Skip to content

chore(deps): bump filelock and setuptools in uv.lock - #962

Merged
gijzelaerr merged 1 commit into
masterfrom
chore/bump-filelock-setuptools
Oct 28, 2026
Merged

gijzelaerr merged 1 commit into
masterfrom
chore/bump-filelock-setuptools

Conversation

@gijzelaerr

@gijzelaerr gijzelaerr commented Oct 28, 2026 •

Copy link
Copy Markdown
Owner

Bumps vulnerable dev dependencies in uv.lock:

filelock 4.2.1+ requires Python 3.11, so the Python 3.10 resolution only reaches 4.1.0, which is still in the advisory range (<= 4.2.0). The filelock alerts will therefore stay open while Python 3.10 is supported. Both packages are dev/test-only dependencies (tox, virtualenv, build tooling), not runtime dependencies of python-snap7.

Tests and pre-commit pass locally.

🤖 Generated with Claude Code

Resolves the setuptools Dependabot alert (fixed in 84.1.0) and moves
filelock to 4.2.4 on Python 3.11+. filelock 4.2.x requires Python 3.11,
so the Python 3.10 resolution stays on 4.1.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@gijzelaerr
gijzelaerr force-pushed the chore/bump-filelock-setuptools branch from 0ef309f to 26aadbf Compare October 28, 2026 06:48
@gijzelaerr
gijzelaerr enabled auto-merge (squash) October 28, 2026 06:49
@gijzelaerr
gijzelaerr merged commit 6929420 into master Oct 28, 2026
20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant