From a156e348da5837bf6e4f2b90a2a2e6aac1e0fa8a Mon Sep 17 00:00:00 2001 From: Jonathan Haas Date: Tue, 21 Apr 2026 19:11:13 -0700 Subject: [PATCH] deps: batched major-version updates + sync pre-commit hook pins MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Consolidates four Dependabot major-bump PRs. Each was individually reviewed against actual usage in the codebase and found low-risk: #13 flask-limiter 3.8.0 -> 4.1.1 Only uses Limiter(key_func=..., default_limits=...) and get_remote_address — both stable across 3.x -> 4.x. Smoke-tested orbit_agent.sms_server import: OK. #15 pre-commit 3.8.0 -> 4.6.0 Requires Python >=3.9; our matrix is 3.11/3.12. Config schema in .pre-commit-config.yaml is compatible as-is. #16 rich 13.7.1 -> 15.0.0 Only uses rich.console.Console and rich.table.Table in orbit_agent/cli.py — both stable. #18 gunicorn 22.0.0 -> 25.3.0 Used only via README's CLI example; no Python imports. Also syncs .pre-commit-config.yaml hook revs to match the repo's own pinned tool versions: black: 24.8.0 -> 26.3.1 ruff: 0.6.3 -> 0.15.11 Previously the hooks installed older black/ruff than the repo uses, which could produce different formatting locally vs in CI. Verified on Python 3.12: - pytest -q: 16/16 pass - ruff check .: clean - black --check .: clean - orbit_agent.sms_server imports cleanly with Flask-Limiter 4.x The 4 corresponding Dependabot PRs (#13, #15, #16, #18) will close automatically once this merges. Co-Authored-By: Claude Opus 4.7 (1M context) --- .pre-commit-config.yaml | 4 ++-- requirements-dev.lock | 8 ++++---- requirements-dev.txt | 2 +- requirements.lock | 8 ++++---- requirements.txt | 6 +++--- 5 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 6682808..dca4d82 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -8,12 +8,12 @@ repos: - id: check-yaml - repo: https://github.com/psf/black - rev: 24.8.0 + rev: 26.3.1 hooks: - id: black - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.6.3 + rev: v0.15.11 hooks: - id: ruff args: ["--fix"] diff --git a/requirements-dev.lock b/requirements-dev.lock index c0f3e52..c4c4285 100644 --- a/requirements-dev.lock +++ b/requirements-dev.lock @@ -28,12 +28,12 @@ dspy-ai==3.2.0 fastuuid==0.14.0 filelock==3.29.0 flask==3.1.3 -flask-limiter==3.8.0 +flask-limiter==4.1.1 frozenlist==1.8.0 fsspec==2026.3.0 gepa==0.0.27 ghp-import==2.1.0 -gunicorn==22.0.0 +gunicorn==25.3.0 h11==0.16.0 hf-xet==1.4.3 httpcore==1.0.9 @@ -74,7 +74,7 @@ paginate==0.5.7 pathspec==1.0.4 platformdirs==4.9.6 pluggy==1.6.0 -pre-commit==3.8.0 +pre-commit==4.6.0 propcache==0.4.1 pydantic==2.13.3 pydantic-core==2.46.3 @@ -93,7 +93,7 @@ pyyaml-env-tag==1.1 referencing==0.37.0 regex==2026.4.4 requests==2.33.1 -rich==13.7.1 +rich==15.0.0 rpds-py==0.30.0 ruff==0.15.11 shellingham==1.5.4 diff --git a/requirements-dev.txt b/requirements-dev.txt index 66ee61a..e9050c2 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -10,7 +10,7 @@ pytest-asyncio==1.3.0 black==26.3.1 ruff==0.15.11 mypy==1.20.2 -pre-commit==3.8.0 +pre-commit==4.6.0 # Documentation mkdocs==1.6.1 diff --git a/requirements.lock b/requirements.lock index c0f3e52..c4c4285 100644 --- a/requirements.lock +++ b/requirements.lock @@ -28,12 +28,12 @@ dspy-ai==3.2.0 fastuuid==0.14.0 filelock==3.29.0 flask==3.1.3 -flask-limiter==3.8.0 +flask-limiter==4.1.1 frozenlist==1.8.0 fsspec==2026.3.0 gepa==0.0.27 ghp-import==2.1.0 -gunicorn==22.0.0 +gunicorn==25.3.0 h11==0.16.0 hf-xet==1.4.3 httpcore==1.0.9 @@ -74,7 +74,7 @@ paginate==0.5.7 pathspec==1.0.4 platformdirs==4.9.6 pluggy==1.6.0 -pre-commit==3.8.0 +pre-commit==4.6.0 propcache==0.4.1 pydantic==2.13.3 pydantic-core==2.46.3 @@ -93,7 +93,7 @@ pyyaml-env-tag==1.1 referencing==0.37.0 regex==2026.4.4 requests==2.33.1 -rich==13.7.1 +rich==15.0.0 rpds-py==0.30.0 ruff==0.15.11 shellingham==1.5.4 diff --git a/requirements.txt b/requirements.txt index cd477c5..5db2aa2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,15 +1,15 @@ # Core AI and CLI (prefer latest v3 per dspy.ai) dspy-ai>=3.2.0,<4.0.0 typer==0.24.1 -rich==13.7.1 +rich==15.0.0 pydantic==2.13.3 python-dotenv==1.2.2 # Web server and SMS Flask==3.1.3 -Flask-Limiter==3.8.0 +Flask-Limiter==4.1.1 twilio==9.10.5 -gunicorn==22.0.0 +gunicorn==25.3.0 # Data and utilities PyYAML==6.0.3