Skip to content

chore(deps): absorve 7 PRs Dependabot (actions + uv), lockfiles com uv 0.11.2 - #2145

Merged
FabioLeitao merged 1 commit into
mainfrom
deps/dependabot-merge-7-prs
Oct 30, 2026
Merged

FabioLeitao merged 1 commit into
mainfrom
deps/dependabot-merge-7-prs

Conversation

@FabioLeitao

Copy link
Copy Markdown
Collaborator

Absorve em uma PR: #2128, #2129, #2130, #2132, #2133, #2138, #2139.

  • lockfiles regenerados com uv 0.11.2
  • remove 3 ignores obsoletos de filelock em security/osv-scanner.toml
  • check-all --enforced verde localmente

Refs #2136, #2123

…iles with uv 0.11.2

- Bump actions/download-artifact 8.0.1 → 8.0.2 (#2128)
- Bump ossf/scorecard-action 2.4.4 → 2.5.0 (#2129)
- Bump astral-sh/setup-uv 10.1.0 → 10.3.0 (#2130)
- Bump snowflake-connector-python 4.8.0 → 5.0.0 (#2132)
- Bump filelock 3.32.7 → 4.2.1 (#2139)
- Bump soupsieve 2.10 → 3.0.3 (#2133)
- Bump uv-minor-patch group: fastapi 0.143.3, fonttools 4.67.0, sqlalchemy 2.1.5, pymongo 4.19.0, pluggy 1.7.0, ruff 0.17.1, distlib 0.4.4 (#2138)
- Regenerate uv.lock, pylock.toml, requirements.txt with uv 0.11.2
- Remove obsolete filelock OSV ignores from security/osv-scanner.toml after snowflake 5 upgrade

Refs #2136, #2123
Gate-Change-Approved-By: @FabioLeitao
@FabioLeitao

Copy link
Copy Markdown
Collaborator Author

Gate-Change-Approved-By: @FabioLeitao (#2145) | DAT-47: absorve 7 PRs Dependabot (actions + uv 0.11.2), Refs #2136 #2123 | head=a485578a8a013e4832d867f308b73e11699e7dc1 | 2026-10-30

-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgyEpOM79Y37xE8qOhlhghEfLh9P
TzRdk6n8nzLfBNGqwAAAAEZmlsZQAAAAAAAAAGc2hhNTEyAAAAUwAAAAtzc2gtZWQyNTUx
OQAAAEAfV/MAYEA/UPcoYmS3CnrLuQ/fikFgG/wQDqh2HqhqZgvkIl8ckOu72ICh+x/FS/
BOgeZhBzdCfbM/Olbo54UC
-----END SSH SIGNATURE-----

@FabioLeitao
FabioLeitao merged commit 4192d23 into main Oct 30, 2026
45 of 48 checks passed
@FabioLeitao
FabioLeitao deleted the deps/dependabot-merge-7-prs branch October 30, 2026 22:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant