deps: update dependencies, freezing urllib3 < 2.0
Metadata
Current evaluation
Closed unmerged as unnecessary after dependencies were refreshed by merged PR #4129 (commit fc9f9ae44).
Resolution: closed superseded
Reason: The author closed #4125 without merging, noting that the dependencies had been updated another way. Merged PR #4129 delivered that update in commit fc9f9ae44.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the [guidelines for contributing](https://github.com/snapcore/snapcraft/blob/master/CONTRIBUTING.md)?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint`?
- [x] Have you successfully run `pytest tests/unit`?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged as unnecessary after dependencies were refreshed by merged PR #4129 (commit fc9f9ae44). | |
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged as unnecessary after dependency updates landed through #4129 in commit fc9f9ae44. | |
| stealth/space-bunny-alpha | — | closed superseded | Closed unmerged as unnecessary; dependency updates landed separately in #4129 via commit fc9f9ae44. | |
| stealth/space-bunny-alpha | — | closed superseded | urllib3 < 2.0 dependency update #4125 was closed unmerged; the author said it was unnecessary because dependencies were updated another way. | |
| qwen/qwen3.6-35b-a3b | — | — | Dependency update PR freezing urllib3 below 2.0 was closed and abandoned. The author noted the changes were superseded by a different update method. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Dependency update including urllib3 < 2.0 freeze was closed and superseded. The maintainer noted the changes were implemented differently elsewhere, making the pull request unnecessary. |
Update history
No update history recorded yet.
Related work
-
Superseded By:
canonical/snapcraft#4129
(confidence 95%)
The follow-up dependency update was merged to main as commit fc9f9ae44.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1408 fix(deps): update urllib3 to 2.5.1 to address security vulnerabilities | craft-parts | closed | Closed unmerged; the urllib3 security update was superseded by merged PR #1411 (commit 044ea761), which upgraded uv.lock from urllib3 2.5.0 to 2.6.1. | |
| #5963 build(deps): bump urllib3 from 2.6.1 to 2.6.3 | snapcraft | closed | Closed unmerged as a duplicate of merged PR #5930, which updated urllib3 to 2.6.3 in commit a473ada2c. | |
| #5563 build(deps): update dependency urllib3 to v2 [security] (main) | snapcraft | closed | Closed unmerged because the targeted dependency file was unused; merged PR #5598 (f42ae1ee4) deleted it, removing the need for urllib3 v2. | |
| #5565 build(deps): update dependency urllib3 to v2 [security] (hotfix/8.9) | snapcraft | closed | PR #5565 was closed unmerged: a maintainer said its urllib3 dependency file was unused. The obsolete docs requirements file was later removed by merged PR #5598 (f42ae1ee4). | |
| #5596 build(deps): update dependency urllib3 to v2 [security] (hotfix/8.10) | snapcraft | closed | Closed unmerged: the unused Sphinx requirements file made no update necessary; merged PR #5598 (f42ae1ee4) deleted it instead of upgrading urllib3. | |
| #5562 build(deps): bump urllib3 from 1.26.20 to 2.5.0 in /docs/.sphinx | snapcraft | closed | Dependabot's urllib3 update was closed unmerged because the target requirements file was unused; merged PR #5598 later removed it in f42ae1ee4. | |
| #1130 build(deps): update dependency urllib3 to v2.5.0 [security] (main) | craft-parts | closed | Renovate's urllib3 2.3.0->2.5.0 PR was closed unmerged as a duplicate of merged PR #1135 (commit 74e21521), which bumped urllib3 in pyproject.toml and uv.lock. | |
| #5564 build(deps): update dependency urllib3 to v2 [security] (hotfix/7.5) | snapcraft | closed | Renovate's urllib3 1.26.19->2.5.0 security bump for hotfix/7.5 was closed unmerged after medubelko noted it was "Not used"; the underlying docs/requirements.txt was later deleted in merged PR #5598 (f42ae1ee4). | |
| #1133 build(deps): update dependency urllib3 to v2.5.0 [security] (hotfix/2.7) - autoclosed | craft-parts | closed | Renovate PR #1133 was autoclosed without merge; the same urllib3 2.5.0 update was merged in #1135 as commit 74e21521. | |
| #2544 build(deps): bump urllib3 from 2.5.0 to 2.6.3 | charmcraft | closed | urllib3 was not upgraded to 2.6.3: PR #2544 was closed unmerged with no maintainer explanation or resolving commit; Dependabot later stopped notifications for that release. |