Skip to content

chore(deps): bump the gha group across 1 directory with 12 updates#3332

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5
Closed

chore(deps): bump the gha group across 1 directory with 12 updates#3332
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 22, 2025

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Important

Bump versions for posthog, flake8, pytest-sugar, pytest-asyncio, and anthropic in pyproject.toml.

  • Dependencies:
    • Bump posthog version to >3.0.2,<7.
    • Update flake8 to 7.3.0 and pytest-sugar to 1.1.0 in dev dependencies.
    • Adjust pytest-asyncio to >=0.23.7,<1.2.0 and anthropic to >=0.25.2,<0.65.0 in test dependencies.

This description was created by Ellipsis for 2408bf5. You can customize this summary. It will automatically update as commits are pushed.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 22, 2025
@coderabbitai
Copy link

coderabbitai bot commented Aug 22, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Contributor

@ellipsis-dev ellipsis-dev bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important

Looks good to me! 👍

Reviewed everything up to 2408bf5 in 49 seconds. Click for details.
  • Reviewed 33 lines of code in 1 files
  • Skipped 1 files when reviewing.
  • Skipped posting 5 draft comments. View those below.
  • Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. packages/traceloop-sdk/pyproject.toml:72
  • Draft comment:
    Posthog version range updated to '>3.0.2,<7'. Please verify that any breaking changes introduced in posthog v4–6 are handled appropriately.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is asking the PR author to verify that breaking changes in a dependency update are handled, which violates the rule against asking the author to ensure behavior is intended or tested. It does not provide a specific suggestion or point out a specific issue.
2. packages/traceloop-sdk/pyproject.toml:78
  • Draft comment:
    flake8 updated from 7.0.0 to 7.3.0. Confirm that existing custom configurations and plugins remain compatible.
  • Reason this comment was not posted:
    Confidence changes required: 33% <= threshold 50% None
3. packages/traceloop-sdk/pyproject.toml:80
  • Draft comment:
    pytest-sugar bumped to 1.1.0. Review release notes to ensure no changes in behavior affect test output.
  • Reason this comment was not posted:
    Confidence changes required: 33% <= threshold 50% None
4. packages/traceloop-sdk/pyproject.toml:87
  • Draft comment:
    pytest-asyncio version range changed from '^0.23.7' to '>=0.23.7,<1.2.0'. Ensure your test suite remains compatible with versions up to 1.2.0.
  • Reason this comment was not posted:
    Confidence changes required: 33% <= threshold 50% None
5. packages/traceloop-sdk/pyproject.toml:88
  • Draft comment:
    Anthropic dependency range is now '>=0.25.2,<0.65.0' (expanded from '^0.25.2'). Validate that updates in anthropic versions beyond 0.26 don’t introduce breaking changes.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is about a dependency change, specifically the version range of the 'Anthropic' dependency. The comment suggests validating updates in versions beyond 0.26 to ensure they don't introduce breaking changes. According to the rules, comments on dependency changes or library versions that I don't recognize should be ignored. Therefore, this comment should be removed.

Workflow ID: wflow_5o77ZzZ99OEIlWaj

You can customize Ellipsis by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.

@dependabot dependabot bot force-pushed the dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5 branch 4 times, most recently from 5ea37dd to c4c3032 Compare August 24, 2025 17:09
@dependabot dependabot bot force-pushed the dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5 branch 2 times, most recently from ace4811 to 4e75885 Compare August 29, 2025 18:40
@dependabot dependabot bot force-pushed the dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5 branch 3 times, most recently from a9006b3 to d46db3f Compare September 14, 2025 12:16
@dependabot dependabot bot force-pushed the dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5 branch 2 times, most recently from f52a628 to 329b57b Compare September 22, 2025 02:15
@dependabot dependabot bot force-pushed the dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5 branch from 329b57b to f534094 Compare October 6, 2025 02:15
@dependabot dependabot bot force-pushed the dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5 branch 2 times, most recently from d02fa19 to b09c5e3 Compare November 3, 2025 02:15
@dependabot dependabot bot force-pushed the dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5 branch from b09c5e3 to 0462c9d Compare November 10, 2025 02:15
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 17, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.11.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: deprecated
  dependency-version: 1.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha
- dependency-name: posthog
  dependency-version: 6.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha
- dependency-name: aiohttp
  dependency-version: 3.12.15
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: pytest
  dependency-version: 8.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: pytest-sugar
  dependency-version: 1.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: openai
  dependency-version: 1.101.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: pytest-recording
  dependency-version: 0.13.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: gha
- dependency-name: pytest-asyncio
  dependency-version: 1.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: gha
- dependency-name: anthropic
  dependency-version: 0.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: pandas
  dependency-version: 2.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: gha
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5 branch from 0462c9d to 3a4882a Compare November 24, 2025 02:13
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 1, 2025
@dependabot dependabot bot deleted the dependabot/pip/packages/traceloop-sdk/gha-1560ecc4d5 branch December 1, 2025 02:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants