build(deps): bump setuptools to 84.1.0
Metadata
Current evaluation
Merged PR #6521 which bumps setuptools to 84.1.0 to address an OSV vulnerability.
Resolution: closed resolved
Reason: The PR was merged, updating setuptools to version 84.1.0 to address an OSV vulnerability.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Bump setuptools for an OSV.
---
- [x] I've followed the [contribution guidelines](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md).
- [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
- [ ] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | closed resolved | Merged PR #6521 which bumps setuptools to 84.1.0 to address an OSV vulnerability. |
Update history
| Date | Change |
|---|---|
| merged | |
| updated | |
| updated | |
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #403 build(deps): update dependency setuptools to v83 (main) | craft-store | merged | Renovate PR merged into main, bumping the pinned setuptools dev dependency from 82.0.1 to 83.0.0 in the build requirements (1 file, +1/-1); approved and merged despite the OSV-scanner check failure. | |
| #452 build(deps): update dependency setuptools to v84.2.1 (main) | craft-store | merged | Merged craft-store#452 updating setuptools from 84.0.0 to 84.2.1. CI passed except OSV-scanner. | |
| #475 build(deps): update dependency setuptools to v84 (main) | craft-cli | merged | Merged into main via commit 4440bf8, updating setuptools from 83.0.0 to 84.0.0 after two approvals. | |
| #4986 build(deps): update dependency setuptools to v70 [security] (main) - autoclosed | snapcraft | closed | Renovate PR #4986 proposed setuptools 70 for CVE-2024-6345 but was autoclosed unmerged after inactivity; later PR #6386 merged setuptools 84. | |
| #897 build(deps): update dependency setuptools to v80.10.2 (main) | craft-providers | merged | Renovate PR merged as commit b5b4a45, bumping the setuptools build dependency from 80.9.0 to 80.10.2 in main (approved, 2 reviewers; later superseded by #911 bumping to v82). | |
| #1096 build(deps): update dependency setuptools to v78 [security] (main) | craft-parts | merged | Merged in #1096 via commit 0681571f, upgrading setuptools from 75.7.0 to 78.1.1 to remediate CVE-2025-47273. | |
| #1235 build(deps): update dependency setuptools to v84.2.1 (main) | craft-application | open | Renovate PR updating setuptools from 84.0.0 to 84.2.1. Single-line change. CI has failing lint/files checks; no reviewer comments yet. | |
| #6386 build(deps): update dependency setuptools to v84 (main) | snapcraft | merged | Renovate PR #6386 bumped setuptools from ~=83.0.0 to ~=84.0.0 in Snapcraft's main branch; approved with all core CI green and squash-merged as commit afde69391 (+5/-5 lines, 2 files). | |
| #360 build(deps): update dependency setuptools to v82 (main) | craft-store | merged | Merged #360 in commit e7a9845, updating setuptools from 80.10.2 to 82.0.1. | |
| #281 build(deps): update dependency setuptools to v75 | craft-cli | merged | Merged PR #281 updated setuptools from 70.1.0 to 75.1.0; merged as commit ae19849. |