Skip to content

chore(deps): refresh all deps (supersedes Dependabot PRs #139–#144)#146

Merged
jantman merged 1 commit into
mainfrom
chore/update-dependencies-2026-05-12
May 12, 2026
Merged

chore(deps): refresh all deps (supersedes Dependabot PRs #139–#144)#146
jantman merged 1 commit into
mainfrom
chore/update-dependencies-2026-05-12

Conversation

@jantman

@jantman jantman commented May 12, 2026

Copy link
Copy Markdown
Contributor

Summary

Rollup of `poetry update` plus the CI poetry pin bump. Supersedes all six open Dependabot PRs (#139, #140, #141, #142, #143, #144); they can be closed once this lands.

Dependencies updated (via `poetry update`)

Package From To Dependabot PR
backports-zstd 1.4.0 1.5.0
coverage 7.13.5 7.14.0 #142
idna 3.13 3.14 #144
installer 1.0.0 1.0.1
librt 0.10.0 0.11.0 #141
mypy 2.0.0 2.1.0
pandas 3.0.2 3.0.3
pbs-installer 2026.5.4 2026.5.10 #140 (covered .4 → .8)
poetry 2.4.0 2.4.1 #143
propcache 0.4.1 0.5.2
requests 2.33.1 2.34.0
tomlkit 0.14.0 0.15.0

CI

Hooks / tooling intentionally not changed

  • pre-commit autoupdate proposed isort 8.0.1 → 9.0.0a3 (alpha prerelease); declined per the precedent set in chore(deps): refresh all deps; bump Python to 3.13 #138. All other hooks are already current.
  • Other CI pins (pip 26.1.1, nox 2026.4.10, nox-poetry 1.2.0, virtualenv 21.3.1) are already on latest stable.
  • Dockerfile base `python:3.13-trixie` is current.

Test plan

🤖 Generated with Claude Code

Rollup of `poetry update` plus the CI poetry pin bump. Supersedes
all six open Dependabot PRs (#139#144); they can be closed once
this lands.

## Dependencies updated

- backports-zstd 1.4.0 → 1.5.0
- coverage 7.13.5 → 7.14.0  (PR #142)
- idna 3.13 → 3.14            (PR #144)
- installer 1.0.0 → 1.0.1
- librt 0.10.0 → 0.11.0       (PR #141)
- mypy 2.0.0 → 2.1.0
- pandas 3.0.2 → 3.0.3
- pbs-installer 2026.5.4 → 2026.5.10  (PR #140 covered .4 → .8;
  poetry update went further)
- poetry 2.4.0 → 2.4.1        (PR #143)
- propcache 0.4.1 → 0.5.2
- requests 2.33.1 → 2.34.0
- tomlkit 0.14.0 → 0.15.0

## CI

- `.github/workflows/constraints.txt`: poetry 2.4.0 → 2.4.1
  (matches PR #139 to keep CI poetry version in sync with lockfile).

## Hooks / tooling not changed

- pre-commit autoupdate proposed isort 8.0.1 → 9.0.0a3
  (prerelease); declined per the precedent set in PR #138. All
  other hooks already current.
- Other CI pins (pip 26.1.1, nox 2026.4.10, nox-poetry 1.2.0,
  virtualenv 21.3.1) are already on latest stable.
- Dockerfile base `python:3.13-trixie` is current.

## Validation

- `nox` — all 7 sessions clean (pre-commit, safety, mypy, tests,
  typeguard, docs, coverage)
- 293 tests pass, 97 % coverage

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

Coverage

Coverage Report
FileStmtsMissBranchBrPartCoverMissing
src/dm_mac
   __init__.py73060100% 
   cli_utils.py15000100% 
   neon_fob_adder.py2321560593%79, 116–117, 124, 270, 333–334, 341, 364–367, 454–456
   neongetter.py211154399%309
   slack_handler.py1650420100% 
   utils.py25040100% 
src/dm_mac/models
   __init__.py0000100% 
   api_schemas.py34000100% 
   machine.py580161941697%589, 669, 961–963, 1075–1084, 1142
   users.py1030320100% 
src/dm_mac/views
   __init__.py0000100% 
   api.py32000100% 
   machine.py1030120100% 
   prometheus.py1320121100% 
TOTAL1705324162598% 

Tests Skipped Failures Errors Time
295 0 💤 0 ❌ 0 🔥 24.555s ⏱️

@claude

claude Bot commented May 12, 2026

Copy link
Copy Markdown

Code review

No issues found. Checked for bugs and CLAUDE.md compliance.

@jantman jantman merged commit 5fecc9e into main May 12, 2026
17 checks passed
@jantman jantman deleted the chore/update-dependencies-2026-05-12 branch May 12, 2026 10:30
jantman added a commit that referenced this pull request May 12, 2026
Covers two PRs merged after 0.12.0:

- PR #145 (MCU lockup recovery): App.safe_reboot() → App.reboot()
  in firmware liveness watchdog, new FleetTimeoutTracker for
  fleet-wide Slack alerting, interrupt + bootloader/RTC WDTs as
  defense-in-depth.
- PR #146 (dependency refresh): poetry update rollup covering all
  six Dependabot PRs (#139#144) plus mypy 2.0.0 → 2.1.0 and
  others; CI poetry pin bumped to 2.4.1.

Also folds in the unreleased 0.12.1 (ESPHome 2025.11.2 firmware
compilation fixes from 6ca8ff7).

Minor version bump (0.12.x → 0.13.0) reflects the new
FleetTimeoutTracker feature; the firmware fix and dep refresh
alone would have been a patch bump.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant