eterna2 / kest / 24296652952
92%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 54
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 91.385%. Remained the same
24296652952

push

github

web-flow 
chore(deps): consolidate dependabot PRs #48-#50 and switch to monthly schedule (#51)

* chore(deps): consolidate dependabot PRs #48-#50 and switch to monthly schedule

Consolidates all open dependabot dependency updates into a single PR
and updates .github/dependabot.yml to use a monthly cadence for routine
bumps. GitHub's automatic security-update flow (which ignores the schedule
setting) still provides fast-path PRs for CVE-critical packages.

### Cargo (PR #48)
- pyo3: 0.24 → 0.28
- serde_jcs: 0.1 → 0.2

### npm/website (PR #49)
- next: 16.2.2 → 16 (latest patch)
- react / react-dom: 19.2.4 → 19.2.5
- lucide-react: ^0.470.0 → 1.8.0
- eslint: ^9 → 10.2.0
- eslint-config-next: 16.2.2 → 16.2.3
- typescript: ^5 → 6.0.2
- @types/node: ^20 → 25.6.0

### pip/python (PR #50)
- maturin: >=1.5,<1.13 → >=1.13.1,<1.14
- opentelemetry-sdk: >=1.31.0 → >=1.41.0
- uuid-utils: >=0.9.0 → >=0.14.1
- boto3 / aioboto3: >=1.28.0 / >=11.0.0 → >=1.42.88 / >=15.5.0
- opa-python-client: >=1.0.0 → >=2.0.4
- cedarpy: >=0.1.0 → >=4.8.0
- rfc8785: >=0.1.0 → >=0.1.4
- cryptography (dev): >=42.0.0 → >=46.0.7
- ruff (dev): >=0.3.0 → >=0.15.10
- mypy (dev): >=1.9.0 → >=1.20.0
- pyperf (dev): >=2.6.0 → >=2.10.0

### dependabot.yml
- All ecosystems: weekly → monthly schedule
- Security-critical updates still handled by GitHub's automatic security PRs

* fix(deps): fix dependency conflicts introduced by consolidation

Three issues found and fixed:

1. boto3 / aioboto3 conflict:
   - aioboto3==15.5.0 pins aiobotocore==2.25.1 which requires boto3>=1.40.46,<1.40.62
   - Our bump to boto3>=1.42.88 was outside that window, making the dep
     graph unsatisfiable for Python 3.14 splits.
   - Fix: revert boto3 floor to >=1.28.0 (letting uv resolve a compatible version).

2. maturin 1.13.1 / Rust edition2024 conflict:
   - maturin>=1.13.1 pulls base64ct v1.8.3 which uses edition2024, requiring Rust >=1.85.
   - Fix: revert maturin to >=1.5,<1.13 (matches original) until Rust toolchain is upgr... (continued)

2917 of 3192 relevant lines covered (91.38%)

0.91 hits per line

Jobs
ID Job ID Ran Files Coverage
1 24296652952.1 54
91.38
 GitHub Action Run
Source Files on build 24296652952