Repository navigation
chore(deps): bump pip from 26.1.1 to 26.1.2 in the uv group across 1 directory - #73
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the uv group with 1 update in the / directory: [pip](https://github.com/pypa/pip). Updates `pip` from 26.1.1 to 26.1.2 - [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst) - [Commits](pypa/pip@26.1.1...26.1.2) --- updated-dependencies: - dependency-name: pip dependency-version: 26.1.2 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
dependabot
Bot
added
the
dependencies
dependabot
Bot
added
the
dependencies
johnteee
pushed a commit
that referenced
this pull request
Oct 9, 2026
#73) Dependabot PR #73 could not be merged: its commit lacks the Lore trailers the review-institution gate requires, and its uv.lock no longer applies on top of current main. This commit reproduces the bump with the repo tooling: pip has no floor in pyproject.toml (it is a transitive/dev lock entry only, exactly as in the #73 diff, which touched uv.lock alone), so only the lock is regenerated with `uv lock --upgrade-package pip==26.1.2` on current main. No hand edits. Action: G-P2-21 Roadmap-Status: unchanged Constraint: dependency bump only; lock regenerated by uv, not edited by hand; no code change Tested: uv lock resolves; locked pip version is 26.1.2; CI on this PR is the verification Confidence: high Agent: Claude Code Agent-Session: https://claude.ai/code/session_0132tPtPaCjZgUpU2Ezgmrta Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0132tPtPaCjZgUpU2Ezgmrta
8 of 11 tasks
Member
|
Superseded by #85, which reproduces this lock-only bump (pip 26.1.2) on current Generated by Claude Code |
johnteee
added a commit
that referenced
this pull request
Oct 9, 2026
…p (supersedes #73) All CI checks green on aee8f0a (CI run 37977279127). Owner decision 2026-10-09: merge the stalled Dependabot bumps one per CI cycle; Dependabot PR #73 is closed as superseded by this merge. This is the last of the six uv-group bumps (#71, #72, #70, #69, #68, #73). Action: G-P2-21 Roadmap-Status: unchanged Constraint: merge commit only; lock-only dev/transitive patch bump Tested: PR CI run 37977279127 green on all 21 non-skipped checks Confidence: high Agent: Claude Code Agent-Session: https://claude.ai/code/session_0132tPtPaCjZgUpU2Ezgmrta Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0132tPtPaCjZgUpU2Ezgmrta
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
Merged
11 of 13 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the uv group with 1 update in the / directory: pip.
Updates
pipfrom 26.1.1 to 26.1.2Changelog
Sourced from pip's changelog.
Commits
31d7d16Bump for release79f348cUpdate AUTHORS.txt237a925Merge pull request #14001 from notatallshaw/fix-is-within-directory34d0285Merge pull request #14006 from laymonage/fix-requirements_from_scripts-space-...09d3e07Merge pull request #14012 from notatallshaw/stable-accept-encodingfa7854fUse is_within_directory for entry point checkd01b46cNEWS ENTRY7ff8bddFix is_within_directory for doubled-slash roots7ea3466NEWS ENTRY85673eaFix Accept-Encoding to gzip, deflateYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.