build(deps): update dependencies
Metadata
Current evaluation
Merged dependency lockfile refresh in #890 (commit 8a2975df), updating 205 resolved packages, including cryptography 45.0.3 and several craft-* libraries.
Resolution: closed resolved
Reason: PR #890 was approved and merged as commit 8a2975df, applying the uv lock upgrade across the dependency set.
Evaluated by: mr-cal-bot
No scores available.
Issue body
❯ uv lock --upgrade
Resolved 205 packages in 4.46s
Updated astroid v3.3.9 -> v3.3.10
Updated cachecontrol v0.14.2 -> v0.14.3
Updated charset-normalizer v3.4.1 -> v3.4.2
Updated click v8.1.8 -> v8.2.1
Updated coverage v7.8.0 -> v7.8.2
Updated craft-application v5.2.0 -> v5.3.0
Updated craft-parts v2.9.1 -> v2.10.0
Updated craft-platforms v0.8.0 -> v0.9.0
Updated craft-providers v2.2.0 -> v2.3.0
Updated cryptography v44.0.2 -> v45.0.3
Updated exceptiongroup v1.2.2 -> v1.3.0
Updated pbs-installer v2025.4.9 -> v2025.5.17
Updated platformdirs v4.3.7 -> v4.3.8
Updated pluggy v1.5.0 -> v1.6.0
Updated poetry v2.1.2 -> v2.1.3
Updated poetry-core v2.1.2 -> v2.1.3
Updated protobuf v6.30.2 -> v6.31.1
Updated pydantic v2.11.3 -> v2.11.5
Updated pydantic-core v2.33.1 -> v2.33.2
Updated pylint v3.3.6 -> v3.3.7
Updated pytest-mock v3.14.0 -> v3.14.1
Updated python-apt v2.4.0+ubuntu4, v2.7.7+ubuntu3, v2.9.0+ubuntu1, v2.9.9 -> v2.4.0+ubuntu4, v2.7.7+ubuntu3, v2.9.0+ubuntu1, v3.0.0 Updated ruamel-yaml v0.18.10 -> v0.18.11
Updated setuptools v80.0.0 -> v80.9.0
Updated snowballstemmer v2.2.0 -> v3.0.1
Updated sphinx-toolbox v3.9.0 -> v3.10.0
Updated trove-classifiers v2025.4.28.22 -> v2025.5.9.12 Updated types-docutils v0.21.0.20241128 -> v0.21.0.20250526 Updated types-pygments v2.19.0.20250305 -> v2.19.0.20250516 Updated types-pyyaml v6.0.12.20250402 -> v6.0.12.20250516 Updated types-setuptools v80.0.0.20250429 -> v80.8.0.20250521 Updated typing-inspection v0.4.0 -> v0.4.1
Updated virtualenv v20.30.0 -> v20.31.2
Updated zipp v3.21.0 -> v3.22.0
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
---
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged dependency lockfile refresh in #890 (commit 8a2975df), updating 205 resolved packages, including cryptography 45.0.3 and several craft-* libraries. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged an approved uv lock refresh updating dependencies including cryptography 44.0.2→45.0.3; recorded in commit 8a2975df. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged after two approvals. The update refreshed over 30 dependencies via uv lock across six files. Despite initial snap-tests and OSV-scanner failures, the changes were accepted and integrated into the main branch. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged routine dependency update resolving 205 packages via uv lock. Upgraded cryptography, pydantic, poetry, and click to latest versions. Applied by maintainer tigarmo. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #993 build(deps): update all dependencies | rockcraft | merged | Renovate-style dependency refresh PR #993 merged as commit ee3f9286, bumping ~50 packages (craft-application 5.11.0, craft-parts 2.25.0, cryptography 46.0.2, pytest 8.4.2, poetry 2.2.1) after two approvals. | |
| #4136 deps: update cryptography dependency | snapcraft | merged | PR #4136 updated the cryptography dependency for CRAFT-1720 and merged into main as commit 3fd3e4c52. | |
| #2163 build(deps): update dependency cryptography to v44.0.1 [security] (main) - autoclosed | charmcraft | closed | Renovate PR #2163 was autoclosed unmerged; the cryptography 44.0.1 update was instead merged through #2189 at commit bba6a32e. | |
| #6443 build(deps): update deps | snapcraft | merged | Merged via squash commit 3d6f104c7: uv lock --upgrade refreshed 181 packages (craft-parts 2.35.0→2.37.1, craft-application 7.2.1→7.4.0, isort 8→9, oauthlib 3.3.1→4.0.0) in prep for the 9.2 release; +939/-900 across 9 files. | |
| #838 build(deps): update dependencies | rockcraft | merged | Merged PR #838, updating 33 pinned dependencies, including craft-parts 2.7.0 and setuptools 77.0.1; changes landed in commit d8996ccd. | |
| #390 build(deps): loosen and update dev dependencies | craft-cli | closed | Merged canonical/craft-cli#390, relaxing development dependency constraints and refreshing uv.lock; it supersedes #389. | |
| #1870 build(deps): update dependency cryptography to v43.0.1 [security] (main) | charmcraft | merged | Merged #1870, bumping cryptography from 43.0.0 to 43.0.1 to address GHSA-h4gh-qq45-vh27; mainline merge commit: 438cafe0. | |
| #2727 build(deps): update dependencies | charmcraft | merged | Renovate-style dependency refresh by maintainer lengau merged into main as commit 174fd8ff (7 files, +1426/-1239), updating lockfiles/constraints ahead of the Charmcraft 4.3.0 release candidate. | |
| #122 build(deps): bump cryptography from 46.0.6 to 46.0.7 | debcraft | merged | Dependabot PR merged as commit 0498780, bumping cryptography 46.0.6 -> 46.0.7 in debcraft's lockfile to fix CVE-2026-39892 and pick up OpenSSL 3.5.6 wheels. All CI checks passed. | |
| #2165 build(deps): update dependency cryptography to v44.0.1 [security] (hotfix/3.3) - autoclosed | charmcraft | closed | Renovate PR #2165 was autoclosed unmerged without CI or comments; cryptography 44.0.1 was later merged on main through #2189 (bba6a32e). |