Skip to content

Refresh locked dependencies; pin setup-uv v10.2.0 - #506

Merged
renmengye merged 3 commits into
mainfrom
chore/deps-refresh
Oct 11, 2026
Merged

renmengye merged 3 commits into
mainfrom
chore/deps-refresh

Conversation

@renmengye

Copy link
Copy Markdown
Member

Two upgrade items from the maintainer digest (#337).

  • uv lock --upgrade for the root project, within the existing pyproject bounds: cryptography 50.0.1→50.0.2, pydantic 2.13.5→2.14.0 (pydantic-core 2.46.5→2.50.0), mypy 2.3.1→2.4.0, ruff 0.16.6→0.17.0, filelock 3.32.5→4.1.0, plus patch and minor transitives. src/outerloop/bridge_runtime is untouched; its pins are a separate decision in the digest. ruff, ruff format and mypy raise no new findings, and nothing was reverted.
  • All 12 astral-sh/setup-uv@v10.0.1 pins become v10.2.0 (released 2026-09-21). The newer v10.3.0 is two days old, so it waits.

Lock refresh built by GLM-5.3 (gate run locally); workflow pins by Claude Opus 5.5, because GLM's sandbox cannot reach GitHub; final read by Claude Opus 5.5.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Round 1 — reviewed head c681a5fd — reviewer summarizer:hermes/gpt-5.6-terra over coverage+credentials+deployment+general+lifecycle+prose.

terra
Advisory findings from outerloop — the code owner decides. Reply to disagree; the outerloop:no-review label opts this PR out.

Verdict: no defects found.

Merged verdict: no findings were reported by any review lens. Deployment noted that the supplied lockfile diff was truncated, so that portion could not be assessed. Rejected findings: none.

@renmengye renmengye added the outerloop:review re-request the advisory review label Oct 11, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Round 2 — reviewed head 66724ca5 — reviewer hermes/gpt-5.6-terra.

terra
Advisory findings from outerloop — the code owner decides. Reply to disagree; the outerloop:no-review label opts this PR out.

Verdict: no defects found.

No defects found in the reviewed diff; the supplied diff was truncated.

@renmengye
renmengye merged commit 147d5f7 into main Oct 11, 2026
5 checks passed
@renmengye
renmengye deleted the chore/deps-refresh branch October 11, 2026 06:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

outerloop:review re-request the advisory review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant