Skip to content

[codex] Bump urllib3 example dependency#58

Merged
stacknil merged 1 commit into
mainfrom
codex/bump-urllib3-example-goldens
May 21, 2026
Merged

[codex] Bump urllib3 example dependency#58
stacknil merged 1 commit into
mainfrom
codex/bump-urllib3-example-goldens

Conversation

@stacknil
Copy link
Copy Markdown
Owner

Brief Design Summary

This PR applies the Dependabot urllib3 example dependency bump from 2.2.1 to 2.7.0 for sbom-diff-and-risk example requirements.

It also regenerates the matching deterministic sample requirements JSON and Markdown reports so the golden tests stay aligned with the example input. This supersedes Dependabot PR #54, which changed only the input file and left the sample report golden outputs stale.

No runtime behavior, package metadata, workflows, release tags, PyPI/TestPyPI publishing, or production PyPI status changed.

Files Changed

  • tools/sbom-diff-and-risk/examples/requirements_after.txt
  • tools/sbom-diff-and-risk/examples/sample-requirements-report.json
  • tools/sbom-diff-and-risk/examples/sample-requirements-report.md

Validation

cd tools/sbom-diff-and-risk
python -m pytest
python -m build
$files = Get-ChildItem dist -File | ForEach-Object { $_.FullName }
python -m twine check $files
git diff --check

Results:

  • python -m pytest: 162 passed
  • python -m build: passed, produced sbom_diff_and_risk-0.9.0 wheel and sdist
  • python -m twine check: passed for wheel and sdist
  • git diff --check: passed
  • package version remains 0.9.0
  • .github/workflows unchanged

Out of Scope

  • No runtime behavior changes
  • No package version bump
  • No workflow changes
  • No tag or GitHub Release
  • No PyPI/TestPyPI publishing
  • No production PyPI workflow

@stacknil stacknil merged commit f501290 into main May 21, 2026
5 checks passed
@stacknil stacknil deleted the codex/bump-urllib3-example-goldens branch May 21, 2026 02:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant