v4.2.7

Changelog

🧰 Maintenance

• chore(deps): bump types-requests from 2.33.0.20260503 to 2.33.0.20260513 @dependabot[bot] (#764)
• chore(deps): bump the dependencies group with 3 updates @dependabot[bot] (#759)
• chore(deps): bump the dependencies group with 2 updates @dependabot[bot] (#763)
• chore(deps): bump python from 3.14-slim to 3.14.5-slim in the dependencies group @dependabot[bot] (#758)
• chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 @dependabot[bot] (#760)
• chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml from 0.6.0 to 1.0.1 @dependabot[bot] (#762)
• chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml from 0.6.0 to 1.0.1 @dependabot[bot] (#761)

See details of all code changes since previous release

v4.2.6

Changelog

🧰 Maintenance

• chore(deps): bump idna from 3.11 to 3.15 @dependabot[bot] (#756)
• chore(deps): bump the dependencies group with 4 updates @dependabot[bot] (#752)
• chore(deps): bump types-requests from 2.33.0.20260408 to 2.33.0.20260503 @dependabot[bot] (#755)
• chore(deps): bump python from 5b3879b to 7a50012 @dependabot[bot] (#751)
• chore(deps): bump the dependencies group with 2 updates @dependabot[bot] (#753)
• chore(deps): bump mypy from 1.20.2 to 2.0.0 @dependabot[bot] (#754)
• chore(deps): bump pygments from 2.19.2 to 2.20.0 @dependabot[bot] (#750)

See details of all code changes since previous release

v4.2.5

Changelog

🧰 Maintenance

• chore(deps): bump urllib3 from 2.6.3 to 2.7.0 @dependabot[bot] (#748)

See details of all code changes since previous release

v4.2.4

Changelog

🧰 Maintenance

• ci: adopt consolidated ospo-reusable-workflows release.yaml @jmeridth (#746)

See details of all code changes since previous release

v4.2.3

Changelog

🐛 Bug Fixes

• fix: suppress uv hardlink warning with UV_LINK_MODE=copy @zkoppert (#732)

🧰 Maintenance

• chore(deps): bump github-community-projects/contributors from 2.0.8 to 2.0.9 in the dependencies group @dependabot[bot] (#744)
• chore(deps): bump mypy from 1.20.1 to 1.20.2 in the dependencies group @dependabot[bot] (#742)
• chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 in the dependencies group @dependabot[bot] (#741)
• chore(deps): bump python from 3989a23 to 5b3879b @dependabot[bot] (#740)
• chore(deps): bump the dependencies group with 4 updates @dependabot[bot] (#738)
• chore(deps): bump python from bc389f7 to 3989a23 @dependabot[bot] (#737)
• chore(deps): bump mypy from 1.20.0 to 1.20.1 in the dependencies group @dependabot[bot] (#739)
• chore(deps): bump types-pytz from 2026.1.1.20260402 to 2026.1.1.20260408 @dependabot[bot] (#735)
• chore(deps): bump types-requests from 2.33.0.20260402 to 2.33.0.20260408 @dependabot[bot] (#736)
• chore(deps): bump python from 71b358f to bc389f7 @dependabot[bot] (#734)
• chore(deps): bump pytest from 9.0.2 to 9.0.3 @dependabot[bot] (#733)
• chore(deps): bump types-pytz from 2026.1.1.20260304 to 2026.1.1.20260402 @dependabot[bot] (#731)
• chore(deps): bump the dependencies group with 3 updates @dependabot[bot] (#730)
• chore(deps): bump github/codeql-action from 3.32.6 to 4.35.1 @dependabot[bot] (#729)
• chore(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 @dependabot[bot] (#728)
• chore(deps): bump the dependencies group with 3 updates @dependabot[bot] (#726)
• chore(deps): bump kenyonj/mark-ready-when-ready from b6279addd55dd13208965a9eff24b2cf1989a8ef to 0ef6176fc2ddef5bab6cb4ab9517a37f0c153ba4 @dependabot[bot] (#727)
• chore(deps): bump python from fb83750 to 71b358f @dependabot[bot] (#725)

See details of all code changes since previous release

v4.2.2

Changelog

🧰 Maintenance

• chore(deps): bump cryptography from 46.0.6 to 46.0.7 @dependabot[bot] (#723)
• chore(deps): bump types-requests from 2.32.4.20260107 to 2.32.4.20260324 @dependabot[bot] (#722)
• chore(deps): bump pytest-cov from 7.0.0 to 7.1.0 in the dependencies group @dependabot[bot] (#721)
• chore(deps): bump the dependencies group with 5 updates @dependabot[bot] (#720)
• chore(deps): bump requests from 2.33.0 to 2.33.1 @dependabot[bot] (#718)

See details of all code changes since previous release

v4.2.1

Changelog

🐛 Bug Fixes

• fix: correct TypeError test to exercise exception handler @zkoppert (#715)

🧰 Maintenance

• chore(deps): bump cryptography from 46.0.5 to 46.0.6 @dependabot[bot] (#716)

See details of all code changes since previous release

v4.2.0

Changelog

🚀 Features

• feat: add time_to_first_review metric for pull requests @meoyushi (#683)

See details of all code changes since previous release

v4.1.3

Changelog

🧰 Maintenance

• chore(deps): bump python from 584e89d to fb83750 @dependabot[bot] (#710)
• chore(deps): bump astral-sh/setup-uv from 7.3.1 to 7.6.0 in the dependencies group @dependabot[bot] (#711)

See details of all code changes since previous release

v4.1.2

Changelog

🐛 Bug Fixes

• fix: prevent dev dependency downloads at runtime @zkoppert (#704)
• fix: cast gh_app_id to string for JWT encoding compatibility @jmeridth (#705)
• fix: tighten workflow permissions, add security hardening, and fix uv tool invocations @jmeridth (#702)

🧰 Maintenance

• chore(deps): bump numpy from 2.4.2 to 2.4.3 in the dependencies group @dependabot[bot] (#708)
• chore(deps): bump kenyonj/mark-ready-when-ready from 33b13c51ba23786efb933701ef253352baf05bdd to b6279addd55dd13208965a9eff24b2cf1989a8ef @dependabot[bot] (#707)
• chore(deps): bump python from 6a27522 to 584e89d @dependabot[bot] (#706)

See details of all code changes since previous release