← Back to issue list

build(deps): bump pygments

View original Github issue

Metadata

Project
starbase
Number
#517
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged the Pygments dependency bump in #517 (commit c9fecdf), clearing the reported OSV security warning.

Resolution: closed resolved

Reason: PR #517 was merged into main as commit c9fecdf, updating uv.lock to bump Pygments and address the OSV warning. All CI checks passed with two approvals.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Fixes an OSV warning. --- - [ ] I've followed the [contribution guidelines](https://github.com/canonical/starbase/blob/main/CONTRIBUTING.md). - [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [ ] I've successfully run `make lint && make test`. - [ ] I've added or updated any relevant documentation. - [ ] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged the Pygments dependency bump in #517 (commit c9fecdf), clearing the reported OSV security warning.
stealth/space-bunny-alpha — closed resolved Merged the Pygments lockfile update in canonical/starbase#517 (commit c9fecdf) to address an OSV warning; all CI checks passed.
stealth/space-bunny-alpha — closed resolved Merged PR #517 in commit c9fecdf, updating uv.lock to bump Pygments and address an OSV security warning; CI passed and two reviewers approved.
stealth/space-bunny-alpha — closed resolved Merged #517 (commit c9fecdf), bumping Pygments in uv.lock to address an OSV security warning. All CI checks passed and two reviewers approved.
stealth/space-bunny-alpha — closed resolved Merged PR #517 as commit c9fecdf, updating Pygments in uv.lock to resolve an OSV warning. All CI checks passed.
qwen/qwen3.6-35b-a3b — — Merged a dependency update to bump pygments, resolving an OSV security warning. Approved by two reviewers, passed all CI checks, and integrated with a minimal three-line change.
qwen3.6-35b-a3b-mtp-q6 — — Merged dependency update bumping pygments to resolve an OSV security warning. The change passed linting and testing checks before integration.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#177 build(deps): bump pygments craft-grammar merged Merged the Pygments dependency bump in #177 via commit de39544, resolving an OSV warning with all CI checks passing.
93%
#1529 build(deps): bump pygments to 2.20.0 craft-parts merged Merged PR #1529 as commit 5ed85e12, updating Pygments to 2.20.0 to resolve an OSV; all listed CI checks passed.
85%
#435 build(docs): bump pygments craft-cli merged Merged as commit 40bdfae, updating the documentation lockfile to bump Pygments and resolve an OSV security warning. All reported CI checks passed.
82%
#313 build(deps): resolve osvs imagecraft merged Merged in commit 10f3370, updating Pygments and cryptography to resolve OSV findings.
79%
#940 build(deps): update cryptography, pygments, requests craft-providers merged Merged PR #940 as commit eb8549f, updating cryptography, Pygments, and requests to resolve three OSV warnings.
78%
#124 build(deps): bump pygments from 2.19.2 to 2.20.0 starflow merged Dependabot PR bumping pygments 2.19.2 to 2.20.0 was approved by 2 reviewers, passed all CI checks, and merged into main via commit 1908f7b, updating uv.lock.
77%
#81 build(deps): resolve OSVs craft-artifacts merged Merged as commit 32dec6c in craft-artifacts, bumping Pygments 2.19.2→2.20.0 and pytest 9.0.2→9.0.3 in uv.lock to clear OSV-scanner advisories. Approved by 2 reviewers despite a failing typecheck-with-ty job.
77%
#6142 build(docs): bump pygments snapcraft merged Merged PR #6142 (commit f92f0a484) by mr-cal, bumping the Pygments docs dependency to clear an OSV alert; mirrors the same fix in canonical/craft-cli#435.
76%
#2621 build(deps): bump pygments from 2.19.2 to 2.20.0 charmcraft closed Dependabot PR #2621 was closed unmerged; the same Pygments 2.20.0 template-lock update was merged separately in #2622 at commit 640adea3.
75%
#6143 build(deps): bump pygments from 2.19.2 to 2.20.0 snapcraft closed Duplicate Dependabot pygments 2.20.0 bump closed unmerged: maintainer @mr-cal noted PR #6142 already covers it, and that PR was merged as commit f92f0a484.
75%