Skip to content

chore(deps): bump setuptools in root uv.lock - #6091

Merged
cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261025-uv-root
Oct 26, 2026
Merged

cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261025-uv-root

Conversation

@cdbartholomew

Copy link
Copy Markdown
Contributor

Routine dependency maintenance for the root uv.lock.

Closes Dependabot alert: #2346

  • setuptools 84.0.0 -> 84.2.1 (transitive, runtime dependency of torch; affected range >= 38.2.2, < 84.1.0). Lock regenerated with uv lock -P setuptools (uv 0.13.5); diff is the single package entry.

Local verification

  • uv lock --check OK
  • hindsight-api-slim: uv build OK, uv sync --frozen OK (Python 3.11), import setuptools, torch OK
  • pytest tests/test_mcp_*.py — 488 passed, 4 skipped
  • Full suite runs in test-api (root uv.lock is in the core path filter).

@cdbartholomew cdbartholomew added security Security / dependency vulnerability remediation p3 Priority: low labels Oct 25, 2026
@cdbartholomew cdbartholomew self-assigned this Oct 25, 2026
@cdbartholomew

Copy link
Copy Markdown
Contributor Author

Merging over a known, unrelated CI failure. Evidence:

The jobs that exercise this lockfile change all passed: test-api (1/3, 2/3, 3/3), build-api-python-versions (3.11–3.14), typecheck-api, Docker builds, test-pip-slim, test-embed.

@cdbartholomew
cdbartholomew merged commit b8178ab into main Oct 26, 2026
216 of 220 checks passed
@cdbartholomew
cdbartholomew deleted the chore/security-daily-20261025-uv-root branch October 26, 2026 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

p3 Priority: low security Security / dependency vulnerability remediation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant