Skip to content

Addressed wheel vulnerability#699

Merged
genedan merged 1 commit into
mainfrom
dependabot#7
Apr 18, 2026
Merged

Addressed wheel vulnerability#699
genedan merged 1 commit into
mainfrom
dependabot#7

Conversation

@kennethshsu
Copy link
Copy Markdown
Collaborator

@kennethshsu kennethshsu commented Apr 17, 2026

Addressed the dependabot#7 report


Note

Low Risk
Only changes the build-time dependency floor for wheel; runtime/library behavior should be unaffected aside from potential packaging/build compatibility issues on older environments.

Overview
Updates build-system dependency constraints in pyproject.toml by pinning wheel to >=0.46.2 (from unpinned) to address the reported vulnerability.

Reviewed by Cursor Bugbot for commit 21f0d09. Bugbot is set up for automated code reviews on this repo. Configure here.

@kennethshsu kennethshsu changed the title Addressed wheel vulnerbility Addressed wheel vulnerability Apr 17, 2026
@kennethshsu kennethshsu requested a review from genedan April 17, 2026 00:45
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 17, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.08%. Comparing base (999a379) to head (21f0d09).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #699   +/-   ##
=======================================
  Coverage   85.08%   85.08%           
=======================================
  Files          85       85           
  Lines        4896     4896           
  Branches      629      629           
=======================================
  Hits         4166     4166           
  Misses        521      521           
  Partials      209      209           
Flag Coverage Δ
unittests 85.08% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@genedan genedan merged commit 08b9987 into main Apr 18, 2026
13 checks passed
@genedan genedan deleted the dependabot#7 branch April 18, 2026 12:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants