Repository navigation
deps: bump the internal-packages group with 2 updates - #11
Conversation
dependabot
Bot
added
dependencies
|
@dependabot rebase |
|
Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request |
Squashed rebuild of the stalled automated dependency PR: the validated integration ticket intent rides atomically with the material lockfile change (GOV-INTENT-003).
6d7c90a to
c98ef60
Compare
![ifuri-validator-agent[bot]](https://avatars.githubusercontent.com/in/4344831?s=60&v=4){kind=small}
There was a problem hiding this comment.
Validator approval after policy checks for exact head c431b4dcb1b691d84075de98eea3214068fa5d82.
Ticket: ticket-611
Correlation ID: fleet2-11
Model: gemini/gemini-3.8-flash
Reviewed diff chunks: 8
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 8 diff chunk(s). Ticket documentation and intent file added for ticket-611, along with standard uv.lock dependency updates. Required checks have passed. | Diff chunk 2 of 8 consists of standard lockfile entries removed/updated in uv.lock. All required CI checks passed cleanly. | This chunk of the lockfile update reflects standard dependency updates for clickmd (1.1.15 -> 1.1.16) and costs (0.2.0 -> 0.2.1), along with associated dependency pruning and marker adjustments. All required checks have passed. | This diff chunk updates lockfile entries in uv.lock, bumping goal from 2.2.0 to 2.2.1 and pruning unused transitive dependencies (such as nbconvert, jupyter packages, etc.). All required CI checks have passed. | Diff chunk 5/8 updates lockfile resolutions and removes unused transitive dependencies (such as pandocfilters, pfix, pipreqs, pycparser, and pyzmq) corresponding to the internal package bump. | This diff chunk updates wheel hashes in uv.lock as part of dependency lockfile maintenance. All required checks have passed with no security or operational concerns identified. | Diff chunk 7 cleans up unused transitive dependency definitions and wheels (pyzmq, soupsieve, tinycss2, tornado) in uv.lock resulting from dependency resolution. All required CI checks passed. | This diff chunk removes unused dependencies (such as webencodings, yarg, and tornado wheel entries) from uv.lock as part of the lockfile update. All required tests passed.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Semantic review prerequisite: not_required; policy 676cb4516bbfed2a000e40b9b1b6e4a430ecc761ec546aeb53d721a1905cfdd7.
Actual PR impact radar
Exact range: c4a0f3b8a3f6c419e33d75b4ee149e80cfc78dba...c431b4dcb1b691d84075de98eea3214068fa5d82
Change digest: 7213a3537692a5708decd7a20da37096fbff9c56f4bb88cdf8455e39369f22e7
Score: 80/100 (L), estimated 140 min, split recommended: true
Affected services/components: repository-wide/unclassified
Machine-readable radar JSONL and SVG
{"actual_change":{"additions":129,"base_sha":"c4a0f3b8a3f6c419e33d75b4ee149e80cfc78dba","binary_files":0,"categories":{"code":1,"configuration":1,"docs":1},"change_digest":"7213a3537692a5708decd7a20da37096fbff9c56f4bb88cdf8455e39369f22e7","comparison":"c4a0f3b8a3f6c419e33d75b4ee149e80cfc78dba...c431b4dcb1b691d84075de98eea3214068fa5d82","deletions":455,"file_count":3,"files":["project/ticket-611/README.md","project/ticket-611/intent.json","uv.lock"],"head_sha":"c431b4dcb1b691d84075de98eea3214068fa5d82","service_count":0,"services":[]},"assessment_mode":"observed-pr","axes":{"coupling":5,"delivery":5,"scope":5,"uncertainty":3,"validation":2},"complexity":"L","confidence":0.9,"diagnostics":["RADAR-ACCEPTANCE-MISSING","RADAR-BUDGET-EXCEEDED"],"estimate":{"budget_minutes":30,"minutes":140,"within_budget":false},"impact":{"components":["github.com","project","redirect.github.com","repository-root","semcod"],"files":["github.com/semcod/clickmd/blob/main/CHANGELOG.md","github.com/semcod/clickmd/commit/0d9480df6ac1c6f6f2e97c36876a0478018d672d","github.com/semcod/clickmd/commit/0f0672930cbab9d9d42a5e9bce266190a68622f7","github.com/semcod/clickmd/commit/12fda28c0a77dff89effa3c83d4ac53dcb24bb00","github.com/semcod/clickmd/commit/228b32df819583590aa2baa0a9fd42ef332908f8","github.com/semcod/clickmd/commit/4d9603931b3133835054eba267286c869dab9b3d","github.com/semcod/clickmd/commit/680f8e2e0c2a3f8aaa73d22663a7d2a990df1835","github.com/semcod/clickmd/commit/97156f9d33ca8e36a617651ede1b464c4622b0a1","github.com/semcod/clickmd/commit/b09fbe48f37cc58aa7e9ce6ac55f71e84e66f2fa","github.com/semcod/clickmd/commit/b8720fb50d63103007e229872c92c190d7fa326e","github.com/semcod/clickmd/commit/da1738b96317c42ff0729141ffd902c47be473a9","github.com/wronai/clickmd","github.com/wronai/clickmd/compare/v1.1.15...v1.1.16","project/ticket-611/README.md","project/ticket-611/intent.json","redirect.github.com/wronai/clickmd/issues/11","redirect.github.com/wronai/clickmd/issues/3","redirect.github.com/wronai/clickmd/issues/5","redirect.github.com/wronai/clickmd/issues/7","redirect.github.com/wronai/clickmd/issues/8","semcod/ticket/002-local-ci-publication","semcod/ticket/004-local-verification","semcod/ticket/006-shared-python-verification","semcod/ticket/007-remove-pfix","uv.lock"],"public_interfaces":[],"runtime_dependencies":1},"schema":"subactor.ticket-radar/v1","score":80,"split":{"parts":[{"estimated_minutes":26,"name":"Implement github.com","scope":["github.com"]},{"estimated_minutes":26,"name":"Implement project","scope":["project"]},{"estimated_minutes":26,"name":"Implement redirect.github.com","scope":["redirect.github.com"]},{"estimated_minutes":26,"name":"Implement repository-root","scope":["repository-root"]},{"estimated_minutes":26,"name":"Implement semcod","scope":["semcod"]},{"estimated_minutes":15,"name":"Validate and project to trackers","scope":["tests","planfile","github/gitlab/jira projections"]}],"reason":"estimated_minutes_exceed_budget","recommended":true},"standards":[{"id":"wellmanifest/dsl","revision":"6c60fc4e0dd1f1bb74f46a7745e28019908d1203","version":"0.1.0-dev"},{"id":"wellmanifest/ticket-lifecycle","revision":"5bf581907a87b46a13a73e6c033d3abe4d9a306f","version":"0.1.0-dev"},{"id":"wellmanifest/git-lifecycle","revision":"7d77d4b7af57e69bc75c3a0290b3a4805c5c4438","version":"0.2.0-dev"},{"id":"wellmanifest/logs","revision":"48c284ef7a069055c0bcb6b900147ce5e65f8b43","version":"0.3.0"}],"ticket_ref":"ticket-611"}<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128" role="img"><title>ticket-611: deps: bump the internal-packages group with 2 updates</title><rect width="128" height="128" rx="12" fill="#f8fafc"/><g stroke-width="1"><polygon points="64,55 72,61 69,71 59,71 56,61" fill="none" stroke="#d7dde5"/><polygon points="64,47 80,59 74,78 54,78 48,59" fill="none" stroke="#d7dde5"/><polygon points="64,38 89,56 79,85 49,85 39,56" fill="none" stroke="#d7dde5"/><polygon points="64,30 97,53 84,92 44,92 31,53" fill="none" stroke="#d7dde5"/><polygon points="64,21 105,51 89,99 39,99 23,51" fill="none" stroke="#d7dde5"/><line x1="64" y1="64" x2="64" y2="21" stroke="#aab4c0"/><line x1="64" y1="64" x2="105" y2="51" stroke="#aab4c0"/><line x1="64" y1="64" x2="89" y2="99" stroke="#aab4c0"/><line x1="64" y1="64" x2="39" y2="99" stroke="#aab4c0"/><line x1="64" y1="64" x2="23" y2="51" stroke="#aab4c0"/></g><polygon points="64,21 105,51 79,85 54,78 23,51" fill="#fb923c" fill-opacity="0.45" stroke="#c2410c" stroke-width="2"/><circle cx="64" cy="64" r="3" fill="#c2410c"/><g font-family="sans-serif" font-size="7" fill="#334155"><text x="64" y="11" text-anchor="middle">SCO</text><text x="114" y="48" text-anchor="middle">COU</text><text x="95" y="107" text-anchor="middle">UNC</text><text x="33" y="107" text-anchor="middle">VAL</text><text x="14" y="48" text-anchor="middle">DEL</text></g><text x="64" y="124" text-anchor="middle" font-family="sans-serif" font-size="8" fill="#0f172a">L · 140m</text></svg>DECISION D-611-4045
TICKET ticket-611
HEAD_SHA c431b4dcb1b691d84075de98eea3214068fa5d82
CORRELATION_ID fleet2-11
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "dependabot[bot]"
INPUT observed_checks = ["test (3.10)=PASS","test (3.13)=PASS","governance / enforce=PASS","governance / remote lifecycle=PASS","freshness=PASS"]
INPUT required_checks = ["test (3.10)","test (3.13)"]
INPUT required_checks_source = "protected registry (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT semantic_review_assessment = {"schema":"subactor.validator/semantic-review-assessment/v1","subject":{"repository":"autogrammar/code2schema","pull_request":11,"head_sha":"c431b4dcb1b691d84075de98eea3214068fa5d82","base_sha":"c4a0f3b8a3f6c419e33d75b4ee149e80cfc78dba","diff_sha256":"13c86c59c9e69f85da48636bd99c75d878db13ef86d8c96e5dbe11ff373fd287"},"policy":{"policy_schema":"subactor.validator/semantic-review-policy/v1","policy_version":1,"policy_sha256":"676cb4516bbfed2a000e40b9b1b6e4a430ecc761ec546aeb53d721a1905cfdd7","required":false,"critical_paths":[],"observed_paths":["project/ticket-611/README.md","project/ticket-611/intent.json","uv.lock"]},"grounding":"full-diff-not-per-finding-proof","execution_authority":false,"status":"not_required","reason":null,"review_sha256":null,"unresolved":[]}
INPUT superseded_checks = []
INPUT ticket_radar_receipt = {"schema":"subactor.ticket-radar/v1","base_sha":"c4a0f3b8a3f6c419e33d75b4ee149e80cfc78dba","head_sha":"c431b4dcb1b691d84075de98eea3214068fa5d82","change_digest":"7213a3537692a5708decd7a20da37096fbff9c56f4bb88cdf8455e39369f22e7","score":80,"complexity":"L","estimated_minutes":140,"split_recommended":true,"services":[],"authority":"ADVISORY","promotion":"FORBIDDEN"}
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "gemini/gemini-3.8-flash"
ASSERT VERDICT_AUTHORITY != "ADVISORY"
Bumps the internal-packages group with 2 updates: costs and clickmd.
Updates
costsfrom 0.2.0 to 0.2.1Updates
clickmdfrom 1.1.15 to 1.1.16Changelog
Sourced from clickmd's changelog.
Commits
0d9480dchore(release): bump version to v1.1.1612fda28ci: add Planfile GitHub sync workflow (v0.1.126) (#11)da1738bMerge pull request #8 from semcod/ticket/007-remove-pfix228b32d[ticket-007] build: remove pfix auto-repair configurationb09fbe4Merge pull request #7 from semcod/ticket/006-shared-python-verification0f06729docs(ci): exercise shared protected Python runner97156f9Merge pull request #5 from semcod/ticket/004-local-verification4d96039Adopt documentation metadata for protected local verificationb8720fbMerge pull request #3 from semcod/ticket/002-local-ci-publication680f8e2docs: adopt pinned local OneDev and Validator publication policyDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions