← Back to issue list

build(docs): bump pygments

View original Github issue

Metadata

Project
snapcraft
Number
#6142
Type
pull request
State
merged
Author
mr-cal
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #6142 (commit f92f0a484) by mr-cal, bumping the Pygments docs dependency to clear an OSV alert; mirrors the same fix in canonical/craft-cli#435.

Resolution: closed resolved

Reason: The PR was approved and merged into the main branch as commit f92f0a484, a +3/-3 one-file change that raises the pinned Pygments version in the documentation requirements, removing the flagged OSV vulnerability.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Fixes an OSV, same as https://github.com/canonical/craft-cli/pull/435. --- - [x] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md). - [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [x] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #6142 (commit f92f0a484) by mr-cal, bumping the Pygments docs dependency to clear an OSV alert; mirrors the same fix in canonical/craft-cli#435.
stealth/space-bunny-alpha — closed resolved Merged #6142 (commit f92f0a484), bumping the Pygments documentation dependency to address an OSV vulnerability.
qwen/qwen3.6-35b-a3b — — Merged a PR bumping pygments to resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. The change updates a single file with minimal modifications.
qwen3.6-35b-a3b-mtp-q6 — — Merged to bump pygments and resolve an OSV vulnerability. The change mirrors a fix in craft-cli and was approved by the maintainer without additional comments.

Update history

No update history recorded yet.

Related work

  • Related To: canonical/craft-cli#435 (confidence 92%)

    Referenced in the PR body as the equivalent Pygments/OSV bump already merged in craft-cli (commit 40bdfae)

  • Superseded By: canonical/snapcraft#6443 (confidence 45%)

    Later commit 8158cfccb 'build(deps): update deps (#6443)' further updates docs dependencies, superseding this one-off pin bump

  • Related To: canonical/snapcraft#5484 (confidence 30%)

    Earlier automated Pygments bump (commit 20c577c2d) shows recurring automated dep updates for the same package

Related issues

Issue Project State Summary Similarity
#435 build(docs): bump pygments craft-cli merged Merged as commit 40bdfae, updating the documentation lockfile to bump Pygments and resolve an OSV security warning. All reported CI checks passed.
81%
#517 build(deps): bump pygments starbase merged Merged the Pygments dependency bump in #517 (commit c9fecdf), clearing the reported OSV security warning.
76%
#177 build(deps): bump pygments craft-grammar merged Merged the Pygments dependency bump in #177 via commit de39544, resolving an OSV warning with all CI checks passing.
75%
#1529 build(deps): bump pygments to 2.20.0 craft-parts merged Merged PR #1529 as commit 5ed85e12, updating Pygments to 2.20.0 to resolve an OSV; all listed CI checks passed.
74%
#6143 build(deps): bump pygments from 2.19.2 to 2.20.0 snapcraft closed Duplicate Dependabot pygments 2.20.0 bump closed unmerged: maintainer @mr-cal noted PR #6142 already covers it, and that PR was merged as commit f92f0a484.
72%
#4286 build(deps): bump pygments from 2.13.0 to 2.15.0 in /docs/.sphinx snapcraft merged Merged PR #4286 updated the documentation toolchain from Pygments 2.13.0 to 2.15.0 in commit f4721a956.
72%
#5484 build(deps): update dependency pygments to v2.19.1 (main) snapcraft merged Renovate PR merged: bumped Pygments 2.15.0 -> 2.19.1 in the docs requirements via commit 20c577c2d, with all CI checks green.
72%
#81 build(deps): resolve OSVs craft-artifacts merged Merged as commit 32dec6c in craft-artifacts, bumping Pygments 2.19.2→2.20.0 and pytest 9.0.2→9.0.3 in uv.lock to clear OSV-scanner advisories. Approved by 2 reviewers despite a failing typecheck-with-ty job.
71%
#115 build(deps): bump pygments from 2.19.2 to 2.20.0 debcraft merged Merged PR debcraft#115 as commit f580d60, updating Pygments from 2.19.2 to 2.20.0 in uv.lock.
71%