Skip to content

chore(deps): pin 5 dependency versions#7

Open
bagui-security-agent[bot] wants to merge 1 commit into
mainfrom
ananke-pin-deps-1778587026930
Open

chore(deps): pin 5 dependency versions#7
bagui-security-agent[bot] wants to merge 1 commit into
mainfrom
ananke-pin-deps-1778587026930

Conversation

@bagui-security-agent
Copy link
Copy Markdown

Supply Chain Fix

This PR was automatically generated by ananke to pin 5 unpinned dependencies to their latest stable versions.

Changes

File Dependency Before After Source
mix.exs req >= 0.5.2 0.5.2 lockfile
mix.exs abacus ~> 2.1.0 2.1.0 lockfile
mix.exs nx >= 0.7.0 0.7.3 lockfile
mix.exs ex_doc ~> 0.34 0.34.1 lockfile
mix.exs mimic ~> 1.8 1.8.2 lockfile

Skipped

2 dependencies were skipped and require manual attention:

File Dependency Reason
mix.exs ecto Registry lookup failed
mix.exs gettext Registry lookup failed

Generated by ananke — automated supply chain security

Auto-generated by ananke supply chain detector.
Copy link
Copy Markdown

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. This is a straightforward dependency pinning change in mix.exs with no behavioral code changes, and the selected versions align with the lockfile versions noted in the PR description.

Quick sanity notes:

  • Pinning removes version drift and improves reproducibility/supply-chain control.
  • Runtime-impacting deps (req, optional nx, optional abacus) are pinned to concrete versions already in use.
  • Dev/test-only deps (ex_doc, mimic) are similarly pinned and low risk.

No concrete correctness, security, migration, or API breakage issue is evident from this diff.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants