Skip to content

chore(deps): bump template and e2b-charts Python dependencies - #360

Merged
mishushakov merged 3 commits into
mainfrom
devin/1793201192-bundle-dep-bumps
Oct 28, 2026
Merged

mishushakov merged 3 commits into
mainfrom
devin/1793201192-bundle-dep-bumps

Conversation

@devin-ai-integration

@devin-ai-integration devin-ai-integration Bot commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Bundles the open dependency PRs into one bump, at the latest PyPI release of each package:

Package Where From → To Supersedes
jupyter-server template/requirements.txt 2.20.0 → 2.21.1 (GHSA-c3mw-737p-c7g2) #340
matplotlib template/requirements.txt, chart_data_extractor/uv.lock 3.10.9 → 3.11.2 #304, #307
pillow template/requirements.txt, chart_data_extractor/uv.lock 12.3.0 → 13.0.0 #355
aiohttp template/requirements.txt 3.14.3 → 3.14.5 #355
tornado template/requirements.txt 6.5.8 → 6.6 #344, #355
urllib3 template/requirements.txt 2.7.0 → 2.8.0 #344, #355

Verification:

  • Full sandbox suite (code-interpreter-tests) passes against the freshly built template.
  • uv pip compile of template/requirements.txt for Python 3.13 / manylinux resolves cleanly.
  • chart_data_extractor: uv run pytest passes on matplotlib 3.11.2 / pillow 13.0.0 (still warns about Axis.converter, deprecated since 3.10 and removed in 3.12).
  • pip-audit on the resolved set: only nltk 3.10.3 (PYSEC-2026-3740) remains, with no fixed release yet.

Link to Devin session: https://app.devin.ai/sessions/524e40ac1ee54784b429eda25bb39c6e
Open in Devin Desktop: https://app.devin.ai/desktop/session/524e40ac1ee54784b429eda25bb39c6e?variant=devin
Requested by: @mishushakov

Bundles #304, #307, #340, #344 and #355: jupyter-server 2.21.1
(GHSA-c3mw-737p-c7g2), matplotlib 3.11.2, pillow 13.0.0, aiohttp 3.14.5,
tornado 6.5.10 and urllib3 2.8.0.

Co-Authored-By: mish@e2b.dev <mish@e2b.dev>
@devin-ai-integration

Copy link
Copy Markdown
Contributor Author

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

  • Disable automatic comment, CI, and merge conflict monitoring

@cla-bot cla-bot Bot added the cla-signed label Oct 28, 2026
devin-ai-integration Bot and others added 2 commits October 28, 2026 15:43
….11)

Co-Authored-By: mish@e2b.dev <mish@e2b.dev>
Co-Authored-By: mish@e2b.dev <mish@e2b.dev>
@mishushakov
mishushakov marked this pull request as ready for review October 28, 2026 19:52
@mishushakov
mishushakov self-requested a review as a code owner October 28, 2026 19:52
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-28T19:54:15.807483Z fff21ee Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Devin Review

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code review found no issues

No high-confidence issues detected in this change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant