Skip to content

Bump tornado from 6.5.8 to 6.5.10 - #1424

Merged
rossant merged 3 commits into
masterfrom
dependabot/uv/tornado-6.5.9
Oct 8, 2026
Merged

rossant merged 3 commits into
masterfrom
dependabot/uv/tornado-6.5.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026 •

Copy link
Copy Markdown
Contributor

Update the locked Tornado dependency from 6.5.8 to 6.5.10.

6.5.9 contains security fixes, but also introduced a Jupyter compatibility regression. 6.5.10 retains those fixes and restores compatibility. Use 6.5.10 for phy's Qt console and IPython/Jupyter dependencies.

The original macOS/Python 3.12 failure was in a timing-dependent debouncer assertion. #1425 corrects that test and an application-creation test; this branch includes the updated master with those corrections. Relative to current master, this PR changes only Tornado's lockfile entry.

Validation: frozen uv sync, lint, formatting, all 16 Qt utility tests, and uv build passed locally. The integrated phy 2.2 workflow suite also passed against Tornado 6.5.10 and phylib 2.7.1 (495 core/GUI and 155 application tests, one existing visual benchmark skipped). Fresh cross-platform CI is required before merge.

Execution — 8 October 2026

The refreshed full CI matrix, documentation, spelling, and package build passed on 1a478663. Merged Tornado 6.5.10 as d198375d.

Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.5.8 to 6.5.9.
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](tornadoweb/tornado@v6.5.8...v6.5.9)

---
updated-dependencies:
- dependency-name: tornado
  dependency-version: 6.5.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 7, 2026
@rossant rossant changed the title Bump tornado from 6.5.8 to 6.5.9 Bump tornado from 6.5.8 to 6.5.10 Oct 8, 2026
@rossant
rossant merged commit d198375 into master Oct 8, 2026
12 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/tornado-6.5.9 branch October 8, 2026 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant