Skip to content

chore(deps): 升级 certifi、urllib3、setuptools 修复安全告警 - #84

Merged
ShadowLemoon merged 1 commit into
mainfrom
chore/bump-vulnerable-deps
Nov 11, 2026
Merged

ShadowLemoon merged 1 commit into
mainfrom
chore/bump-vulnerable-deps

Conversation

@ShadowLemoon

Copy link
Copy Markdown
Collaborator

更改

只升级 uv.lock 里的三个传递依赖,修复 Dependabot 告警:

  • certifi 2026.2.25 → 2026.10.23(critical,需 ≥ 2026.10.18)
  • urllib3 2.7.0 → 2.8.0(high x2、medium)
  • setuptools 82.0.0 → 84.2.1(medium、low,需 ≥ 84.1.0)

验证

unittest 通过,配置器设置页 offscreen 能正常实例化。未改 pyproject.toml。

@coderabbitai

coderabbitai Bot commented Nov 11, 2026

Copy link
Copy Markdown

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

  • uv.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 4428df10-ae85-4c29-8c3d-dd18d9a6c7e1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@ShadowLemoon
ShadowLemoon merged commit 5fe3947 into main Nov 11, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant