Skip to content

fix(deps): update locked packages with security advisories - #16

Merged
lukwam merged 1 commit into
mainfrom
fix/security-lock-updates
Oct 26, 2026
Merged

lukwam merged 1 commit into
mainfrom
fix/security-lock-updates

Conversation

@lukwam

@lukwam lukwam commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Updates the packages in poetry.lock that have open Dependabot alerts (1 open), plus what they pull in. Only poetry.lock changes; the package's declared dependency ranges don't.

  • distlib 0.4.1 -> 0.4.4
  • packaging 26.2 -> 26.3
  • python-discovery 1.4.0 -> 1.6.4
  • virtualenv 21.4.2 -> 21.14.13

Locally: tests and pre-commit pass.

🤖 Generated with Claude Code

https://claude.ai/code/session_01CVp1mE8TsPmfiRgNEZPzg5

Updates only the packages with open Dependabot alerts (and what they
pull in), clearing the 1 open alerts:

- distlib 0.4.1 -> 0.4.4
- packaging 26.2 -> 26.3
- python-discovery 1.4.0 -> 1.6.4
- virtualenv 21.4.2 -> 21.14.13

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CVp1mE8TsPmfiRgNEZPzg5
@lukwam
lukwam merged commit b9a8966 into main Oct 26, 2026
5 checks passed
@lukwam
lukwam deleted the fix/security-lock-updates branch October 26, 2026 21:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant