Update all dependencies - #480
Closed
renovate[bot] wants to merge 1 commit into
Closed
Conversation
renovate
Bot
requested review from
RonaldHensbergen and
SemTiOne
as code owners
August 21, 2026 01:07
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
August 21, 2026 19:08
8c6b9bf to
f3d1f51
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
August 21, 2026 19:15
f3d1f51 to
b268f2b
Compare
Copilot AI
added a commit
that referenced
this pull request
Aug 21, 2026
…ailures - dbt-core 1.12.2 → 1.12.3 (widens sqlparse constraint to >=0.5.5,<0.7.0, allowing the patched sqlparse 0.6.0 to be resolved) - Add sqlparse>=0.6.0 explicit pin so the fixed version is always installed - dagster/dagster-graphql/dagster-webserver 1.13.18 → 1.13.19 - dagster-postgres 0.29.18 → 0.29.19 - .trivyignore: drop sqlparse CVEs (fixed by dbt-core 1.12.3 + sqlparse pin); add CVE-2026-53612/53613/53614 (util-linux mount, fixed in 2.41.5-0+deb13u1; no python:3.14-slim digest ships it yet) Co-authored-by: RonaldHensbergen <22539616+RonaldHensbergen@users.noreply.github.com>
9 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==1.13.18→==1.13.19==1.13.18→==1.13.19==0.29.18→==0.29.19==1.13.18→==1.13.19==1.12.2→==1.12.3Release Notes
dagster-io/dagster (dagster)
v1.13.19Compare Source
New
Bugfixes
dbt-labs/dbt-core (dbt-core)
v1.12.3: dbt-core v1.12.3Compare Source
dbt-core 1.12.3 - August 20, 2026
Fixes
x-ms-blob-type: BlockBlobheader and accept201 Createdwhen uploading artifacts to an Azure Blob Storage signed URL, so artifact ingestion no longer fails with400 MissingRequiredHeaderon Azure-hosted regions. Upload errors now include the storage provider's error code alongside the status code. (#N/A)Dependencies
sqlparse>=0.5.5,<0.7.0,sqlparse0.6.0 is the fixed release for CVE-2026-54284, CVE-2026-59893, CVE-2026-59894 and CVE-2026-71491 (parser denial-of-service). (#15988)Contributors
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.