Skip to content

chore(deps): absorve Dependabot #2148 (uv-minor-patch) e #2130 (setup-uv 10.3.2) - #2152

Merged
FabioLeitao merged 2 commits into
mainfrom
DAT-56-dependabot-merge-2148-2130
Nov 1, 2026
Merged

FabioLeitao merged 2 commits into
mainfrom
DAT-56-dependabot-merge-2148-2130

Conversation

@FabioLeitao

Copy link
Copy Markdown
Collaborator

Absorve as duas PRs abertas do Dependabot em uma so (ADR 0092): #2148 (grupo uv-minor-patch, 19 atualizacoes: fastapi 0.143.3 -> 0.162.0, pandas 3.0.6 -> 3.1.0, snowflake-connector-python 5.0.0 -> 5.1.0, sentence-transformers 6.1.0 -> 6.2.0, starlette 1.8.0 -> 1.9.0, httpx2/httpcore2 2.13.1 -> 2.16.0, entre outras) e #2130 (astral-sh/setup-uv 10.3.0 -> 10.3.2 em 9 workflows).

Pins mantidos, nenhum afrouxa: pyasn1 0.6.5 e pypdf 6.21.4 (das correcoes anteriores). uv.lock, requirements.txt e pylock.toml regenerados com uv 0.11.2; um export fresco bate com os arquivos (0 diferencas alem do cabecalho) e o requirements.txt mantem os hashes (2184).

Toca arquivos de gate (9 workflows): precisa do selo do operador (attest-kombi).

Verificacao local: uv lock --check ok e exports conferidos. O pytest completo no host tem 5 falhas de ambiente nao ligadas ao diff (licenca real instalada no host e porta 8766 ocupada); o CI, em ambiente limpo, e o gate.

As PRs #2148 e #2130 do Dependabot ficam para o operador fechar apos o merge.

Refs #2148

…-uv 10.3.2)

Uma so PR (ADR 0092) para as duas PRs abertas do Dependabot.

- #2148: 19 atualizacoes do grupo uv-minor-patch (fastapi 0.162.0, pandas 3.1.0,
  starlette 1.9.0, snowflake-connector-python 5.1.0, sentence-transformers 6.2.0,
  httpx2/httpcore2 2.16.0, certifi, coverage, ruff, entre outras).
- #2130: astral-sh/setup-uv 10.3.0 -> 10.3.2 em 9 workflows.
- Pins mantidos: pyasn1 0.6.5 e pypdf 6.21.4.
- uv.lock, requirements.txt e pylock.toml regenerados com uv 0.11.2.

Refs #2148
…48 e 2130 (setup-uv em workflows de gate) | 2026-11-01

```
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgyEpOM79Y37xE8qOhlhghEfLh9P
TzRdk6n8nzLfBNGqwAAAAEZmlsZQAAAAAAAAAGc2hhNTEyAAAAUwAAAAtzc2gtZWQyNTUx
OQAAAEBw3r7oZ+bChsc/YTiSMGPnD+co2MGQiCCoU8kwfItgJV1f9kiPsTKD9WkivS+LMH
N3M9gSkNPV2yB+COTEj1oE
-----END SSH SIGNATURE-----
```
@FabioLeitao

Copy link
Copy Markdown
Collaborator Author

Gate-Change-Approved-By: @FabioLeitao (#2152) | absorve Dependabot 2148 e 2130 (setup-uv em workflows de gate) | head=186e5d4cc3838c835d6c1adb2d0cd6e3aba97f42 | 2026-11-01

-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgyEpOM79Y37xE8qOhlhghEfLh9P
TzRdk6n8nzLfBNGqwAAAAEZmlsZQAAAAAAAAAGc2hhNTEyAAAAUwAAAAtzc2gtZWQyNTUx
OQAAAEDnQ+QwkrX3hCRlyW8/Z2jneXMQwoTI1U/u/dmyi52pMMB+iCBTZVncpRm58smHo1
EuKLPmDYEXG68dkv+Wog8L
-----END SSH SIGNATURE-----

@FabioLeitao
FabioLeitao merged commit e00bdb3 into main Nov 1, 2026
39 checks passed
@FabioLeitao
FabioLeitao deleted the DAT-56-dependabot-merge-2148-2130 branch November 1, 2026 22:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant