Repository navigation
build(deps): bump pyyaml from 6.0.2 to 6.0.3 - #178
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 6.0.2 to 6.0.3. - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.2...6.0.3) --- updated-dependencies: - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
chrisdlangton
left a comment
chrisdlangton
left a comment
There was a problem hiding this comment.
pyyaml 6.0.2 to 6.0.3, patch release. Squash note: these four bumps touch the same lines of requirements.txt, so they cannot be squashed in order without conflicts. I applied each requirements.in bump in turn and regenerated requirements.txt with uv pip compile --python-version 3.11 --generate-hashes requirements.in, merging in the order #177, #178, #179, #180. This differs from the dependabot file in two ways: typing-extensions 4.16.0 is included (referencing needs it on Python < 3.13 and requires-python is >=3.11, so main's file was missing it) and the typing-extensions wheel hash that dependabot listed twice appears once. Verified the final file with uv pip install --require-hashes -r requirements.txt on Python 3.13 and 3.11, uv pip check, and pytest on the package (59 passed, 5 xfailed, same as main).
| jsonschema==4.25.1 | ||
| jsonschema-specifications==2025.4.1 | ||
| pyyaml==6.0.2 | ||
| pyyaml==6.0.3 |
There was a problem hiding this comment.
pyyaml 6.0.3 is a patch release; loads and the test suite work with it.
|
Squash-merged to main as 6e518fe (signed, authored by chris@vulnetix.com). requirements.txt was regenerated, see the review. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps pyyaml from 6.0.2 to 6.0.3.
Release notes
Sourced from pyyaml's releases.
Changelog
Sourced from pyyaml's changelog.
Commits
49790e7Release 6.0.3 (#889)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)