build(docs): bump pygments
Metadata
Current evaluation
Merged a PR bumping pygments to resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. The change updates a single file with minimal modifications.
Suggested action: —
No scores available.
Issue body
Fixes an OSV, same as https://github.com/canonical/craft-cli/pull/435.
---
- [x] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md).
- [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [x] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged a PR bumping pygments to resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. The change updates a single file with minimal modifications. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged to bump pygments and resolve an OSV vulnerability. The change mirrors a fix in craft-cli and was approved by the maintainer without additional comments. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged a dependency update bumping pygments to resolve an OSV vulnerability. The change mirrors a fix in craft-cli and passed all lint and test checks. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #435 build(docs): bump pygments | craft-cli | merged | Merged after bumping pygments to resolve an OSV security warning. Approved by two reviewers with all CI checks passing. Lint errors were resolved in a separate PR. | |
| #517 build(deps): bump pygments | starbase | merged | Merged a dependency update to bump pygments, resolving an OSV security warning. Approved by two reviewers, passed all CI checks, and integrated with a minimal three-line change. | |
| #177 build(deps): bump pygments | craft-grammar | merged | Merged pull request that bumps the pygments dependency to fix an OSV security warning. Approved by two reviewers and passed all CI checks before integration. | |
| #1529 build(deps): bump pygments to 2.20.0 | craft-parts | merged | Merged to update pygments to 2.20.0, resolving an OSV vulnerability. Approved by two reviewers and passed all CI checks. | |
| #353 build(deps): bump libraries for OSVs | craft-store | merged | Merged after updating cryptography, markdown, and pygments to patch OSV vulnerabilities. Approved by two reviewers and passed all CI checks. | |
| #124 build(deps): bump pygments from 2.19.2 to 2.20.0 | starflow | merged | Merged a Dependabot PR updating pygments from 2.19.2 to 2.20.0. Approved by two reviewers, passed all CI checks, and modified a single file with three additions and three deletions. | |
| #313 build(deps): resolve osvs | imagecraft | merged | Merged after approval by two reviewers. Bumps pygments and cryptography dependencies to resolve OSVs. Integrated despite failing spread tests on Ubuntu versions. | |
| #81 build(deps): resolve OSVs | craft-artifacts | merged | Merged after two approvals. Updates pygments to 2.20.0 and pytest to 9.0.3 to resolve OSV security vulnerabilities. CI checks passed, and the six-line dependency lock update was successfully integrated. | |
| #321 build(deps): bump pytest | imagecraft | merged | Merged a dependency update bumping pytest to resolve an OSV vulnerability. Approved by two reviewers with all CI checks passing. The change modified a single file with minimal adjustments. | |
| #1121 build: bump requests to avoid OSV | craft-parts | merged | Merged after bumping the requests dependency to resolve an OSV vulnerability. Approved by two reviewers with all CI checks passing. The update modifies three files with 136 additions and 10 deletions. |