Skip to content

Update uv.lock for security release 0.2.2 - #9

Merged
sderev merged 1 commit into
mainfrom
agent/dependabot-security-release
Jul 14, 2026
Merged

Update uv.lock for security release 0.2.2#9
sderev merged 1 commit into
mainfrom
agent/dependabot-security-release

Conversation

@sderev

@sderev sderev commented Jul 14, 2026

Copy link
Copy Markdown
Owner

What changed

  • Update idna to 3.18 and urllib3 to 2.7.0 in uv.lock.
  • Bump the package to 0.2.2 and collect the security changelog.

Why

  • Address the open Dependabot advisories for idna and urllib3.

How to test

  • Run gate.
  • Run uv lock --check and uv build.
  • Manually run uv run --locked shellgenius models.

Risk/comp notes

  • No application source changes. The dependency updates passed the supported Python test matrix.

Changelog fragment

  • Yes. Collected into CHANGELOG.md for 0.2.2.

* Update `idna` and `urllib3` to patched versions.
* Bump the package version and collect the security changelog.

Co-authored-by: AI <ai@sderev.com>
@sderev
sderev marked this pull request as ready for review July 14, 2026 16:24
@sderev
sderev merged commit 976a15a into main Jul 14, 2026
6 checks passed
@sderev
sderev deleted the agent/dependabot-security-release branch July 14, 2026 16:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant