Skip to content

chore(deps): bump filelock in smolagents lockfile - #6088

Merged
cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261025-uv-smolagents
Oct 25, 2026
Merged

cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261025-uv-smolagents

Conversation

@cdbartholomew

Copy link
Copy Markdown
Contributor

Routine dependency maintenance for hindsight-integrations/smolagents/uv.lock.

Closes Dependabot alerts: #2328 #2329 #2330

  • filelock 3.29.0 -> 4.2.4 (transitive). The affected range is >= 3.20.4, <= 4.2.0; 4.2.1+ is outside it. filelock 4.2.x requires Python >= 3.11, which this lockfile already targets ([tool.uv] environments = ["python_version >= '3.11'"]), so no 3.10 fork remains.
  • Lock regenerated with uv lock -P filelock (uv 0.13.5). Diff is the single package entry.

Local verification (mirrors test-smolagents-integration, Python 3.11)

  • uv build OK
  • uv sync --frozen OK
  • uv run pytest tests — 91 passed

@cdbartholomew cdbartholomew added security Security / dependency vulnerability remediation p1 High severity - remediate within 30 days labels Oct 25, 2026
@cdbartholomew cdbartholomew self-assigned this Oct 25, 2026
@cdbartholomew
cdbartholomew merged commit be1ec7d into main Oct 25, 2026
93 checks passed
@cdbartholomew
cdbartholomew deleted the chore/security-daily-20261025-uv-smolagents branch October 25, 2026 14:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

p1 High severity - remediate within 30 days security Security / dependency vulnerability remediation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant