← Back to issue list

build(deps): bump pygments to 2.20.0

View original Github issue

Metadata

Project
craft-parts
Number
#1529
Type
pull request
State
merged
Author
smethnani
Labels
Created
Updated
Closed

Current evaluation

Merged to update pygments to 2.20.0, resolving an OSV vulnerability. Approved by two reviewers and passed all CI checks.

Suggested action:

No scores available.

Issue body

Updates pygments to 2.20.0 to resolve an osv. - [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? - [ ] Have you added an entry to the changelog (`docs/reference/changelog.rst`)? ---

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b Merged to update pygments to 2.20.0, resolving an OSV vulnerability. Approved by two reviewers and passed all CI checks.
qwen3.6-35b-a3b-mtp-q6 Merged dependency update bumping pygments to 2.20.0 to resolve an OSV. Integrated by maintainer smethnani without additional review comments.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#517 build(deps): bump pygments starbase merged Merged a dependency update to bump pygments, resolving an OSV security warning. Approved by two reviewers, passed all CI checks, and integrated with a minimal three-line change.
90%
#177 build(deps): bump pygments craft-grammar merged Merged pull request that bumps the pygments dependency to fix an OSV security warning. Approved by two reviewers and passed all CI checks before integration.
89%
#124 build(deps): bump pygments from 2.19.2 to 2.20.0 starflow merged Merged a Dependabot PR updating pygments from 2.19.2 to 2.20.0. Approved by two reviewers, passed all CI checks, and modified a single file with three additions and three deletions.
88%
#115 build(deps): bump pygments from 2.19.2 to 2.20.0 debcraft merged Merged Dependabot PR updating pygments from 2.19.2 to 2.20.0. The update adds new lexers, fixes bugs, drops Python 3.8, and adds Python 3.14 support. Approved by reviewers and passed CI checks before successful merge.
87%
#6142 build(docs): bump pygments snapcraft merged Merged a PR bumping pygments to resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. The change updates a single file with minimal modifications.
83%
#81 build(deps): resolve OSVs craft-artifacts merged Merged after two approvals. Updates pygments to 2.20.0 and pytest to 9.0.3 to resolve OSV security vulnerabilities. CI checks passed, and the six-line dependency lock update was successfully integrated.
83%
#2621 build(deps): bump pygments from 2.19.2 to 2.20.0 charmcraft closed Closed and abandoned due to failing CI checks and lack of review. Dependabot ceased notifications for this release. The pygments update was not merged.
83%
#435 build(docs): bump pygments craft-cli merged Merged after bumping pygments to resolve an OSV security warning. Approved by two reviewers with all CI checks passing. Lint errors were resolved in a separate PR.
82%
#6143 build(deps): bump pygments from 2.19.2 to 2.20.0 snapcraft closed Superseded by PR #6142. The pygments dependency update was closed after a maintainer confirmed the change was already addressed. Dependabot acknowledged the closure and will skip future notifications for this version.
81%
#5484 build(deps): update dependency pygments to v2.19.1 (main) snapcraft merged Merged into main after updating pygments from v2.15.0 to v2.19.1. The Renovate-generated change passed all CI checks and received two approvals before integration.
81%