Skip to content

ci(deps): upgrade all pinned dependencies via pip-compile#117

Merged
hfudev merged 1 commit intoespressif:v1from
vsaltxx:fix/update-dependencies-combined
Mar 27, 2026
Merged

ci(deps): upgrade all pinned dependencies via pip-compile#117
hfudev merged 1 commit intoespressif:v1from
vsaltxx:fix/update-dependencies-combined

Conversation

@vsaltxx
Copy link
Copy Markdown
Contributor

@vsaltxx vsaltxx commented Mar 27, 2026

Summary

Regenerated requirements.txt with pip-compile --upgrade (Python 3.12) to consolidate all open dependabot PRs into a single update.

Covers dependabot PRs: #108, #109, #110, #111, #114

Updated dependencies

Package From To
certifi 2024.2.2 2026.2.25
cffi 1.16.0 2.0.0
charset-normalizer 3.3.2 3.4.6
cryptography 42.0.4 46.0.6
deprecated 1.2.18 1.3.1
oauthlib 3.2.2 3.3.1
packaging 23.2 26.0
pillow 10.2.0 12.1.1
pycparser 2.22 3.0
pyjwt 2.8.0 2.12.1
pynacl 1.5.0 1.6.2
requests 2.31.0 2.33.0
requests-oauthlib 1.3.1 2.0.0
typing-extensions 4.13.2 4.15.0
urllib3 2.2.0 2.6.3
wrapt 1.16.0 2.1.2

Notable security fixes

Test plan

  • CI passes with updated dependencies
  • Existing tests pass without modifications

Once merged, dependabot PRs #108, #109, #110, #111, #114 can be closed.

@vsaltxx vsaltxx requested a review from a team as a code owner March 27, 2026 07:48
@vsaltxx vsaltxx requested review from hfudev and removed request for a team March 27, 2026 07:48
@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 27, 2026

Messages
📖 🎉 Good Job! All checks are passing!

👋 Hello vsaltxx, we appreciate your contribution to this project!


📘 Please review the project's Contributions Guide for key guidelines on code, documentation, testing, and more.

Click to see more instructions ...


This automated output is generated by the PR linter DangerJS, which checks if your Pull Request meets the project's requirements and helps you fix potential issues.

DangerJS is triggered with each push event to a Pull Request and modify the contents of this comment.

Please consider the following:
- Danger mainly focuses on the PR structure and formatting and can't understand the meaning behind your code or changes.
- Danger is not a substitute for human code reviews; it's still important to request a code review from your colleagues.
- To manually retry these Danger checks, please navigate to the Actions tab and re-run last Danger workflow.

Review and merge process you can expect ...


We do welcome contributions in the form of bug reports, feature requests and pull requests.

1. An internal issue has been created for the PR, we assign it to the relevant engineer.
2. They review the PR and either approve it or ask you for changes or clarifications.
3. Once the GitHub PR is approved we do the final review, collect approvals from core owners and make sure all the automated tests are passing.
- At this point we may do some adjustments to the proposed change, or extend it by adding tests or documentation.
4. If the change is approved and passes the tests it is merged into the default branch.

Generated by 🚫 dangerJS against a101e4c

Regenerated requirements.txt with pip-compile --upgrade (Python 3.12)
to consolidate open dependabot PRs and pick up additional transitive
dependency updates.

Made-with: Cursor
@vsaltxx vsaltxx force-pushed the fix/update-dependencies-combined branch from ba77d7a to a101e4c Compare March 27, 2026 07:54
@hfudev hfudev merged commit 9722ced into espressif:v1 Mar 27, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants