build(deps): bump rich from 13.7.1 to 15.0.0#16
Conversation
dependabot
Bot
added
the
dependencies
PR SummaryLow Risk Overview This is a dependency-only update; note that Reviewed by Cursor Bugbot for commit 5b8e97d. Bugbot is set up for automated code reviews on this repo. Configure here. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 8cae8cb. Configure here.
| dspy-ai>=3.0.0,<4.0.0 | ||
| typer==0.12.3 | ||
| rich==13.7.1 | ||
| rich==15.0.0 |
There was a problem hiding this comment.
Lock files not updated to match new rich version
High Severity
requirements.txt pins rich==15.0.0 but both requirements.lock and requirements-dev.lock still pin rich==13.7.1. Any environment that installs from the lock files (likely CI and production) will get the old version, making the version bump ineffective and creating a mismatch between declared and actually-installed dependencies.
Reviewed by Cursor Bugbot for commit 8cae8cb. Configure here.
Bumps [rich](https://github.com/Textualize/rich) from 13.7.1 to 15.0.0. - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v13.7.1...v15.0.0) --- updated-dependencies: - dependency-name: rich dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/pip/rich-15.0.0
branch
from
8cae8cb to
5b8e97d
Compare
Consolidates four Dependabot major-bump PRs. Each was individually reviewed against actual usage in the codebase and found low-risk: #13 flask-limiter 3.8.0 -> 4.1.1 Only uses Limiter(key_func=..., default_limits=...) and get_remote_address — both stable across 3.x -> 4.x. Smoke-tested orbit_agent.sms_server import: OK. #15 pre-commit 3.8.0 -> 4.6.0 Requires Python >=3.9; our matrix is 3.11/3.12. Config schema in .pre-commit-config.yaml is compatible as-is. #16 rich 13.7.1 -> 15.0.0 Only uses rich.console.Console and rich.table.Table in orbit_agent/cli.py — both stable. #18 gunicorn 22.0.0 -> 25.3.0 Used only via README's CLI example; no Python imports. Also syncs .pre-commit-config.yaml hook revs to match the repo's own pinned tool versions: black: 24.8.0 -> 26.3.1 ruff: 0.6.3 -> 0.15.11 Previously the hooks installed older black/ruff than the repo uses, which could produce different formatting locally vs in CI. Verified on Python 3.12: - pytest -q: 16/16 pass - ruff check .: clean - black --check .: clean - orbit_agent.sms_server imports cleanly with Flask-Limiter 4.x The 4 corresponding Dependabot PRs (#13, #15, #16, #18) will close automatically once this merges. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
Superseded by #21 (deps: batched major-version updates). All four majors are now on main; this PR is redundant. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps rich from 13.7.1 to 15.0.0.
Release notes
Sourced from rich's releases.
... (truncated)
Changelog
Sourced from rich's changelog.
... (truncated)
Commits
6ac483ccorrection458a910Merge pull request #4080 from Textualize/bump150082e06e0changelogd6556bcbump to 15.0.0ffe2edcMerge pull request #4079 from Textualize/inline-table-codecf3b5a1changelog77f0edbremove comments7ef2d05fix inline code in table cells19c67b9Merge pull request #4077 from Textualize/isattry494b795changelog