Skip to content

Update dependency prompt-toolkit to v3.0.53 - #1368

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/prompt-toolkit-3.x
Open

Update dependency prompt-toolkit to v3.0.53#1368
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/prompt-toolkit-3.x

Conversation

@renovate

@renovate renovate Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
prompt-toolkit ==3.0.52==3.0.53 age adoption passing confidence

Release Notes

prompt-toolkit/python-prompt-toolkit (prompt-toolkit)

v3.0.53

Compare Source

Fixes:

  • Fix get_word_before_cursor behavior.
  • Fix vt100 6x6x6 color cube range and missing grayscale shades (232, 254-255).
  • Treat OSError on add_reader as EOFError (macOS kqueue).
  • Handle surrogate pairs in FileHistory.store_string.
  • Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter.
  • Handle ascii decode errors in terminal type decoding of telnet protocol.
  • Update return types of dialog shortcuts to include None when cancelled.
  • Set missing minimal requirement on wcwidth.

New features:

  • Lazy load __version__.
  • Allow to specify show_numbers in ChoiceInput.

Added support for Python 3.14, 3.15, and set minimum Python version to 3.10.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team August 3, 2026 00:51
@renovate
renovate Bot force-pushed the renovate/prompt-toolkit-3.x branch from 85b828c to f590702 Compare August 10, 2026 08:53
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 10, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 8:54 AM UTC · Completed 9:04 AM UTC

Commit: f590702 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 10, 2026

Copy link
Copy Markdown

Review

Findings

Critical

  • [hash-mismatch] requirements.txt:790 — The version string for prompt-toolkit was bumped to 3.0.53 but the hashes were NOT updated — they still contain the hashes for 3.0.52 (sha256:28cde192... and sha256:9aac639a...). On the base branch, the entry reads prompt-toolkit==3.0.52 with these exact hashes, confirming they belong to the old version. pip’s hash-checking mode will reject the download at install time because the 3.0.53 artifacts will not match these stale hashes. Additionally, a duplicate entry prompt_toolkit==3.0.53 (underscore-normalized name) was appended at line 1299 with the correct 3.0.53 hashes, creating an invalid requirements file with two entries for the same package.
    Remediation: Remove the duplicate prompt_toolkit==3.0.53 entry at lines 1299–1301. Update the hashes on the existing prompt-toolkit==3.0.53 entry at line 790 to the correct 3.0.53 hashes. Ideally, re-run pip-compile to regenerate the lockfile correctly.

  • [hash-mismatch] requirements-test.txt:971 — Same issue: the version string for prompt-toolkit was bumped to 3.0.53 but the hashes remain those of 3.0.52. A duplicate entry prompt_toolkit==3.0.53 with different hashes was appended at line 1532, creating the same invalid-file pattern.
    Remediation: Remove the duplicate prompt_toolkit==3.0.53 entry at lines 1532–1534. Update the hashes on the existing entry at line 971. Re-running pip-compile would produce the correct output.


Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR
Previous run

Review

Findings

High

  • [hash mismatch / duplicate dependency entry] requirements.txt:790 — The PR bumps prompt-toolkit from 3.0.52 to 3.0.53 at line 790 but leaves the old v3.0.52 hashes (28cde192..., 9aac639a...) unchanged on the existing entry (they are context lines in the diff, not modified). A duplicate prompt_toolkit==3.0.53 entry (underscore name variant) is appended at line 1299 with different hashes (01c0891d..., 9ec8a0ad...). pip normalizes both names to the same package, resulting in duplicate entries with conflicting hash sets. Depending on pip version behavior with duplicates, installation may fail with hash verification errors or reject the file as malformed.
    Remediation: Regenerate requirements.txt with pip-compile --generate-hashes to produce a single, correctly-hashed prompt-toolkit==3.0.53 entry. Alternatively, manually remove the duplicate prompt_toolkit entry at line 1299 and replace the stale hashes at lines 791–792 with the correct v3.0.53 hashes.

  • [hash mismatch / duplicate dependency entry] requirements-test.txt:971 — Same issue: the version is bumped to 3.0.53 but the old v3.0.52 hashes remain unchanged on the existing entry. A duplicate prompt_toolkit==3.0.53 entry at line 1532 carries the correct v3.0.53 hashes. This creates the same duplicate-entry / conflicting-hash problem.
    Remediation: Regenerate requirements-test.txt with pip-compile --generate-hashes to produce a single, correctly-hashed entry.


Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR
Previous run (2)

Review

Findings

Critical

  • [hash-mismatch] requirements.txt:790 — The version on the hyphenated entry prompt-toolkit is bumped from 3.0.52 to 3.0.53, but the hash values on lines 791–792 are NOT updated — they remain the hashes for 3.0.52 (28cde192... and 9aac639a...). A new underscore-named duplicate entry prompt_toolkit==3.0.53 is appended at line 1299 with the correct 3.0.53 hashes (01c0891d... and 9ec8a0ad...). Under PEP 503 name normalization these are the same package, creating a duplicate entry with conflicting hashes. This will cause pip install --require-hashes to fail.
    Remediation: Re-run pip-compile --generate-hashes to regenerate the requirements file cleanly, producing a single prompt-toolkit==3.0.53 entry with the correct hashes.

  • [hash-mismatch] requirements-test.txt:971 — Same issue: the hyphenated entry prompt-toolkit has its version bumped to 3.0.53 but retains the 3.0.52 hashes, while a new duplicate underscore entry prompt_toolkit==3.0.53 is appended at line 1532 with the correct 3.0.53 hashes. This will cause hash verification failures or duplicate-entry errors during pip install --require-hashes.
    Remediation: Re-run pip-compile --allow-unsafe --generate-hashes to regenerate the test requirements file cleanly.


Labels: PR is a dependency version bump (prompt-toolkit 3.0.52 to 3.0.53) generated by Renovate bot


Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026
@renovate
renovate Bot force-pushed the renovate/prompt-toolkit-3.x branch from f590702 to 21a1e26 Compare August 14, 2026 09:12
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 14, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 9:13 AM UTC · Completed 9:23 AM UTC

Commit: 21a1e26 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@renovate
renovate Bot force-pushed the renovate/prompt-toolkit-3.x branch from 21a1e26 to fb898a8 Compare August 19, 2026 07:41
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 19, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 7:42 AM UTC · Completed 7:56 AM UTC

Commit: fb898a8 · View workflow run →

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

Comment thread requirements.txt
# opentelemetry-instrumentation-flask
# opentelemetry-instrumentation-sqlalchemy
prompt-toolkit==3.0.52 \
prompt-toolkit==3.0.53 \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[critical] hash-mismatch

The version string for prompt-toolkit was bumped to 3.0.53 but the hashes were NOT updated — they still contain the hashes for 3.0.52 (sha256:28cde192929c8e7321de85de1ddbe736f1375148b02f2e17edd840042b1be855 and sha256:9aac639a3bbd33284347de5ad8d68ecc044b91a762dc39b7c21095fcd6a19955). pip's hash-checking mode will fail at install time. Additionally, a duplicate entry prompt_toolkit==3.0.53 (underscore-normalized name) was appended at line 1299 with the correct 3.0.53 hashes, creating an invalid requirements file with two entries for the same package.

Suggested fix: Remove the duplicate prompt_toolkit==3.0.53 entry at lines 1299-1301. Update the hashes on the existing prompt-toolkit==3.0.53 entry at line 790 to the correct 3.0.53 hashes. Ideally, re-run pip-compile to regenerate the lockfile correctly.

Comment thread requirements-test.txt
# pytest
# pytest-cov
prompt-toolkit==3.0.52 \
prompt-toolkit==3.0.53 \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[critical] hash-mismatch

Same issue as requirements.txt: the version string for prompt-toolkit was bumped to 3.0.53 but the hashes remain those of 3.0.52. A duplicate entry prompt_toolkit==3.0.53 with different hashes is appended at line 1532, creating an invalid requirements file with two entries for the same package.

Suggested fix: Remove the duplicate prompt_toolkit==3.0.53 entry at lines 1532-1534. Update the hashes on the existing prompt-toolkit==3.0.53 entry at line 971 to the correct 3.0.53 hashes. Re-running pip-compile would produce the correct output.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants