build(deps): update dependency pip to v24.3.1 (main) - autoclosed
Metadata
Current evaluation
Renovate PR #959 proposed updating pip from 24.0 to 24.3.1 but was autoclosed unmerged after 623 days; no replacement or resolving commit was identified.
Resolution: closed stale
Reason: PR #959 remained unmerged with no repository activity until it was autoclosed after 623 days. No matching pip 24.3.1 update or replacement was identified in the repository history.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [pip](https://redirect.github.com/pypa/pip) ([changelog](https://pip.pypa.io/en/stable/news/)) | `==24.0` -> `==24.3.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
---
### Release Notes
<details>
<summary>pypa/pip (pip)</summary>
### [`v24.3.1`](https://redirect.github.com/pypa/pip/compare/24.3...24.3.1)
[Compare Source](https://redirect.github.com/pypa/pip/compare/24.3...24.3.1)
### [`v24.3`](https://redirect.github.com/pypa/pip/compare/24.2...24.3)
[Compare Source](https://redirect.github.com/pypa/pip/compare/24.2...24.3)
### [`v24.2`](https://redirect.github.com/pypa/pip/compare/24.1.2...24.2)
[Compare Source](https://redirect.github.com/pypa/pip/compare/24.1.2...24.2)
### [`v24.1.2`](https://redirect.github.com/pypa/pip/compare/24.1.1...24.1.2)
[Compare Source](https://redirect.github.com/pypa/pip/compare/24.1.1...24.1.2)
### [`v24.1.1`](https://redirect.github.com/pypa/pip/compare/24.1...24.1.1)
[Compare Source](https://redirect.github.com/pypa/pip/compare/24.1...24.1.1)
### [`v24.1`](https://redirect.github.com/pypa/pip/compare/24.0...24.1)
[Compare Source](https://redirect.github.com/pypa/pip/compare/24.0...24.1)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-parts).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS45Mi4wIiwidXBkYXRlZEluVmVyIjoiMzkuOTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed stale | Renovate PR #959 proposed updating pip from 24.0 to 24.3.1 but was autoclosed unmerged after 623 days; no replacement or resolving commit was identified. | |
| stealth/space-bunny-alpha | — | closed stale | Renovate's pip 24.0-to-24.3.1 update was autoclosed unmerged after 623 days; no merge commit or replacement was identified. | |
| qwen/qwen3.6-35b-a3b | — | — | Dependency update for pip to v24.3.1 was autoclosed without merging. Despite passing CI checks and receiving approvals, the pull request was automatically closed due to inactivity or configuration rules. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Automatically closed without merging. The Renovate-generated dependency update for pip to v24.3.1 was closed by the bot, likely superseded or handled elsewhere, as indicated by the autoclosed status. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1335 build(deps): update dependency pip to v25 [security] (main) - autoclosed | craft-parts | closed | Renovate's pip 24.0 to 25.2 security update for CVE-2025-8869 was autoclosed unmerged after 359 days; no resolving PR or commit was found. | |
| #1337 build(deps): update dependency pip to v25 [security] (hotfix/2.7) - autoclosed | craft-parts | closed | Renovate's pip 24.0-to-25.2 security update for hotfix/2.7 was auto-closed unmerged; no replacement PR or resolving commit was found. | |
| #1336 build(deps): update dependency pip to v25 [security] (hotfix/2.20) - autoclosed | craft-parts | closed | Renovate PR #1336 proposed upgrading pip from 24.0 to 25.2 for CVE-2025-8869 on hotfix/2.20, but was autoclosed unmerged despite passing CI. | |
| #4773 chore(deps): update dependency pip to v23 [security] - autoclosed | snapcraft | closed | Renovate PR #4773 was autoclosed without merge; Dependabot PR #4776 superseded it by merging the same pip 22.0.2→23.3 docs upgrade in commit 99387d281. | |
| #4776 build(deps): bump pip from 22.0.2 to 23.3 in /docs | snapcraft | merged | Dependabot PR merged: bumped pip 22.0.2 to 23.3 in docs requirements (commit 99387d281, "build(deps): bump pip from 22.0.2 to 23.3 in /docs (#4776)"), approved by 2 reviewers. | |
| #6008 build(deps-dev): bump pip from 25.3 to 26.0 | snapcraft | closed | Dependabot's pip 25.3→26.0 bump was closed unmerged; @bepri noted "Fixed by #6011" and Dependabot stopped notifying. PR #6011 (build: fix CVEs, commit a8213b7c) updated pip and protobuf in uv.lock. | |
| #2689 build(deps): update dependency mypy to v2 (main) - autoclosed | charmcraft | closed | Renovate PR #2689 was autoclosed unmerged after four months without activity; its mypy 2.1 update was not adopted. | |
| #6246 build(deps): update dependency mypy to v2 (main) - autoclosed | snapcraft | closed | Renovate’s mypy 2.1.0 update was autoclosed unmerged after lint/files and several integration and security checks failed; no resolving commit landed. | |
| #6286 build(deps): bump pip | snapcraft | merged | Merged PR #6286 (commit ff4e5adfd) bumped pip v26.1 -> v26.1.2 in the spread-test workflow requirements to clear an OSV advisory. | |
| #6221 build(deps): bump pip | snapcraft | merged | Merged PR #6221 in commit 948f284fa, updating the pip build dependency to resolve an OSV security vulnerability. |