 to resolve an OSV; all listed CI checks passed.
stealth/space-bunny-alpha — closed resolved Merged #1529 (5ed85e12), updating Pygments to 2.20.0 to address an OSV; all listed CI checks passed.
qwen/qwen3.6-35b-a3b — — Merged to update pygments to 2.20.0, resolving an OSV vulnerability. Approved by two reviewers and passed all CI checks.
qwen3.6-35b-a3b-mtp-q6 — — Merged dependency update bumping pygments to 2.20.0 to resolve an OSV. Integrated by maintainer smethnani without additional review comments.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#124 build(deps): bump pygments from 2.19.2 to 2.20.0 starflow merged Dependabot PR bumping pygments 2.19.2 to 2.20.0 was approved by 2 reviewers, passed all CI checks, and merged into main via commit 1908f7b, updating uv.lock.
89%
#177 build(deps): bump pygments craft-grammar merged Merged the Pygments dependency bump in #177 via commit de39544, resolving an OSV warning with all CI checks passing.
88%
#115 build(deps): bump pygments from 2.19.2 to 2.20.0 debcraft merged Merged PR debcraft#115 as commit f580d60, updating Pygments from 2.19.2 to 2.20.0 in uv.lock.
87%
#5484 build(deps): update dependency pygments to v2.19.1 (main) snapcraft merged Renovate PR merged: bumped Pygments 2.15.0 -> 2.19.1 in the docs requirements via commit 20c577c2d, with all CI checks green.
86%
#2621 build(deps): bump pygments from 2.19.2 to 2.20.0 charmcraft closed Dependabot PR #2621 was closed unmerged; the same Pygments 2.20.0 template-lock update was merged separately in #2622 at commit 640adea3.
85%
#517 build(deps): bump pygments starbase merged Merged the Pygments dependency bump in #517 (commit c9fecdf), clearing the reported OSV security warning.
85%
#6143 build(deps): bump pygments from 2.19.2 to 2.20.0 snapcraft closed Duplicate Dependabot pygments 2.20.0 bump closed unmerged: maintainer @mr-cal noted PR #6142 already covers it, and that PR was merged as commit f92f0a484.
84%
#81 build(deps): resolve OSVs craft-artifacts merged Merged as commit 32dec6c in craft-artifacts, bumping Pygments 2.19.2→2.20.0 and pytest 9.0.2→9.0.3 in uv.lock to clear OSV-scanner advisories. Approved by 2 reviewers despite a failing typecheck-with-ty job.
80%
#4286 build(deps): bump pygments from 2.13.0 to 2.15.0 in /docs/.sphinx snapcraft merged Merged PR #4286 updated the documentation toolchain from Pygments 2.13.0 to 2.15.0 in commit f4721a956.
79%
#2638 build(deps): bump pygments from 2.19.2 to 2.20.0 in /tests/spread/ubuntu-24.04/test-cmd charmcraft closed Dependabot PR #2638 was closed unmerged; Pygments was not upgraded to 2.20.0, and the lockfile remains on 2.19.2.
79%