Skip to content

build(deps): consolidate dependency updates#245

Merged
julesbertrand merged 4 commits into
developfrom
build/consolidate-dependency-updates
Jun 15, 2026
Merged

build(deps): consolidate dependency updates#245
julesbertrand merged 4 commits into
developfrom
build/consolidate-dependency-updates

Conversation

@julesbertrand

@julesbertrand julesbertrand commented Jun 15, 2026

Copy link
Copy Markdown
Collaborator

Description

Consolidate all open dependabot PRs into a single update. Widens version constraints for multiple dependencies and bumps the python-semantic-release GitHub Action.

Dependency Before After Latest
typer >=0.12,<0.13 >=0.12,<0.16 0.15.3
rich >=13.5,<14.0 >=13.5,<16.0 15.0.0
pydantic-settings >=2.0,<2.9.0 >=2.0,<3.0 2.14.1
tomlkit >=0.12,<0.14 >=0.12,<0.16 0.15.0
nbstripout (dev) >=0.7,<0.8 >=0.7,<0.10 0.9.1
python-semantic-release (action) v9.11.0 v10.0.2 v10.5.3

Note: click stays at <8.2 because typer 0.15.x is incompatible with click >=8.2 (Parameter.make_metavar() signature change).

Note on PR #237 (actions/cache): stale — workflows were migrated to uv in #243 and no longer use actions/cache. Can be closed.

Note on python-semantic-release v10: our usage is minimal (github_token only), so the upgrade is transparent. The main v10 breaking change (root_options removal) doesn't affect us.

Related Issue

Supersedes dependabot PRs #223, #230, #237, #238, #240.

Type of Change

  • 🚀 New feature (non-breaking change which adds functionality)
  • 🔧 Bug fix (non-breaking change which fixes an issue)
  • 🥂 Improvement (non-breaking change which improves an existing feature)
  • 🔐 Security fix
  • ⚙️ CI / CD update
  • 📚 Examples / docs / tutorials / dependencies update
  • 💥 Breaking change (fix or feature that would cause existing functionality to change)

Checklist

  • I've read the CONTRIBUTING.md guide.
  • I've updated the code style using make format-code.
  • I've written tests for all new methods and classes that I created.
  • I've written the docstring in Google format for all the methods and classes that I used.
  • If my change requires a change to docs, I have updated the documentation accordingly.

…tion

Widen version constraints for typer (<0.16), click (<9.0), rich (<16.0),
pydantic-settings (<3.0), tomlkit (<0.16), nbstripout (<0.10), and bump
python-semantic-release GitHub Action from v9.11.0 to v10.0.2.

Supersedes dependabot PRs #223, #230, #237, #238, #240.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the dependency version ranges in pyproject.toml for several packages, including typer, click, rich, pydantic-settings, tomlkit, and nbstripout, allowing the project to use newer versions of these libraries. There are no review comments, and I have no feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

@github-actions

Copy link
Copy Markdown

Preparing review...

typer 0.15.x is incompatible with click >=8.2 due to a breaking change
in Parameter.make_metavar() signature.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Comment thread .github/workflows/release.yaml Fixed
julesbertrand and others added 2 commits June 15, 2026 13:54
Fixes CodeQL warning about unpinned 3rd party action.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The new typer version reorders commands in the generated docs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@julesbertrand julesbertrand merged commit ce93b4c into develop Jun 15, 2026
12 checks passed
@julesbertrand julesbertrand deleted the build/consolidate-dependency-updates branch June 15, 2026 11:59
@julesbertrand julesbertrand mentioned this pull request Jun 15, 2026
10 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants