From 8c63406126390c4f93e77b9d06b12dea62cf047f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 13 Jun 2026 09:24:51 +0000 Subject: [PATCH 1/6] build(deps): bump github/codeql-action from 3 to 4 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3...v4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 95d720f..14a2206 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -38,12 +38,12 @@ jobs: run: uv sync --all-extras --dev - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: ${{ matrix.language }} queries: security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 with: category: "/language:${{ matrix.language }}" From f21b090b563ed05afc6335d4246e0f28246ce6d6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 13 Jun 2026 09:24:55 +0000 Subject: [PATCH 2/6] build(deps): bump ruff from 0.15.16 to 0.15.17 Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.16 to 0.15.17. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.15.16...0.15.17) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.15.17 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 742196d..9c0d773 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,6 +7,6 @@ pyyaml==6.0.3 questionary==2.1.1 requests==2.34.2 rich==15.0.0 -ruff==0.15.16 +ruff==0.15.17 toml==0.10.2 typer==0.26.7 From 4f679bc90dd9822b45030b5f72e6e1def5327b0d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 13 Jun 2026 09:25:28 +0000 Subject: [PATCH 3/6] build(deps): bump anthropic from 0.105.2 to 0.109.1 Bumps [anthropic](https://github.com/anthropics/anthropic-sdk-python) from 0.105.2 to 0.109.1. - [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.105.2...v0.109.1) --- updated-dependencies: - dependency-name: anthropic dependency-version: 0.109.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 742196d..4bb8798 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ -anthropic==0.105.2 +anthropic==0.109.1 google-genai==2.8.0 jinja2==3.1.6 openai==2.41.0 From 363b8ec39869a888b4d3163f1cb974771cb683dc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 13 Jun 2026 09:25:52 +0000 Subject: [PATCH 4/6] build(deps): bump pre-commit from 4.5.0 to 4.6.0 Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 4.5.0 to 4.6.0. - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](https://github.com/pre-commit/pre-commit/compare/v4.5.0...v4.6.0) --- updated-dependencies: - dependency-name: pre-commit dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 742196d..634c6d1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,7 +2,7 @@ anthropic==0.105.2 google-genai==2.8.0 jinja2==3.1.6 openai==2.41.0 -pre-commit==4.5.0 +pre-commit==4.6.0 pyyaml==6.0.3 questionary==2.1.1 requests==2.34.2 From f007c7c579463b04aef34328f790367c3b5cf7ad Mon Sep 17 00:00:00 2001 From: S4NKALP Date: Sat, 13 Jun 2026 15:11:43 +0545 Subject: [PATCH 5/6] chore(.github/workflows):switch fail-on-scopes from changes to direct --- .github/workflows/dependency-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 9175abc..2ca9706 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -19,7 +19,7 @@ jobs: uses: actions/dependency-review-action@v4 with: fail-on-severity: high - fail-on-scopes: changes + fail-on-scopes: direct license-check: true # Project is GPL-3.0-or-later; flag licenses that would taint it. deny-licenses: AGPL-1.0-only, AGPL-1.0-or-later, AGPL-3.0-only, AGPL-3.0-or-later, SSPL-1.0, BUSL-1.1 From 9e6c84679097554e36f1b90bb5cb11ec41637d96 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 13 Jun 2026 09:28:12 +0000 Subject: [PATCH 6/6] build(deps): bump actions/dependency-review-action from 4 to 5 Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/dependency-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 2ca9706..7957bb4 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -16,7 +16,7 @@ jobs: - uses: actions/checkout@v6 - name: Dependency Review - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v5 with: fail-on-severity: high fail-on-scopes: direct