build(deps): run 'uv lock --upgrade'
Metadata
Current evaluation
Dependency-lift PR build(deps): run 'uv lock --upgrade' by tigarmo merged into main as commit a1b5eba1, refreshing uv.lock with ~57 package upgrades (craft-application 6.3.0, craft-cli 3.3.0, starlette 1.0.0, isort 8.0.1).
Resolution: closed resolved
Reason: The PR was approved by 2 reviewers and merged to main as commit a1b5eba1 ('build(deps): run 'uv lock --upgrade' (#1177)'), with all listed CI checks passing except a redundant snap-tests job. The commit appears in the uv.lock history.
Evaluated by: mr-cal-bot
No scores available.
Issue body
```
Updated anyio v4.12.1 -> v4.13.0
Updated astroid v4.0.3 -> v4.0.4
Updated autodocsumm v0.2.14 -> v0.2.15
Updated build v1.4.0 -> v1.4.2
Updated canonical-sphinx v0.5.2 -> v0.6.0
Updated certifi v2026.1.4 -> v2026.2.25
Updated charset-normalizer v3.4.4 -> v3.4.7
Updated click v8.3.1 -> v8.3.2
Updated codespell v2.4.1 -> v2.4.2
Updated coverage v7.13.3 -> v7.13.5
Updated craft-application v6.2.1 -> v6.3.0
Updated craft-cli v3.2.0 -> v3.3.0
Updated craft-parts v2.30.0 -> v2.30.1
Updated craft-platforms v0.10.0 -> v0.11.0
Updated craft-providers v3.3.0 -> v3.5.0
Updated cryptography v46.0.4 -> v46.0.6
Updated dulwich v1.0.0 -> v1.1.0
Updated filelock v3.20.3 -> v3.25.2
Updated id v1.5.0 -> v1.6.1
Updated imagesize v1.4.1 -> v2.0.0
Updated importlib-metadata v8.7.1 -> v9.0.0
Updated isort v7.0.0 -> v8.0.1
Updated jaraco-context v6.1.0 -> v6.1.2
Updated jsonpointer v3.0.0 -> v3.1.1
Updated librt v0.7.8 -> v0.8.1
Updated linkify-it-py v2.0.3 -> v2.1.0
Updated more-itertools v10.8.0 -> v11.0.1
Updated nh3 v0.3.2 -> v0.3.4
Updated pbs-installer v2026.1.27 -> v2026.3.25
Updated platformdirs v4.5.1 -> v4.9.4
Updated poetry v2.3.2 -> v2.3.3
Updated poetry-core v2.3.1 -> v2.3.2
Updated pygit2 v1.18.2 -> v1.18.2, v1.19.2
Updated pygments v2.19.2 -> v2.20.0
Updated pylint v4.0.4 -> v4.0.5
Updated pylxd v2.3.7 -> v2.4.1
Updated pytest-check v2.6.2 -> v2.8.0
Updated pytest-cov v7.0.0 -> v7.1.0
Added python-discovery v1.2.1
Updated pytz v2025.2 -> v2026.1.post1
Updated rapidfuzz v3.14.3 -> v3.14.5
Updated regex v2026.1.15 -> v2026.4.4
Updated requests v2.32.5 -> v2.33.1
Updated rich v14.3.2 -> v14.3.3
Updated snap-http v1.11.0 -> v1.12.0
Updated sphinx-autobuild v2024.10.3 -> v2024.10.3, v2025.8.25
Updated starlette v0.52.1 -> v1.0.0
Updated tabulate v0.9.0 -> v0.10.0
Updated tomli v2.4.0 -> v2.4.1
Updated types-docutils v0.22.3.20251115 -> v0.22.3.20260322
Updated types-pygments v2.19.0.20251121 -> v2.20.0.20260407
Updated types-setuptools v80.10.0.20260124 -> v82.0.0.20260402
Updated types-tabulate v0.9.0.20241207 -> v0.10.0.20260308
Updated uc-micro-py v1.0.3 -> v2.0.0
Updated uvicorn v0.40.0 -> v0.44.0
Updated virtualenv v20.36.1 -> v21.2.0
```
Describe your changes.
---
- [ ] I've followed the [contribution guidelines](https://github.com/canonical/rockcraft/blob/main/CONTRIBUTING.md).
- [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Dependency-lift PR build(deps): run 'uv lock --upgrade' by tigarmo merged into main as commit a1b5eba1, refreshing uv.lock with ~57 package upgrades (craft-application 6.3.0, craft-cli 3.3.0, starlette 1.0.0, isort 8.0.1). | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in canonical/rockcraft#1177 via commit a1b5eba1, refreshing uv.lock and upgrading the listed dependencies. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #1177 (a1b5eba1), refreshing uv.lock via uv lock --upgrade and updating the project’s Python dependency set. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged dependency upgrade PR. Updated numerous packages using uv lock --upgrade. Approved by two reviewers and merged into main, successfully integrating the updates despite one CI test failure. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged dependency updates via uv lock --upgrade. Bumped numerous packages including anyio, astroid, cryptography, and starlette to their latest versions, updating the project lockfile. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/rockcraft#1183
(confidence 45%)
Follow-up chore PR 'chore: enfriefen uv.lock file by limiting environments to Linux' refining the lockfile shortly after #1177
-
Related To:
canonical/rockcraft#1278
(confidence 35%)
Later 'build(deps): update deps to resolve OSV vulnerabilities' continuing lockfile maintenance on the updated baseline
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1176 build(deps): run 'uv lock --upgrade' | rockcraft | closed | Closed without merging; the same 'uv lock --upgrade' refresh landed via canonical/rockcraft#1177, merged to main as commit a1b5eba1 (uv.lock updates for craft-application 6.3.0, craft-cli 3.3.0, starlette 1.0.0, etc.). | |
| #6443 build(deps): update deps | snapcraft | merged | Merged via squash commit 3d6f104c7: uv lock --upgrade refreshed 181 packages (craft-parts 2.35.0→2.37.1, craft-application 7.2.1→7.4.0, isort 8→9, oauthlib 3.3.1→4.0.0) in prep for the 9.2 release; +939/-900 across 9 files. | |
| #2410 build(deps): lock file maintenance (main) | charmcraft | merged | Renovate PR #2410 merged into main as 4eff50fb, refreshing uv.lock to latest dependency versions. | |
| #1085 build: update lockfile | craft-application | merged | Merged #1085 as commit 2a6a7320, refreshing the dependency lockfile with a long-overdue uv sync --upgrade for craft-app 7.0. | |
| #2758 build(deps): lock file maintenance (main) | charmcraft | merged | Renovate lock-file maintenance PR #2758 merged into main as commit 3eaf69ba, refreshing uv.lock (+755/-665) with latest dependency versions. | |
| #498 build(deps): update craft libraries and upgrade lockfile | imagecraft | merged | Merged PR #498 in commit 7119e66, upgrading craft-parts to 2.37.2 for fileset performance and refreshing uv.lock with uv lock --upgrade. | |
| #240 build(deps): update dependency craft-application to v6 (main) - autoclosed | imagecraft | closed | Renovate PR to bump craft-application ~=5.9 to ~=6.1 was autoclosed after `uv lock` failed to resolve; migration continued in #244 and landed via merged PR #261 (commit fa39f80). | |
| #390 build(deps): loosen and update dev dependencies | craft-cli | closed | Merged canonical/craft-cli#390, relaxing development dependency constraints and refreshing uv.lock; it supersedes #389. | |
| #152 build(deps): lock file maintenance | craft-platforms | merged | Renovate lock file maintenance PR merged into main as commit eb960b3, refreshing uv.lock (+52/-15 lines) so all locks use the latest dependency versions. | |
| #220 build(deps): lock file maintenance (main) | craft-archives | merged | Renovate lock file maintenance merged into craft-archives main via commit 9a7ba1a ("build(deps): lock file maintenance (#220)"), refreshing uv.lock (+1405/-948) after 2 approvals and all CI checks passing. |