Repository navigation
deps: bump the internal-packages group with 2 updates - #18
Conversation
dependabot
Bot
added
dependencies
|
@dependabot rebase |
|
Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request |
Squashed rebuild of the stalled automated dependency PR: the validated integration ticket intent rides atomically with the material lockfile change (GOV-INTENT-003).
804eaee to
fa0ee18
Compare
![ifuri-validator-agent[bot]](https://avatars.githubusercontent.com/in/4344831?s=60&v=4){kind=small}
There was a problem hiding this comment.
Validator approval after policy checks for exact head 481a0d1bf621eed4bed3747ac5d84031ef8cb2ba.
Ticket: ticket-618
Correlation ID: fleet2-18
Model: gemini/gemini-3.8-flash
Reviewed diff chunks: 8
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 8 diff chunk(s). Chunk 1 sets up governance tracking artifacts for ticket-618 (TICKETS.md index entry, README.md, intent.json) and starts the uv.lock dependency updates. Required checks have passed. | Diff chunk 2 contains standard uv.lock updates removing older wheel package references. All required and observational CI checks have passed. | This chunk of uv.lock updates internal packages (clickmd, costs, goal) and updates lockfile dependencies/markers accordingly. Required checks have passed. | This chunk removes transitive Jupyter and notebook-related dependencies (jedi, jupyter-client, jupyter-core, jupyterlab-pygments, matplotlib-inline, mistune, nbclient, nbconvert, nbformat) from uv.lock. All required checks have passed. | Diff chunk 5 of 8 shows lockfile dependency pruning in uv.lock following the removal of pfix and related transitive dependencies (e.g. pandocfilters, parso, pathspec, pexpect, pipreqs, prompt-toolkit) triggered by updating clickmd to 1.1.16. Required checks pass. | Diff chunk 6 reflects standard dependency pruning in uv.lock (removing unused packages such as pycparser and pyzmq). All required CI checks have passed. | This diff chunk updates uv.lock, removing unused transitive packages and wheel entries (such as pyzmq, soupsieve, stack-data, tinycss2, tornado). All required checks have passed with no security or functional issues detected. | Lockfile cleanup in uv.lock removing unneeded transitive dependencies (tornado, traitlets, wcwidth, webencodings, yarg). All required checks passed.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Semantic review prerequisite: not_required; policy 676cb4516bbfed2a000e40b9b1b6e4a430ecc761ec546aeb53d721a1905cfdd7.
Actual PR impact radar
Exact range: 5f3f8e761675e5615c5bba56ce7ea2d73c953097...481a0d1bf621eed4bed3747ac5d84031ef8cb2ba
Change digest: 6e94356d39e48c4c09f9338e087e9c22e55d96e546753bde1996fbb38eda863b
Score: 80/100 (L), estimated 146 min, split recommended: true
Affected services/components: repository-wide/unclassified
Machine-readable radar JSONL and SVG
{"actual_change":{"additions":121,"base_sha":"5f3f8e761675e5615c5bba56ce7ea2d73c953097","binary_files":0,"categories":{"code":1,"configuration":1,"docs":2},"change_digest":"6e94356d39e48c4c09f9338e087e9c22e55d96e546753bde1996fbb38eda863b","comparison":"5f3f8e761675e5615c5bba56ce7ea2d73c953097...481a0d1bf621eed4bed3747ac5d84031ef8cb2ba","deletions":617,"file_count":4,"files":["project/TICKETS.md","project/ticket-618/README.md","project/ticket-618/intent.json","uv.lock"],"head_sha":"481a0d1bf621eed4bed3747ac5d84031ef8cb2ba","service_count":0,"services":[]},"assessment_mode":"observed-pr","axes":{"coupling":5,"delivery":5,"scope":5,"uncertainty":3,"validation":2},"complexity":"L","confidence":0.9,"diagnostics":["RADAR-ACCEPTANCE-MISSING","RADAR-BUDGET-EXCEEDED"],"estimate":{"budget_minutes":30,"minutes":146,"within_budget":false},"impact":{"components":["github.com","project","redirect.github.com","repository-root","semcod"],"files":["github.com/semcod/clickmd/blob/main/CHANGELOG.md","github.com/semcod/clickmd/commit/0d9480df6ac1c6f6f2e97c36876a0478018d672d","github.com/semcod/clickmd/commit/0f0672930cbab9d9d42a5e9bce266190a68622f7","github.com/semcod/clickmd/commit/12fda28c0a77dff89effa3c83d4ac53dcb24bb00","github.com/semcod/clickmd/commit/228b32df819583590aa2baa0a9fd42ef332908f8","github.com/semcod/clickmd/commit/4d9603931b3133835054eba267286c869dab9b3d","github.com/semcod/clickmd/commit/680f8e2e0c2a3f8aaa73d22663a7d2a990df1835","github.com/semcod/clickmd/commit/97156f9d33ca8e36a617651ede1b464c4622b0a1","github.com/semcod/clickmd/commit/b09fbe48f37cc58aa7e9ce6ac55f71e84e66f2fa","github.com/semcod/clickmd/commit/b8720fb50d63103007e229872c92c190d7fa326e","github.com/semcod/clickmd/commit/da1738b96317c42ff0729141ffd902c47be473a9","github.com/wronai/clickmd","github.com/wronai/clickmd/compare/v1.1.15...v1.1.16","project/TICKETS.md","project/ticket-618/README.md","project/ticket-618/intent.json","redirect.github.com/wronai/clickmd/issues/11","redirect.github.com/wronai/clickmd/issues/3","redirect.github.com/wronai/clickmd/issues/5","redirect.github.com/wronai/clickmd/issues/7","redirect.github.com/wronai/clickmd/issues/8","semcod/ticket/002-local-ci-publication","semcod/ticket/004-local-verification","semcod/ticket/006-shared-python-verification","semcod/ticket/007-remove-pfix","uv.lock"],"public_interfaces":[],"runtime_dependencies":1},"schema":"subactor.ticket-radar/v1","score":80,"split":{"parts":[{"estimated_minutes":28,"name":"Implement github.com","scope":["github.com"]},{"estimated_minutes":28,"name":"Implement project","scope":["project"]},{"estimated_minutes":28,"name":"Implement redirect.github.com","scope":["redirect.github.com"]},{"estimated_minutes":28,"name":"Implement repository-root","scope":["repository-root"]},{"estimated_minutes":28,"name":"Implement semcod","scope":["semcod"]},{"estimated_minutes":15,"name":"Validate and project to trackers","scope":["tests","planfile","github/gitlab/jira projections"]}],"reason":"estimated_minutes_exceed_budget","recommended":true},"standards":[{"id":"wellmanifest/dsl","revision":"6c60fc4e0dd1f1bb74f46a7745e28019908d1203","version":"0.1.0-dev"},{"id":"wellmanifest/ticket-lifecycle","revision":"5bf581907a87b46a13a73e6c033d3abe4d9a306f","version":"0.1.0-dev"},{"id":"wellmanifest/git-lifecycle","revision":"7d77d4b7af57e69bc75c3a0290b3a4805c5c4438","version":"0.2.0-dev"},{"id":"wellmanifest/logs","revision":"48c284ef7a069055c0bcb6b900147ce5e65f8b43","version":"0.3.0"}],"ticket_ref":"ticket-618"}<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128" role="img"><title>ticket-618: deps: bump the internal-packages group with 2 updates</title><rect width="128" height="128" rx="12" fill="#f8fafc"/><g stroke-width="1"><polygon points="64,55 72,61 69,71 59,71 56,61" fill="none" stroke="#d7dde5"/><polygon points="64,47 80,59 74,78 54,78 48,59" fill="none" stroke="#d7dde5"/><polygon points="64,38 89,56 79,85 49,85 39,56" fill="none" stroke="#d7dde5"/><polygon points="64,30 97,53 84,92 44,92 31,53" fill="none" stroke="#d7dde5"/><polygon points="64,21 105,51 89,99 39,99 23,51" fill="none" stroke="#d7dde5"/><line x1="64" y1="64" x2="64" y2="21" stroke="#aab4c0"/><line x1="64" y1="64" x2="105" y2="51" stroke="#aab4c0"/><line