Skip to content

chore(deps-py)(deps): bump fastapi from 0.142.0 to 0.142.2 in the python-production group - #633

Merged
Opselon merged 5 commits into
mainfrom
dependabot/pip/python-production-ff77a847ad
Oct 5, 2026
Merged

Opselon merged 5 commits into
mainfrom
dependabot/pip/python-production-ff77a847ad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-production group with 1 update: fastapi.

Updates fastapi from 0.142.0 to 0.142.2

Release notes

Sourced from fastapi's releases.

0.142.2

Fixes

  • 🐛 Allow startup when automatic OpenTelemetry configuration fails. PR #16418 by @​tiangolo.

0.142.1

Fixes

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-production group with 1 update: [fastapi](https://github.com/fastapi/fastapi).


Updates `fastapi` from 0.142.0 to 0.142.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.142.0...0.142.2)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.142.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Opselon as a code owner October 4, 2026 04:07
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 4, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Oct 4, 2026 •

Copy link
Copy Markdown
Contributor

🔴 NSE Evidence Report — #633

Status: FAIL · Branch: dependabot/pip/python-production-ff77a847ad → main · HEAD: 5733e39ccef7

🔗 Revision

Source SHA
PR HEAD 5733e39ccef7
Local unknown
CI 5733e39ccef7

Overall

🔴 FAIL

Required CI checks contain failures.

Primary affected files:

  1. dynamic/agents/github-advanced-security
  2. Processing Request

🧪 Test Matrix

Gate Status Passed Failed Skipped Duration
Heavy CI (${{ matrix.suite }}) ⏭️ — 0 — —
Aggregate CI Results ⏭️ — 0 — —
Extended Validation (Tier 2) ⏭️ — 0 — —
Full Runtime Overall Verdict ✅ — 0 — 12s
Trivy ✅ — 0 — 2s
osv-scanner ✅ — 0 — 2s
DB Fabric Certification (SQLite ↔ PostgreSQL) ✅ — 0 — 3m57s
CodeQL ✅ — 0 — 3s
Deploy GitHub Pages ⏭️ — 0 — —
Socket Security: Pull Request Alerts ✅ — 0 — 7s
Socket Security: Project Report ✅ — 0 — 3s
github-advanced-security ❌ — 1 — 37s
OSV Scanner / osv-scan ✅ — 0 — 28s
Py Tests (windows-latest) ✅ — 0 — 3m09s
Py Tests (macos-latest) ✅ — 0 — 19s
Migration safety (fail-loud + version postconditions) ✅ — 0 — 36s
Dependency drift (lock vs pyproject) ✅ — 0 — 14s
Full NSE Runtime (postgres) ✅ — 0 — 5m27s
MetaTrader 5 Wine Runtime ✅ — 0 — 9m13s
Regenerate lockfiles when drifted ✅ — 0 — 12s
Full NSE Runtime (sqlite) ✅ — 0 — 4m45s
CI Integrity and Change Classification ✅ — 0 — 20s
Trivy Vulnerability Scan ✅ — 0 — 38s
Validate documentation ✅ — 0 — 29s
Code Quality & Tests ✅ — 0 — 11m32s
CodeQL Analysis ✅ — 0 — 1m49s
Frontend JS Unit Tests ✅ — 0 — 24s
Dependency Manifest Diff ✅ — 0 — 8s

🔴 Affected Files

Processing Request

  • Processing Request
    • SessionModelError
    • CI: github-advanced-security

dynamic/agents/github-advanced-security

  • dynamic/agents/github-advanced-security
    • CI: github-advanced-security
    • Failed step: Processing Request (Linux)

🔴 What Failed and Why

1. Processing Request (Linux)

Severity: ERROR

Where: dynamic/agents/github-advanced-security

Failed step: Processing Request (Linux)

Kind: SECURITY_FINDING

Result / Why:

Process completed with exit code 1.

CI: github-advanced-security (logs)

Evidence: source github-checks, via github-checks

2. SessionModelError

Where: Processing Request

Kind: CI_FAILURE

Error / rule: SessionModelError

Result / Why:

Error creating PR review request: SessionModelError: You have exceeded your monthly quota (Request ID: 883A:1DC228:3BCBE9:449D83:6AC416E5); cause: Error: You have exceeded your monthly quota (Request ID: 883A:1DC228:3BCBE9:449D83:6AC416E5) (errorDetails: {"configurationError":false,"stack":"SessionModelError: You have exceeded your monthly quota (Request ID: 883A:1DC228:3BCBE9:449D83:6AC416E5)\n    at LI (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1114:10116)\n    at runNextTicks (node:internal/process/task_queues:65:5)\n    at process.processImmediate (node:internal/timers:541:9)\n    at async file:///home/runner/work/_temp/***-action-main/dist-autofind-t …

Trace:

Error creating PR review request: SessionModelError: You have exceeded your monthly quota (Request ID: 883A:1DC228:3BCBE9:449D83:6AC416E5); cause: Error: You have exceeded your monthly quota (Request ID: 883A:1DC228:3BCBE9:449D83:6AC416E5) (errorDetails: {"configurationError":false,"stack":"SessionModelError: You have exceeded your monthly quota (Request ID: 883A:1DC228:3BCBE9:449D83:6AC416E5)\n    at LI (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1114:10116)\n    at runNextTicks (node:internal/process/task_queues:65:5)\n    at process.processImmediate (node:internal/timers:541:9)\n    at async file:///home/runner/work/_temp/***-action-main/dist-autofind-t …
Reporting error to sweagentd...
Error successfully reported to sweagentd session.
Error successfully reported to sweagentd backend.
eb [SessionModelError]: You have exceeded your monthly quota (Request ID: 883A:1DC228:3BCBE9:449D83:6AC416E5)
at LI (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1114:10116)
at runNextTicks (node:internal/process/task_queues:65:5)
at process.processImmediate (node:internal/timers:541:9)
at async file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1003:8471
at async jp (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1003:8529)
at async Zn (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1114:10473)
at async QR (file:///home/runner/work/_temp/***-action-main/dist-autofind-ts/ts/autofind.js:1600:1365)
at async MF (file:///home/runner/wo …

CI: github-advanced-security (logs)

Evidence: source job-logs, via job-logs

⚠️ Warnings

1. Full Runtime Overall Verdict

Severity: WARNING

Where: unknown

Result / Details:

sqlite has warnings; inspect provider_runtime_soak.json

CI: Full Runtime Overall Verdict (logs)

Evidence: source github-checks, via github-checks

2. Full Runtime Overall Verdict

Severity: WARNING

Where: unknown

Result / Details:

postgres has warnings; inspect provider_runtime_soak.json

CI: Full Runtime Overall Verdict (logs)

Evidence: source github-checks, via github-checks

3. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:19:16.192+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

4. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:19:12.241+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

5. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:19:12.161+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

6. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:19:08.187+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

7. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:19:08.113+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

8. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:19:04.151+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

9. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:19:04.074+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

10. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:19:01.246+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

11. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:19:01.170+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

12. Full NSE Runtime (postgres)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:18:55.106+03:30 [warning  ] [LATENCY_REGRESSION] event=E2E_P95_REGRESSED p95_ms=83.531 budget_p95_ms=75.0 epochs=1 [nexus_scalp.application.live.inference]

CI: Full NSE Runtime (postgres) (logs)

Evidence: source github-checks, via github-checks

13. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:16.146+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

14. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:16.140+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

15. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:12.107+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

16. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:12.101+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

17. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:08.077+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

18. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:08.071+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

19. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:04.072+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

20. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:04.066+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

21. ENTRY_BLOCKED

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:00.952+03:30 [warning  ] [ENTRY_BLOCKED] layer=RISK_ENGINE reason=RISK_EVALUATION_REJECTED action=BUY_LIMIT symbol=XAUUSD [REDACTED_SECRET] [nexus_scalp.application.live.decision_executor]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

22. Full NSE Runtime (sqlite)

Severity: WARNING

Where: unknown

Result / Details:

2026-10-05T21:24:00.946+03:30 [warning  ] Proposal rejected: Pending entry price is too close to market (Stops Level violation) [nexus_scalp.risk.risk_engine]

CI: Full NSE Runtime (sqlite) (logs)

Evidence: source github-checks, via github-checks

🏗️ CI Jobs

Workflow Job Status Details
CI Heavy CI (${{ matrix.suite }}) ⏭️ SKIPPED logs
CI Aggregate CI Results ⏭️ SKIPPED logs
CI Extended Validation (Tier 2) ⏭️ SKIPPED logs
CI Full Runtime Overall Verdict ✅ SUCCESS logs
GitHub Advanced Security Trivy ✅ SUCCESS logs
GitHub Advanced Security osv-scanner ✅ SUCCESS logs
CI DB Fabric Certification (SQLite ↔ PostgreSQL) ✅ SUCCESS logs
GitHub Advanced Security CodeQL ✅ SUCCESS logs
Docs Deploy GitHub Pages ⏭️ SKIPPED logs
Socket Security Socket Security: Pull Request Alerts ✅ SUCCESS logs
Socket Security Socket Security: Project Report ✅ SUCCESS logs
Code scanning AI findings on PR #633 github-advanced-security ❌ FAILURE logs
OSV Dependency Scan OSV Scanner / osv-scan ✅ SUCCESS logs
Tests (OS Matrix) Py Tests (windows-latest) ✅ SUCCESS logs
Tests (OS Matrix) Py Tests (macos-latest) ✅ SUCCESS logs
Dependency Lock & Migration Safety Migration safety (fail-loud + version postconditions) ✅ SUCCESS logs
Dependency Lock & Migration Safety Dependency drift (lock vs pyproject) ✅ SUCCESS logs
CI Full NSE Runtime (postgres) ✅ SUCCESS logs
CI MetaTrader 5 Wine Runtime ✅ SUCCESS logs
Dependency Lock Self-Heal Regenerate lockfiles when drifted ✅ SUCCESS logs
CI Full NSE Runtime (sqlite) ✅ SUCCESS logs
CI CI Integrity and Change Classification ✅ SUCCESS logs
Security Trivy Vulnerability Scan ✅ SUCCESS logs
Docs Validate documentation ✅ SUCCESS logs
CI Code Quality & Tests ✅ SUCCESS logs
Security CodeQL Analysis ✅ SUCCESS logs
JS Tests Frontend JS Unit Tests ✅ SUCCESS logs
Lockfile Diff Dependency Manifest Diff ✅ SUCCESS logs

🟢 Final Verdict — Merge? Yes

Every merge precondition observed is satisfied:

  • 1 check(s) not green: github-advanced-security — the base branch's required list could not be read, so GitHub's own mergeability answer is used instead.
  • Not observed: which checks the base branch requires, required-review count — could not be read.
  • GitHub reports this PR is mergeable, which already accounts for the unreadable rules above.

NSE Evidence Report — generated by nse pr report. Statuses are deterministic: 🟢 PASS · 🟡 IN PROGRESS · 🟠 BLOCKED · 🔴 FAIL · ⚪ UNKNOWN. unknown = the evidence did not determine it. This comment is updated in place; it never duplicates.

Opselon added a commit that referenced this pull request Oct 5, 2026
…#638)

Root cause: Dependabot bumps ranges in pyproject.toml but cannot run
uv pip compile, so it opens PRs whose committed requirements.lock is
stale. The required "Dependency drift (lock vs pyproject)" gate then
fails on every dependency PR and blocks the merge queue (#633-#637).

Two-part fix:
  1. Regenerate requirements.lock + requirements.txt from the current
     pyproject.toml (uv 0.12.10, --python-version 3.11) so main is
     consistent again. Every PR that does not itself touch
     pyproject.toml (all npm/frontend and github-actions PRs) goes green
     because the gate compares the committed lock against a fresh compile.
  2. Add .github/workflows/dependency-autoregen.yml: on any pyproject.toml
     change reaching main it regenerates and commits the artifacts in place
     (main can never stay drifted); on PRs that move pyproject.toml it
     pushes the regenerated artifacts onto the PR branch and re-requests
     the check suites. Idempotent - converges after one commit.

Co-authored-by: Opselon <opselon@users.noreply.github.com>
Dependabot bumps pyproject.toml ranges but cannot run uv pip compile,
so the compiled artifacts must ship in the same PR (see
.github/dependabot.yml lockfile-safe contract). Regenerated with
uv 0.12.10 --python-version 3.11.
@Opselon
Opselon merged commit 87d6ef9 into main Oct 5, 2026
27 of 28 checks passed
@Opselon
Opselon deleted the dependabot/pip/python-production-ff77a847ad branch October 5, 2026 21:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant