Skip to content

chore(deps): bump certifi in agno lockfile - #5880

Merged
cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261020-uv-agno-r2
Oct 20, 2026
Merged

cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261020-uv-agno-r2

Conversation

@cdbartholomew

Copy link
Copy Markdown
Contributor

Routine dependency maintenance for hindsight-integrations/agno/uv.lock.

Closes Dependabot alerts #1991

The lock was regenerated with uv lock --upgrade-package for certifi only; nothing else was re-resolved apart from what those upgrades require.

Verification

  • uv build: OK
  • uv sync --frozen: OK
  • uv run pytest tests: 173 passed

No CI job currently exercises this directory, so the local run above is the verification for this change.

@cdbartholomew cdbartholomew added security Security / dependency vulnerability remediation p0 Priority: critical labels Oct 20, 2026
@cdbartholomew cdbartholomew self-assigned this Oct 20, 2026
@cdbartholomew

Copy link
Copy Markdown
Contributor Author

Merging on local verification rather than CI coverage. No CI job or path filter covers this directory, so none of the checks on this PR exercises the lockfile changed here.

Verification was run in a clean worktree of this branch (cut from main) during this run:

  • uv build: OK
  • uv sync --frozen: OK
  • uv run pytest tests: 173 passed

There were no failures, so there was nothing to compare against main. The test run imports the package and its framework dependencies, so every import evaluated at load time resolved against the new version.

@cdbartholomew
cdbartholomew merged commit b03b9dc into main Oct 20, 2026
100 checks passed
@cdbartholomew
cdbartholomew deleted the chore/security-daily-20261020-uv-agno-r2 branch October 20, 2026 21:47
@nicoloboschi nicoloboschi mentioned this pull request Nov 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

p0 Priority: critical security Security / dependency vulnerability remediation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant