deps(pip): Bump rich from 14.2.0 to 15.0.0 in the pip-major group across 1 directory#73
deps(pip): Bump rich from 14.2.0 to 15.0.0 in the pip-major group across 1 directory#73dependabot[bot] wants to merge 31 commits intomainfrom
Conversation
* fix: remediate scorecard security findings Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: address PR 37 CI failures Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: restore fuzz dependency hash pinning Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: validate official marketplace source objects * test(scanner): update marketplace fixture for official source shape * test(scanner): cover official marketplace source validation * fix: harden marketplace validation Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: remediate scanner security alerts Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: address PR review feedback Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: restore publishable cisco extra metadata Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: derive cisco action install from package extras Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: support multi-plugin marketplace repos Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: handle remote marketplace entries cleanly Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: publish action repo releases automatically Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: address action release review feedback Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: detect untracked action bundle files Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: make action release publication rerunnable Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * docs: tighten action marketplace copy Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: authenticate action repo pushes Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * style: normalize action repo variable reference Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: use Cisco scanner 2.0.8 in action Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: bump Cisco scanner to 2.0.8 Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: harden action package provenance Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: avoid heredoc break in action install Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: standardize action pip invocations Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden workflow shell guards Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: keep action release sync on main pushes Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add action install sources and container image Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden action install and docker path Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: harden scorecard release signals Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: refine hardened container layout Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden release assets and container entrypoint Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add trust provenance scoring Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: restore ci command resolution Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: address trust provenance review feedback Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: tighten trust provenance validation Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* docs: use universal logo in README Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * test: align action readme branding assertion Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: align trust scores to published hcs patterns Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * style: format trust scoring modules Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: fail trust signals closed without evidence Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: tighten plugin trust adapter applicability Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add multi-ecosystem plugin scanner adapters Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * style: apply ruff formatting to ecosystem scanner modules Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: resolve ecosystem review findings for repository auto scan Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * chore: bump scanner to v2.0.0 Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: address follow-up ecosystem review regressions Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * style: apply ruff format after ecosystem fixes Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: mark mixed marketplace scans as repository scope Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * style: reformat scanner after repository scope fix Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * feat: dual-publish plugin-scanner and refresh ecosystem docs Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: restore build and frozen lock after package rename Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: pin codeql source root for renamed repository path Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: stabilize codeql finalize path after repo rename Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * chore: rerun checks after code scanning default setup reset Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: address mixed-scan review gaps and namespace docs Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: migrate action identity to ai plugin scanner Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: move action output defaults into runner Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: shorten canonical action slug Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: gate action tag publication on bundle changes Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: derive action tags from both published repos Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: avoid action release tag collisions Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: ignore peeled action tag refs Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: preserve action outputs on failure paths Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: keep action release tags aligned across repos Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * feat: improve guard cli diagnostics Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: align guard files with ci formatting Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: use active interpreter for claude hooks Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: preserve empty hook override state Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: tighten guard cli behavior Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: validate scoped guard policies Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: tighten guard artifact tracking Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard policy state Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: scope guard adapter artifact ids Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: preserve blocked guard baselines Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard runtime fallbacks Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard command validation Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard cli fallbacks Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: migrate action identity to ai plugin scanner Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: move action output defaults into runner Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: shorten canonical action slug Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: gate action tag publication on bundle changes Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: derive action tags from both published repos Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: avoid action release tag collisions Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: ignore peeled action tag refs Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: preserve action outputs on failure paths Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: keep action release tags aligned across repos Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * feat: improve guard cli diagnostics Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: align guard files with ci formatting Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: use active interpreter for claude hooks Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: preserve empty hook override state Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: tighten guard cli behavior Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: validate scoped guard policies Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: tighten guard artifact tracking Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard policy state Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: scope guard adapter artifact ids Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: preserve blocked guard baselines Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard runtime fallbacks Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard command validation Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard cli fallbacks Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * feat: ship local-first guard runtime Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: format guard cli sources Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: keep guard home separate from harness home Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: simplify hol guard package and cli Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * style: format guard render output Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: support guard entrypoints on windows Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: require guard subcommands Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: finish guard product flow Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: accept default action overrides Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* docs: simplify guard readme Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * docs: trim readme guard alias mention Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * docs: align readme compatibility defaults Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add guard approval center Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden approval center html Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: validate workspace approval scope Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* feat: add guard approval center Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden approval center html Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: validate workspace approval scope Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * feat: add local guard approval center Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard approval center Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: persist successful headless guard runs Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: reject spoofed guard daemon origins Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * feat: rebuild local approval center UX Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: trim approval dashboard diff Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * feat: redesign guard approval center Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * feat: update guard flow Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard policy resolution Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: harden guard approval backend Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* chore: expand dependabot coverage Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: address dependabot review feedback Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: make dependabot lockfile sync write-capable Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: avoid privileged dependency installs in lock sync Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: disable source builds in dependabot lock sync Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Code Review SummaryStatus: No Issues Found | Recommendation: Merge Overview
Files Reviewed (1 file)
Note: Incremental review from previous commit. This is a Dependabot dependency update bumping Reviewed by minimax-m2.5-20260211 · 291,728 tokens |
kantorcodes
left a comment
There was a problem hiding this comment.
Reviewed dependency update; scope and change are appropriate.
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.8.0 to 8.0.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@d0cc045...cec2083) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.7 to 4.35.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@51f7732...c10b806) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
* fix: make cisco scanner dependency required Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * chore: keep action bundle changes out of scanner PR Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * fix: address review feedback for required cisco dependency Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> * test: align expected fixture scores with default cisco checks Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com> --------- Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Bumps the pip-major group with 1 update: [rich](https://github.com/Textualize/rich). Updates `rich` from 14.2.0 to 15.0.0 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.2.0...v15.0.0) --- updated-dependencies: - dependency-name: rich dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-major ... Signed-off-by: dependabot[bot] <support@github.com>
e007252 to
1005f2b
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 1005f2bd1d
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| rich==14.2.0 \ | ||
| --hash=sha256:73ff50c7c0c1c77c8243079283f4edb376f0f6442433aecb8ce7e6d0b92d1fe4 \ | ||
| --hash=sha256:76bc51fe2e57d2b1be1f96c524b890b816e334ab4c1e45888799bfaab0021edd | ||
| rich==15.0.0 \ |
There was a problem hiding this comment.
Update pinned-version test when bumping rich
This version bump introduces a test regression because tests/test_action_bundle.py still hard-codes "rich==14.2.0" in test_container_files_exist_for_enterprise_distribution; with this change, pytest -q tests/test_action_bundle.py::test_container_files_exist_for_enterprise_distribution now fails at that assertion. The dependency update should include the corresponding test expectation update (or relax the assertion) so CI stays green for this commit.
Useful? React with 👍 / 👎.
The merge-base changed after approval.
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
Bumps the pip-major group with 1 update in the / directory: rich.
Updates
richfrom 14.2.0 to 15.0.0Release notes
Sourced from rich's releases.
... (truncated)
Changelog
Sourced from rich's changelog.
... (truncated)
Commits
6ac483ccorrection458a910Merge pull request #4080 from Textualize/bump150082e06e0changelogd6556bcbump to 15.0.0ffe2edcMerge pull request #4079 from Textualize/inline-table-codecf3b5a1changelog77f0edbremove comments7ef2d05fix inline code in table cells19c67b9Merge pull request #4077 from Textualize/isattry494b795changelog