chore(deps): bundle routine dependency bumps - #3175
Merged
Merged
Conversation
Bundles the following Dependabot updates into one PR: - pillow 12.2.0 -> 12.3.0 (#3167) - pytest 9.1.0 -> 9.1.1 (#3168) - pygit2 1.19.2 -> 1.19.3 (#3169) - uvicorn 0.49.0 -> 0.51.0 (#3170) - typescript 6.0.3 -> 7.0.2 (#3171) The Django 5.2 -> 6.0 bump is intentionally excluded: 6.0 is not an LTS release, so we stay on the 5.2 LTS line. Verified: full non-integration pytest suite (1446 passed) and the frontend production build both pass with the updated dependencies. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
This was referenced Jul 9, 2026
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bundles several routine Dependabot dependency bumps into a single PR.
Included
Both lockfiles (
uv.lock,bun.lock) were regenerated to match.Excluded
The Django 5.2 -> 6.0 bump (originally 3166) is not included. Django 6.0 is not an LTS release, so we stay on the 5.2 LTS line. That Dependabot PR has been closed.
Verification
uv run pytest -m "not integration"-> 1446 passedbun run build-> production frontend build succeeds with TypeScript 7