Repository navigation
Conversation
The Security workflow failed on main: pip-audit reported 9 CVEs in filelock 3.25.2. The fixed releases (>=4.2.1) require Python 3.11, and Python 3.10 reached end of life in October 2026, so the template floor moves to 3.11. - uv lock --upgrade: all locked packages updated (filelock 4.2.9) - requires-python >=3.11, pyrefly python-version 3.11, ruff py311 - tox env list and CI matrices drop 3.10; PYTHON_VERSION is 3.11 - bootstrap script no longer offers 3.10 as a minimum version Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01XDKWjmrh1RGKKyHTe9FrT2
Owner
Author
|
All checks on this head failed before any step ran. GitHub's annotation on each job says: "The job was not started because your account is locked due to a billing issue." So no code has been tested in CI yet, and nothing in this PR can change that. Once the account's Actions billing is resolved, the checks need a re-run. Locally on Python 3.13: tests, ruff, pyrefly, coverage (100%), pip-audit and the build all pass. Generated by Claude Code |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Requested by Sebastiano · project thread
Why
The Security workflow has been failing on
mainsince the last dependency merges:pip-auditreports 9 known vulnerabilities infilelock3.25.2 (fixed in 4.2.1, one in 4.0.9). Everyfilelockrelease with the fix requires Python ≥ 3.11, so the template can't be patched while it still supports 3.10. Python 3.10 reached end of life in October 2026.What changes
uv lock --upgrade: every locked package moves to its latest allowed version (filelock4.2.9,ruff0.16.10,pyrefly1.4.1,pytest9.2.0,tox4.67.13, …). This supersedes the open Dependabot PR build(deps): bump the python-dependencies group across 1 directory with 10 updates #47.requires-python, pyreflypython-version, rufftarget-version.tox.iniand the CI workflows drop 3.10;PYTHON_VERSIONis now3.11.scripts/bootstrap_template.pyno longer offers 3.10 as a minimum version.release.yaml: an outdated comment about 3.10 is updated (the regex step is unchanged).This is a breaking change for projects bootstrapped with a 3.10 floor, hence the
!.Checks run locally (Python 3.13)
py313formattertypecoveragesecuritybuildtemplatemainas well: the sandbox cannot reachdocs.python.orgfor intersphinx. Left to CI.Generated by Claude Code