Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented May 15, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
openai >=1.78,<1.79 -> >=1.82,<1.83 age adoption passing confidence
semgrep >=1.121,<1.122 -> >=1.122,<1.123 age adoption passing confidence
types-defusedxml (changelog) ==0.7.0.20240218 -> ==0.7.0.20250516 age adoption passing confidence

Release Notes

openai/openai-python (openai)

v1.82.0

Compare Source

Full Changelog: v1.81.0...v1.82.0

Features
  • api: new streaming helpers for background responses (2a65d4d)
Bug Fixes
Documentation
  • readme: another async example fix (9ec8289)
  • readme: fix async example (37d0b25)

v1.81.0

Compare Source

Full Changelog: v1.80.0...v1.81.0

Features
  • api: add container endpoint (054a210)

v1.80.0

Compare Source

Full Changelog: v1.79.0...v1.80.0

Features
Chores
  • docs: grammar improvements (e746145)

v1.79.0

Compare Source

Full Changelog: v1.78.1...v1.79.0

Features
  • api: further updates for evals API (32c99a6)
  • api: manual updates (25245e5)
  • api: responses x eval api (fd586cb)
  • api: Updating Assistants and Evals API schemas (98ba7d3)
Bug Fixes
  • fix create audio transcription endpoint (e9a89ab)
Chores
  • ci: fix installation instructions (f26c5fc)
  • ci: upload sdks to package manager (861f105)
returntocorp/semgrep (semgrep)

v1.122.0

Compare Source

Added
  • Adds support for the UV package manager in Supply Chain scans. (SC-1900)
Fixed
  • pro: Fixed inter-file naming bug affecting Go's struct-methods that could result
    in false negatives.

    Previously, adding a pattern-inside like

    func ($THING $TYPE) $FUNC(...) $R { ... }
    

    to a taint rule could cause some findings to incorrectly stop being reported. (code-7767)

  • PRO: Fixed the issue with type matching when a type has a type parameter, e.g., matching the pattern std::vector<$T> with the code std::vector<int> v in C++. (code-8443)

  • Make Nuget dependency child parsing case insensitive (sc-2355)

  • Fixed bug where direct dev depenencies were not marked as direct when parsing package-lock.json projects. (sc-dev)


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from bb86e33 to 9bff4f5 Compare May 16, 2025 06:40
@renovate renovate bot changed the title Update dependency semgrep to >=1.122,<1.123 Update all non-major dependencies May 16, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from aab60d0 to 65bb7b0 Compare May 21, 2025 23:21
@clavedeluna clavedeluna enabled auto-merge May 22, 2025 17:14
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 65bb7b0 to 7c79433 Compare May 23, 2025 00:29
@sonarqubecloud
Copy link

@clavedeluna clavedeluna added this pull request to the merge queue May 23, 2025
Merged via the queue into main with commit 2480ad8 May 23, 2025
14 checks passed
@clavedeluna clavedeluna deleted the renovate/all-minor-patch branch May 23, 2025 00:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant