Skip to content

Bump the pip group across 4 directories with 1 update - #5270

Merged
Jay W (JayDoubleu) merged 2 commits into
mainfrom
dependabot/pip/api_app/pip-d0209dc533
Oct 20, 2026
Merged

Jay W (JayDoubleu) merged 2 commits into
mainfrom
dependabot/pip/api_app/pip-d0209dc533

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip group with 1 update in the /api_app directory: aiohttp.
Bumps the pip group with 1 update in the /cli directory: aiohttp.
Bumps the pip group with 1 update in the /resource_processor/tests_rp directory: aiohttp.
Bumps the pip group with 1 update in the /resource_processor/vmss_porter directory: aiohttp.

Updates aiohttp from 3.14.3 to 3.14.4
Updates aiohttp from 3.14.3 to 3.14.4
Updates aiohttp from 3.14.3 to 3.14.4
Updates aiohttp from 3.14.3 to 3.14.4

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 20, 2026 09:53
Copilot AI balanced review requested due to automatic review settings October 20, 2026 09:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 20, 2026
@github-actions github-actions Bot added the external PR from an external contributor label Oct 20, 2026
@github-actions

github-actions Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

Unit Test Results

1 176 tests   1 176 ✅  17s ⏱️
    1 suites      0 💤
    1 files        0 ❌

Results for commit 36b5061.

♻️ This comment has been updated with latest results.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The required CLI version increment and Unreleased changelog entry are missing.

2 open issues
What changed in this PR

Updates aiohttp from 3.14.3 to 3.14.4 across Azure TRE’s Python components.

Changes:

  • Updates API and resource processor runtime dependencies.
  • Keeps CLI installation and package dependency pins synchronized.
File Description
resource_processor/​vmss_porter/​requirements.txt Updates the resource processor’s aiohttp pin.
cli/​setup.py Updates the CLI package dependency.
cli/​requirements.txt Aligns the CLI requirements pin.
api_app/​requirements.txt Updates the API’s aiohttp pin.

Review effort: Balanced

Comment thread cli/requirements.txt
Comment thread cli/setup.py
Copilot AI balanced review requested due to automatic review settings October 20, 2026 10:46

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Dependency installation and runtime compatibility remain unverified without executed validation evidence for the PR head.

1 open issue
1 resolved since last review

Review effort: Balanced

@JayDoubleu

Copy link
Copy Markdown
Collaborator

/test 36b5061

@github-actions

Copy link
Copy Markdown

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/39412938588

(in response to this comment from Jay W (@JayDoubleu))

@JayDoubleu
Jay W (JayDoubleu) self-requested a review October 20, 2026 11:10
@JayDoubleu
Jay W (JayDoubleu) merged commit 32bc4c1 into main Oct 20, 2026
16 checks passed
@JayDoubleu
Jay W (JayDoubleu) deleted the dependabot/pip/api_app/pip-d0209dc533 branch October 20, 2026 12:42
@JayDoubleu

Copy link
Copy Markdown
Collaborator

/test-destroy-env

@github-actions

Copy link
Copy Markdown

Destroying PR test environments for refs/pull/5270/merge... (run: https://github.com/microsoft/AzureTRE/actions/runs/39424342904)

@github-actions

Copy link
Copy Markdown

Destroying branch test environments for refs/heads/dependabot/pip/api_app/pip-d0209dc533... (run: https://github.com/microsoft/AzureTRE/actions/runs/39424342904)

@github-actions

Copy link
Copy Markdown

Branch test environment destroy complete for refs/heads/dependabot/pip/api_app/pip-d0209dc533

@github-actions

Copy link
Copy Markdown

PR test environment destroy complete for refs/pull/5270/merge

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file external PR from an external contributor python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants