build(deps): resolve osvs
Metadata
Current evaluation
Merged after approval by two reviewers. Bumps pygments and cryptography dependencies to resolve OSVs. Integrated despite failing spread tests on Ubuntu versions.
Suggested action: —
No scores available.
Issue body
Bumps `pygments` and `cryptography` to resolve osvs
---
- [ ] I've followed the [contribution guidelines](https://github.com/canonical/imagecraft/blob/main/CONTRIBUTING.md).
- [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged after approval by two reviewers. Bumps pygments and cryptography dependencies to resolve OSVs. Integrated despite failing spread tests on Ubuntu versions. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged dependency updates for pygments and cryptography to resolve open source vulnerabilities. Changes were reviewed and integrated into the main branch by maintainer smethnani. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged dependency updates for pygments and cryptography to resolve OSVs. The maintainer bumped both packages, passed lint and test checks, and successfully integrated the security fixes. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #353 build(deps): bump libraries for OSVs | craft-store | merged | Merged after updating cryptography, markdown, and pygments to patch OSV vulnerabilities. Approved by two reviewers and passed all CI checks. | |
| #81 build(deps): resolve OSVs | craft-artifacts | merged | Merged after two approvals. Updates pygments to 2.20.0 and pytest to 9.0.3 to resolve OSV security vulnerabilities. CI checks passed, and the six-line dependency lock update was successfully integrated. | |
| #131 build(deps): resolve OSVs | debcraft | merged | Merged dependency updates to resolve OSV vulnerabilities. Updated cryptography, pygments, pytest, requests, and craft-parts via uv lock. Approved by two reviewers with all CI checks passing. Changes accepted despite minor pinning discussions. | |
| #177 build(deps): bump pygments | craft-grammar | merged | Merged pull request that bumps the pygments dependency to fix an OSV security warning. Approved by two reviewers and passed all CI checks before integration. | |
| #517 build(deps): bump pygments | starbase | merged | Merged a dependency update to bump pygments, resolving an OSV security warning. Approved by two reviewers, passed all CI checks, and integrated with a minimal three-line change. | |
| #945 build(deps): resolve OSVs | craft-providers | merged | Merged dependency updates resolving OSV vulnerabilities. Bumps cryptography to 46.0.7 and pytest to 9.0.3 to fix minimum dependency test failures. Conflicts resolved automatically before final merge. | |
| #1529 build(deps): bump pygments to 2.20.0 | craft-parts | merged | Merged to update pygments to 2.20.0, resolving an OSV vulnerability. Approved by two reviewers and passed all CI checks. | |
| #435 build(docs): bump pygments | craft-cli | merged | Merged after bumping pygments to resolve an OSV security warning. Approved by two reviewers with all CI checks passing. Lint errors were resolved in a separate PR. | |
| #1278 build(deps): update deps to resolve OSV vulnerabilities | rockcraft | merged | Merged dependency updates for cryptography, dulwich, idna, lxml, poetry, pytest, urllib3, and msgpack to resolve OSV vulnerabilities. Added osv-scanner exceptions for python-apt and cryptography. Approved and passed CI. | |
| #1055 build(deps): bump cryptography | craft-application | merged | Merged after bumping the cryptography dependency to resolve an OSV security vulnerability. Approved by two reviewers and passed all CI checks, including security scans and multi-platform tests. |