chore(deps): bump the gha group across 1 directory with 6 updates #3197
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
the
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Join our Discord community for assistance with any issues or questions. CodeRabbit Commands (Invoked using PR/Issue comments)Type Other keywords and placeholders
CodeRabbit Configuration File (
|
![ellipsis-dev[bot]](https://avatars.githubusercontent.com/in/64358?s=60&v=4){kind=small}
There was a problem hiding this comment.
Important
Looks good to me! 👍
Reviewed everything up to 7e9f121 in 1 minute and 55 seconds. Click for details.
- Reviewed
30lines of code in1files - Skipped
1files when reviewing. - Skipped posting
2draft comments. View those below. - Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. packages/opentelemetry-instrumentation-replicate/pyproject.toml:37
- Draft comment:
vcrpy: The current version constraint allows versions from 6.0.1 up to but not including 8.0.0. Since the update targets v7.0.0 changes, consider setting the lower bound to 7.0.0 to enforce use of the new major version. - Reason this comment was not posted:
Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 10% vs. threshold = 50% The comment makes an assumption about targeting v7.0.0 changes without any evidence. The actual change in the diff is just widening the version constraint to allow newer versions while maintaining backward compatibility. There's no indication that v7.0.0 features are specifically needed. This seems like speculation. Maybe there's documentation or commit history that shows v7.0.0 features are needed that I can't see. Maybe the wider version range could cause compatibility issues. Without clear evidence that v7.0.0 features are required, suggesting to restrict to >= 7.0.0 could unnecessarily break compatibility with working 6.x versions. The comment makes speculative assumptions about version requirements without evidence. It should be deleted.
2. packages/opentelemetry-instrumentation-replicate/pyproject.toml:40
- Draft comment:
replicate: The dependency version range was widened to <1.1.0 but the lower bound remains at 0.23.1. If the instrumentation is meant to work with replicate 1.x (e.g. 1.0.7), update the lower bound to at least 1.0.0 to avoid accidental usage of incompatible older versions. - Reason this comment was not posted:
Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 20% vs. threshold = 50% The comment raises a valid concern about version compatibility. If the package now supports replicate 1.x versions (as evidenced by the upper bound of 1.1.0), it's reasonable to question whether older 0.x versions would still be compatible. However, without seeing the actual instrumentation code or knowing the breaking changes between replicate 0.x and 1.x, we can't be certain that older versions are incompatible. I don't have concrete evidence that versions 0.23.1 through 0.99.x are actually incompatible. The comment is somewhat speculative. While the concern is logical, we should follow our rule of requiring strong evidence before keeping a comment. This seems more like a "what if" scenario. The comment should be deleted as it's speculative about version compatibility without concrete evidence of incompatibility.
Workflow ID: wflow_v4DPFlhFvVjLdKA3
You can customize 
dependabot
bot
force-pushed
the
dependabot/pip/packages/opentelemetry-instrumentation-replicate/gha-4189badffa
branch
2 times, most recently
from
0701332 to
74e6476
Compare
dependabot
bot
force-pushed
the
dependabot/pip/packages/opentelemetry-instrumentation-replicate/gha-4189badffa
branch
6 times, most recently
from
b64fe13 to
3b1d233
Compare
Bumps the gha group with 6 updates in the /packages/opentelemetry-instrumentation-replicate directory: | Package | From | To | | --- | --- | --- | | opentelemetry-semantic-conventions-ai | `0.4.11` | `0.4.12` | | [flake8](https://github.com/pycqa/flake8) | `7.0.0` | `7.3.0` | | [pytest](https://github.com/pytest-dev/pytest) | `8.2.2` | `8.4.1` | | [vcrpy](https://github.com/kevin1024/vcrpy) | `6.0.1` | `7.0.0` | | [pytest-recording](https://github.com/kiwicom/pytest-recording) | `0.13.2` | `0.13.4` | | [replicate](https://github.com/replicate/replicate-python) | `0.26.1` | `1.0.7` | Updates `opentelemetry-semantic-conventions-ai` from 0.4.11 to 0.4.12 Updates `flake8` from 7.0.0 to 7.3.0 - [Commits](PyCQA/flake8@7.0.0...7.3.0) Updates `pytest` from 8.2.2 to 8.4.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.2.2...8.4.1) Updates `vcrpy` from 6.0.1 to 7.0.0 - [Release notes](https://github.com/kevin1024/vcrpy/releases) - [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst) - [Commits](kevin1024/vcrpy@v6.0.1...v7.0.0) Updates `pytest-recording` from 0.13.2 to 0.13.4 - [Release notes](https://github.com/kiwicom/pytest-recording/releases) - [Changelog](https://github.com/kiwicom/pytest-recording/blob/master/docs/changelog.rst) - [Commits](kiwicom/pytest-recording@v0.13.2...v0.13.4) Updates `replicate` from 0.26.1 to 1.0.7 - [Release notes](https://github.com/replicate/replicate-python/releases) - [Commits](replicate/replicate-python@0.26.1...1.0.7) --- updated-dependencies: - dependency-name: opentelemetry-semantic-conventions-ai dependency-version: 0.4.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha - dependency-name: flake8 dependency-version: 7.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: pytest dependency-version: 8.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: vcrpy dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: gha - dependency-name: pytest-recording dependency-version: 0.13.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: gha - dependency-name: replicate dependency-version: 1.0.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: gha ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/pip/packages/opentelemetry-instrumentation-replicate/gha-4189badffa
branch
from
3b1d233 to
7f4b008
Compare
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/pip/packages/opentelemetry-instrumentation-replicate/gha-4189badffa
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the gha group with 6 updates in the /packages/opentelemetry-instrumentation-replicate directory:
0.4.110.4.127.0.07.3.08.2.28.4.16.0.17.0.00.13.20.13.40.26.11.0.7Updates
opentelemetry-semantic-conventions-aifrom 0.4.11 to 0.4.12Updates
flake8from 7.0.0 to 7.3.0Commits
c48217eRelease 7.3.0f9e0f33Merge pull request #1986 from PyCQA/document-f5426bcdb62document F54270a15b8Merge pull request #1985 from PyCQA/upgrade-deps4941a3eupgrade pyflakes / pycodestyle23e4005Merge pull request #1983 from PyCQA/py314019424badd support for t-strings6b6f3d5Merge pull request #1980 from PyCQA/asottile-patch-18dfa669add rtd sphinx configce34111Merge pull request #1976 from PyCQA/document-f824Updates
pytestfrom 8.2.2 to 8.4.1Release notes
Sourced from pytest's releases.
... (truncated)
Commits
8d99211Prepare release version 8.4.15dc5880docs: update pytest.ini addopts example to use separate -p entries (#13529) (...d0c7ed0Reintroduce PytestReturnNotNoneWarning (#13495) (#13527)a1b3a78Fix compatibility with Twisted 25 (#13502) (#13531)4c161abpytester: avoid unraisableexception gc collects in inline runs to speed up te...a86ee09Fix typo in parametrize.rst (#13514) (#13516)1a0581bRemove outdated warning about faulthandler_timeout on Windows (#13492) (#13493)4e631a7Merge pull request #13486 from hosmir/fixtypo (#13487)b49745efix: support TerminalReporter.isatty being called (#13462) (#13483)cc5ceedRELEASING: remove pytest mailing list (#13472) (#13473)Updates
vcrpyfrom 6.0.1 to 7.0.0Release notes
Sourced from vcrpy's releases.
Changelog
Sourced from vcrpy's changelog.
... (truncated)
Commits
3278619Release v7.0.03fb62e0fix: correctly handle asyncio.run when loop exists8197865build(deps): update sphinx requirement from <8 to <9be651bdpre-commit: Autoupdatea6698edFix aiohttp tests48d0a2eFixed missingversion_stringattribute when used with urllib3>=2.3.05b858b1Fix lintc8d99a9Fix ruff configurationce27c63Merge pull request #736 from kevin1024/drop-python38ab8944dDrop python 3.8 supportUpdates
pytest-recordingfrom 0.13.2 to 0.13.4Release notes
Sourced from pytest-recording's releases.
Changelog
Sourced from pytest-recording's changelog.
Commits
c2d2db7chore: Release 0.13.4cf919c9test: Run tests on Windowsb8b45b7fix: Use fallback for max filename length on Windows8a7e19fdocs: Update README.rst3ad7910chore: Release 0.13.39a6e12cdocs: Add a note for package maintainersa70532bchore: Revert "test: Disable pretty plugin in pytest"6b84832chore(deps): update codecov/codecov-action action to v5.4.2460a7f9test: Add long_cassette_name test9822a50fix: Checkdefault_cassetteto prevent it from being too long.Updates
replicatefrom 0.26.1 to 1.0.7Release notes
Sourced from replicate's releases.
... (truncated)
Commits
42ba2f7Release 1.0.736c95a8format and lint48acf51Update replicate/client.py68551cfLinting302f5daMake scope lookup case insensitive52c373cDocument alternative authenticationab9982fSupport getting REPLICATE_API_TOKEN from cog context9f8d753bump to 1.0.6f5d53cdbump patch to 1.0.5804fd1dfix(package): include py.typed marker fileDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsImportant
Update dependencies in
pyproject.tomlforopentelemetry-instrumentation-replicate, includingflake8,vcrpy, andreplicate.opentelemetry-semantic-conventions-aifrom0.4.11to0.4.12.flake8from7.0.0to7.3.0.vcrpyfrom6.0.1to7.0.0.replicatefrom0.26.1to1.0.7.vcrpyupdated to>=6.0.1,<8.0.0.replicateupdated to>=0.23.1,<1.1.0.This description was created by
for 7e9f121. You can customize this summary. It will automatically update as commits are pushed.