x1="64" y1="64" x2="89" y2="99" stroke="#aab4c0"/><line x1="64" y1="64" x2="39" y2="99" stroke="#aab4c0"/><line x1="64" y1="64" x2="23" y2="51" stroke="#aab4c0"/></g><polygon points="64,21 105,51 79,85 54,78 23,51" fill="#fb923c" fill-opacity="0.45" stroke="#c2410c" stroke-width="2"/><circle cx="64" cy="64" r="3" fill="#c2410c"/><g font-family="sans-serif" font-size="7" fill="#334155"><text x="64" y="11" text-anchor="middle">SCO</text><text x="114" y="48" text-anchor="middle">COU</text><text x="95" y="107" text-anchor="middle">UNC</text><text x="33" y="107" text-anchor="middle">VAL</text><text x="14" y="48" text-anchor="middle">DEL</text></g><text x="64" y="124" text-anchor="middle" font-family="sans-serif" font-size="8" fill="#0f172a">L · 146m</text></svg>DECISION D-618-3987
TICKET ticket-618
HEAD_SHA 481a0d1bf621eed4bed3747ac5d84031ef8cb2ba
CORRELATION_ID fleet2-18
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "dependabot[bot]"
INPUT observed_checks = ["test=PASS","metadata=PASS","test (3.13)=PASS","test=PASS","governance / enforce=PASS","test (3.10)=PASS","freshness=PASS","governance / remote lifecycle=PASS"]
INPUT required_checks = ["test"]
INPUT required_checks_source = "protected registry + GitHub applied rules (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT semantic_review_assessment = {"schema":"subactor.validator/semantic-review-assessment/v1","subject":{"repository":"autogrammar/imgl","pull_request":18,"head_sha":"481a0d1bf621eed4bed3747ac5d84031ef8cb2ba","base_sha":"5f3f8e761675e5615c5bba56ce7ea2d73c953097","diff_sha256":"b9b3c3e5682887d595c225bd76269a8d1e8c46678433709aebf14c6cd3678dce"},"policy":{"policy_schema":"subactor.validator/semantic-review-policy/v1","policy_version":1,"policy_sha256":"676cb4516bbfed2a000e40b9b1b6e4a430ecc761ec546aeb53d721a1905cfdd7","required":false,"critical_paths":[],"observed_paths":["project/TICKETS.md","project/ticket-618/README.md","project/ticket-618/intent.json","uv.lock"]},"grounding":"full-diff-not-per-finding-proof","execution_authority":false,"status":"not_required","reason":null,"review_sha256":null,"unresolved":[]}
INPUT superseded_checks = []
INPUT ticket_radar_receipt = {"schema":"subactor.ticket-radar/v1","base_sha":"5f3f8e761675e5615c5bba56ce7ea2d73c953097","head_sha":"481a0d1bf621eed4bed3747ac5d84031ef8cb2ba","change_digest":"6e94356d39e48c4c09f9338e087e9c22e55d96e546753bde1996fbb38eda863b","score":80,"complexity":"L","estimated_minutes":146,"split_recommended":true,"services":[],"authority":"ADVISORY","promotion":"FORBIDDEN"}
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "gemini/gemini-3.8-flash"
ASSERT VERDICT_AUTHORITY != "ADVISORY"
Bumps the internal-packages group with 2 updates: costs and clickmd.
Updates
costsfrom 0.2.0 to 0.2.1Updates
clickmdfrom 1.1.15 to 1.1.16Changelog
Sourced from clickmd's changelog.
Commits
0d9480dchore(release): bump version to v1.1.1612fda28ci: add Planfile GitHub sync workflow (v0.1.126) (#11)da1738bMerge pull request #8 from semcod/ticket/007-remove-pfix228b32d[ticket-007] build: remove pfix auto-repair configurationb09fbe4Merge pull request #7 from semcod/ticket/006-shared-python-verification0f06729docs(ci): exercise shared protected Python runner97156f9Merge pull request #5 from semcod/ticket/004-local-verification4d96039Adopt documentation metadata for protected local verificationb8720fbMerge pull request #3 from semcod/ticket/002-local-ci-publication680f8e2docs: adopt pinned local OneDev and Validator publication policyDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions