build(deps): update lockfile for OSVs
Metadata
Current evaluation
Merged after two approvals. Updated lockfile via uv lock on cryptography, idna, pytest, and urllib3 to fix OSV CI. Approved and passed checks.
Suggested action: —
No scores available.
Issue body
`uv lock -P cryptography -P idna -P pytest -P urllib3`
Fixes OSV CI.
Plucky tests are fixed in #962
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint && make test`?
---
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged after two approvals. Updated lockfile via uv lock on cryptography, idna, pytest, and urllib3 to fix OSV CI. Approved and passed checks. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged lockfile updates for cryptography, idna, pytest, and urllib3 via uv lock. Resolves OSV CI failures. Plucky test fixes are handled in PR #962. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #262 build(deps): update filelock for OSV | imagecraft | merged | Merged after approval from two reviewers and passing all CI checks. Updated the filelock dependency to address OSV scanning requirements. Changes were minimal, affecting only one file with three lines modified. | |
| #131 build(deps): resolve OSVs | debcraft | merged | Merged dependency updates to resolve OSV vulnerabilities. Updated cryptography, pygments, pytest, requests, and craft-parts via uv lock. Approved by two reviewers with all CI checks passing. Changes accepted despite minor pinning discussions. | |
| #247 build(autogen): bump dependencies to resolve OSVs | imagecraft | merged | Merged after passing CI and receiving two approvals. Updated filelock, fonttools, and urllib3 to resolve OSV security warnings. An unrelated Spread test failure was noted but did not block the merge. | |
| #353 build(deps): bump libraries for OSVs | craft-store | merged | Merged after updating cryptography, markdown, and pygments to patch OSV vulnerabilities. Approved by two reviewers and passed all CI checks. | |
| #143 build(deps): resolve OSVs | debcraft | merged | Resolved OSV security vulnerabilities by updating idna to v3.18 and urllib3 to v2.7.0. Approved by a reviewer, passed all CI checks, and merged. | |
| #180 build(deps): resolve OSVs | craft-grammar | merged | Merged following two approvals and successful CI checks. Updated pytest from v9.0.2 to v9.0.3 to resolve OSV security vulnerabilities across one dependency file. | |
| #81 build(deps): resolve OSVs | craft-artifacts | merged | Merged after two approvals. Updates pygments to 2.20.0 and pytest to 9.0.3 to resolve OSV security vulnerabilities. CI checks passed, and the six-line dependency lock update was successfully integrated. | |
| #1278 build(deps): update deps to resolve OSV vulnerabilities | rockcraft | merged | Merged dependency updates for cryptography, dulwich, idna, lxml, poetry, pytest, urllib3, and msgpack to resolve OSV vulnerabilities. Added osv-scanner exceptions for python-apt and cryptography. Approved and passed CI. | |
| #71 build(deps): lock file maintenance | starflow | merged | Merged following successful CI checks and two approvals. The update refreshed lock files to align with the latest dependency versions as part of routine lock file maintenance. | |
| #146 build(deps): lock file maintenance | craft-grammar | merged | Merged after approval from two reviewers and passing all CI checks. The update refreshed dependency lock files to their latest versions. |