Skip to content

fix: resolve open dependabot security alerts #110

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jonathannorris wants to merge 4 commits into
base: main
Choose a base branch
from
Open

fix: resolve open dependabot security alerts #110

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
3effda5
fix: bump black and django to resolve dependabot security alerts
jonathannorris Mar 15, 2026
d2c7acf
fix: split lint deps into requirements.lint.txt for Python 3.10+ compat
jonathannorris Mar 15, 2026
ca0d0d9
fix: resolve remaining dependabot security alerts
jonathannorris Apr 22, 2026
a84133c
fix: drop Python 3.9 from CI matrix
jonathannorris Apr 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
- name: Install dependencies
run: |
pip install --upgrade pip
pip install -r requirements.test.txt
pip install -r requirements.lint.txt

- name: Check formatting
run: |
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/unit_test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
runs-on: ${{matrix.os}}
strategy:
matrix:
python-version: ["3.12", "3.9"]
python-version: ["3.12", "3.10"]
os: [ubuntu-latest, windows-latest]

steps:
Expand Down
2 changes: 1 addition & 1 deletion example/django-app/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
django >= 4.2
django >= 6.0.4
Copy link

Copilot AI Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This bumps the example app dependency from Django 4.2+ to django >= 6.0.4, but the example’s README still states it requires “Django 4.2+”. Please update the example documentation to reflect the new minimum Django version so users don’t install an incompatible version.

Copilot uses AI. Check for mistakes.
-e ../../
8 changes: 8 additions & 0 deletions requirements.lint.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
-r requirements.txt

black~=26.3.1
mypy~=1.15.0
mypy-extensions~=1.0.0
ruff~=0.9.0
types-requests~=2.32.0
types-urllib3~=1.26.25.14
6 changes: 1 addition & 5 deletions requirements.test.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,7 @@
-r requirements.txt

black~=25.1.0
mypy~=1.15.0
mypy-extensions~=1.0.0
pytest~=7.4.0
pytest>=9.0.3
pytest-benchmark~=4.0.0
responses~=0.25.6
ruff~=0.9.0
types-requests~=2.32.0
types-urllib3~=1.26.25.14
2 changes: 1 addition & 1 deletion requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
setuptools >= 21.0.0
urllib3 >= 1.15.1
requests >= 2.32
requests >= 2.33.0
wasmtime ~= 30.0.0
protobuf >= 4.23.3
openfeature-sdk ~= 0.8.0
Expand Down
Loading