Update dependency prompt-toolkit to v3.0.53 - #1368
Conversation
85b828c to
f590702
Compare
|
🤖 Finished Review · ✅ Success · Started 8:54 AM UTC · Completed 9:04 AM UTC Commit: |
ReviewFindingsCritical
Next steps:
Previous runReviewFindingsHigh
Next steps:
Previous run (2)ReviewFindingsCritical
Labels: PR is a dependency version bump (prompt-toolkit 3.0.52 to 3.0.53) generated by Renovate bot Next steps:
|
f590702 to
21a1e26
Compare
|
🤖 Finished Review · ✅ Success · Started 9:13 AM UTC · Completed 9:23 AM UTC Commit: |
21a1e26 to
fb898a8
Compare
|
🤖 Finished Review · ✅ Success · Started 7:42 AM UTC · Completed 7:56 AM UTC Commit: |
| # opentelemetry-instrumentation-flask | ||
| # opentelemetry-instrumentation-sqlalchemy | ||
| prompt-toolkit==3.0.52 \ | ||
| prompt-toolkit==3.0.53 \ |
There was a problem hiding this comment.
[critical] hash-mismatch
The version string for prompt-toolkit was bumped to 3.0.53 but the hashes were NOT updated — they still contain the hashes for 3.0.52 (sha256:28cde192929c8e7321de85de1ddbe736f1375148b02f2e17edd840042b1be855 and sha256:9aac639a3bbd33284347de5ad8d68ecc044b91a762dc39b7c21095fcd6a19955). pip's hash-checking mode will fail at install time. Additionally, a duplicate entry prompt_toolkit==3.0.53 (underscore-normalized name) was appended at line 1299 with the correct 3.0.53 hashes, creating an invalid requirements file with two entries for the same package.
Suggested fix: Remove the duplicate prompt_toolkit==3.0.53 entry at lines 1299-1301. Update the hashes on the existing prompt-toolkit==3.0.53 entry at line 790 to the correct 3.0.53 hashes. Ideally, re-run pip-compile to regenerate the lockfile correctly.
| # pytest | ||
| # pytest-cov | ||
| prompt-toolkit==3.0.52 \ | ||
| prompt-toolkit==3.0.53 \ |
There was a problem hiding this comment.
[critical] hash-mismatch
Same issue as requirements.txt: the version string for prompt-toolkit was bumped to 3.0.53 but the hashes remain those of 3.0.52. A duplicate entry prompt_toolkit==3.0.53 with different hashes is appended at line 1532, creating an invalid requirements file with two entries for the same package.
Suggested fix: Remove the duplicate prompt_toolkit==3.0.53 entry at lines 1532-1534. Update the hashes on the existing prompt-toolkit==3.0.53 entry at line 971 to the correct 3.0.53 hashes. Re-running pip-compile would produce the correct output.
This PR contains the following updates:
==3.0.52→==3.0.53Release Notes
prompt-toolkit/python-prompt-toolkit (prompt-toolkit)
v3.0.53Compare Source
Fixes:
New features:
__version__.show_numbersinChoiceInput.Added support for Python 3.14, 3.15, and set minimum Python version to 3.10.
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.