Skip to content

deps(pip): Bump rich from 14.2.0 to 15.0.0 in the pip-major group across 1 directory#73

Closed
dependabot[bot] wants to merge 31 commits intomainfrom
dependabot/pip/pip-major-383ae37d1a
Closed

deps(pip): Bump rich from 14.2.0 to 15.0.0 in the pip-major group across 1 directory#73
dependabot[bot] wants to merge 31 commits intomainfrom
dependabot/pip/pip-major-383ae37d1a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 12, 2026

Bumps the pip-major group with 1 update in the / directory: rich.

Updates rich from 14.2.0 to 15.0.0

Release notes

Sourced from rich's releases.

The So Long 3.8 Release

A few fixes. The major version bump is to honor the passing of 3.8 support which reached its EOL in October 7, 2024

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

The Faster Startup Release

No new features in this release, but there should be improved startup time for Rich apps, and potentially improved runtime if you have a lot of links.

[14.3.4] - 2026-04-11

Changed

The infinite Release

Fixed a infinite loop in split_graphemes

[14.3.3] - 2026-02-19

Fixed

The ZWJy release

A fix for cell_len edge cases

[14.3.2] - 2026-02-01

Fixed

The Nerdy Fix release

Fixed issue with characters outside of unicode range reporting 0 cell size

[14.3.1] - 2026-01-24

... (truncated)

Changelog

Sourced from rich's changelog.

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

[14.3.4] - 2026-04-11

Changed

[14.3.3] - 2026-02-19

Fixed

[14.3.2] - 2026-02-01

Fixed

[14.3.1] - 2026-01-24

Fixed

[14.3.0] - 2026-01-24

Fixed

Added

... (truncated)

Commits

* fix: remediate scorecard security findings

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: address PR 37 CI failures

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: restore fuzz dependency hash pinning

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: validate official marketplace source objects

* test(scanner): update marketplace fixture for official source shape

* test(scanner): cover official marketplace source validation

* fix: harden marketplace validation

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: remediate scanner security alerts

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: address PR review feedback

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: restore publishable cisco extra metadata

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: derive cisco action install from package extras

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: support multi-plugin marketplace repos

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: handle remote marketplace entries cleanly

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: publish action repo releases automatically

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: address action release review feedback

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: detect untracked action bundle files

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: make action release publication rerunnable

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* docs: tighten action marketplace copy

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: authenticate action repo pushes

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* style: normalize action repo variable reference

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: use Cisco scanner 2.0.8 in action

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: bump Cisco scanner to 2.0.8

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: harden action package provenance

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: avoid heredoc break in action install

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: standardize action pip invocations

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden workflow shell guards

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: keep action release sync on main pushes

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add action install sources and container image

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden action install and docker path

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: harden scorecard release signals

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: refine hardened container layout

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden release assets and container entrypoint

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add trust provenance scoring

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: restore ci command resolution

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: address trust provenance review feedback

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: tighten trust provenance validation

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* docs: use universal logo in README

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* test: align action readme branding assertion

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: align trust scores to published hcs patterns

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* style: format trust scoring modules

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: fail trust signals closed without evidence

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: tighten plugin trust adapter applicability

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add multi-ecosystem plugin scanner adapters

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* style: apply ruff formatting to ecosystem scanner modules

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: resolve ecosystem review findings for repository auto scan

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* chore: bump scanner to v2.0.0

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: address follow-up ecosystem review regressions

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* style: apply ruff format after ecosystem fixes

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: mark mixed marketplace scans as repository scope

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* style: reformat scanner after repository scope fix

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* feat: dual-publish plugin-scanner and refresh ecosystem docs

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: restore build and frozen lock after package rename

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: pin codeql source root for renamed repository path

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: stabilize codeql finalize path after repo rename

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* chore: rerun checks after code scanning default setup reset

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: address mixed-scan review gaps and namespace docs

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: migrate action identity to ai plugin scanner

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: move action output defaults into runner

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: shorten canonical action slug

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: gate action tag publication on bundle changes

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: derive action tags from both published repos

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: avoid action release tag collisions

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: ignore peeled action tag refs

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: preserve action outputs on failure paths

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: keep action release tags aligned across repos

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* feat: improve guard cli diagnostics

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: align guard files with ci formatting

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: use active interpreter for claude hooks

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: preserve empty hook override state

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: tighten guard cli behavior

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: validate scoped guard policies

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: tighten guard artifact tracking

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard policy state

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: scope guard adapter artifact ids

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: preserve blocked guard baselines

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard runtime fallbacks

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard command validation

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard cli fallbacks

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: migrate action identity to ai plugin scanner

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: move action output defaults into runner

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: shorten canonical action slug

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: gate action tag publication on bundle changes

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: derive action tags from both published repos

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: avoid action release tag collisions

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: ignore peeled action tag refs

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: preserve action outputs on failure paths

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: keep action release tags aligned across repos

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* feat: improve guard cli diagnostics

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: align guard files with ci formatting

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: use active interpreter for claude hooks

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: preserve empty hook override state

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: tighten guard cli behavior

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: validate scoped guard policies

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: tighten guard artifact tracking

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard policy state

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: scope guard adapter artifact ids

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: preserve blocked guard baselines

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard runtime fallbacks

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard command validation

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard cli fallbacks

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* feat: ship local-first guard runtime

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: format guard cli sources

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: keep guard home separate from harness home

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: simplify hol guard package and cli

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* style: format guard render output

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: support guard entrypoints on windows

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: require guard subcommands

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: finish guard product flow

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: accept default action overrides

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* docs: simplify guard readme

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* docs: trim readme guard alias mention

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* docs: align readme compatibility defaults

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add guard approval center

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden approval center html

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: validate workspace approval scope

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add guard approval center

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden approval center html

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: validate workspace approval scope

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* feat: add local guard approval center

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard approval center

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: persist successful headless guard runs

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: reject spoofed guard daemon origins

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* feat: rebuild local approval center UX

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: trim approval dashboard diff

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* feat: redesign guard approval center

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* feat: update guard flow

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard policy resolution

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: harden guard approval backend

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* chore: expand dependabot coverage

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: address dependabot review feedback

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: make dependabot lockfile sync write-capable

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: avoid privileged dependency installs in lock sync

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: disable source builds in dependabot lock sync

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 12, 2026

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 12, 2026
@kilo-code-bot
Copy link
Copy Markdown

kilo-code-bot bot commented Apr 12, 2026

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

Severity Count
CRITICAL 0
WARNING 0
SUGGESTION 0
Files Reviewed (1 file)
  • docker-requirements.txt - Dependency version bump only (no code changes)

Note: Incremental review from previous commit. This is a Dependabot dependency update bumping rich from 14.2.0 to 15.0.0. Compatible with the project's Python >=3.10 requirement (rich 15.0.0 only dropped Python 3.8 support).


Reviewed by minimax-m2.5-20260211 · 291,728 tokens

Copy link
Copy Markdown
Member

@kantorcodes kantorcodes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed dependency update; scope and change are appropriate.

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.8.0 to 8.0.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@d0cc045...cec2083)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
kantorcodes
kantorcodes previously approved these changes Apr 12, 2026
dependabot bot and others added 2 commits April 12, 2026 07:28
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.7 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@51f7732...c10b806)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: make cisco scanner dependency required

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* chore: keep action bundle changes out of scanner PR

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix: address review feedback for required cisco dependency

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* test: align expected fixture scores with default cisco checks

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
@dependabot dependabot bot changed the title deps(pip): Bump rich from 14.2.0 to 15.0.0 in the pip-major group deps(pip): Bump rich from 14.2.0 to 15.0.0 in the pip-major group across 1 directory Apr 12, 2026
Bumps the pip-major group with 1 update: [rich](https://github.com/Textualize/rich).


Updates `rich` from 14.2.0 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.2.0...v15.0.0)

---
updated-dependencies:
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/pip-major-383ae37d1a branch from e007252 to 1005f2b Compare April 12, 2026 14:33
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1005f2bd1d

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

rich==14.2.0 \
--hash=sha256:73ff50c7c0c1c77c8243079283f4edb376f0f6442433aecb8ce7e6d0b92d1fe4 \
--hash=sha256:76bc51fe2e57d2b1be1f96c524b890b816e334ab4c1e45888799bfaab0021edd
rich==15.0.0 \
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Update pinned-version test when bumping rich

This version bump introduces a test regression because tests/test_action_bundle.py still hard-codes "rich==14.2.0" in test_container_files_exist_for_enterprise_distribution; with this change, pytest -q tests/test_action_bundle.py::test_container_files_exist_for_enterprise_distribution now fails at that assertion. The dependency update should include the corresponding test expectation update (or relax the assertion) so CI stays green for this commit.

Useful? React with 👍 / 👎.

@kantorcodes kantorcodes dismissed their stale review April 12, 2026 15:55

The merge-base changed after approval.

@kantorcodes kantorcodes deleted the dependabot/pip/pip-major-383ae37d1a branch April 12, 2026 15:58
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 12, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant