Skip to content

Build(deps): Update pueblo requirement from >=0.0.18 to >=0.1.0 - #2118

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pueblo-gte-0.1.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pueblo-gte-0.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pueblo to permit the latest version.

Release notes

Sourced from pueblo's releases.

v0.1.0

What's Changed

  • IO: Fix software test, because S3 might have learned application/x-hdf5
  • ngr: Various version updates

Details

Full Changelog: pyveci/pueblo@v0.0.19...v0.1.0

Changelog

Sourced from pueblo's changelog.

2026-10-01 v0.1.0

  • IO: Fix software test, because S3 learned application/x-hdf5
  • ngr: Version updates

2026-07-06 v0.0.19

  • general: Adjusted dependency specification for click-aliases, for compatibility with Python 3.8.
  • nlp: Downgraded to unstructured 0.17, to get rid of the transitive llvmlite and numba dependencies
  • ngr: Accompanied changes in poethepoet v0.43 and newer

2026-04-07 v0.0.18

  • general: Downgrade to poethepoet 0.42 to fix task runner API
  • nlp: Relax package dependencies by removing upper bounds. The idea of a "validated ecosystem" is counter-productive in this case, because the strict constraints limit test case evolution.

2026-03-22 v0.0.17

  • mcp: Added McpConversation helper for exercising an MCP server

2026-03-22 v0.0.16

  • Replaced NLTK with spaCy to remediate CVE-2025-14009, following the decision of the unstructured package. NLTK's downloader uses zipfile.extractall() without path validation, enabling RCE via malicious packages (CVSS 10.0, no patch available). spaCy models install as pip packages, eliminating the vulnerable downloader entirely.
  • ngr: Added runner for shell scripts like test.sh

2026-02-08 v0.0.15

  • Downgraded to unstructured v0.18.27 due to installation problems with llvmlite

2026-01-25 v0.0.14

  • Testing: Fixed ValueError: Invalid frequency: S. Failed to parse with error message: Did you mean s?
  • ngr: Updated to poethepoet 0.38 at ngr-python-test-poethepoet
  • CI: Partially validated on Python 3.14t (free threading)

2025-12-15 v0.0.13

  • nlp: Switched from langchain to langchain-core
  • Testing: Migrated from pytest's LocalPath to pathlib.Path

2025-11-05 v0.0.12

  • ngr: Stopped overwriting existing Gradle wrapper. The --gradle-wrapper option can be used to optionally regenerate the Gradle wrapper now.

... (truncated)

Commits
  • 1d505f2 Release v0.1.0
  • 1914014 Chore: Update changelog
  • 1145402 Update dependency java-jdk to v25 (#341)
  • 76a397b Update dependency erlang/otp to v29
  • 15de762 Update dependency mcp to v2
  • 683a16e Update dependency elixir-lang/elixir to 1.19 || 1.20
  • 7de2d5c CI: Update to Erlang/OTP 28
  • 038c711 Update dependency elixir-lang/elixir to 1.19
  • 26ba473 Update dependency coverlet.collector to 10.1.0
  • 69f945e Update dependency ty to v0.0.84
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [pueblo](https://github.com/pyveci/pueblo) to permit the latest version.
- [Release notes](https://github.com/pyveci/pueblo/releases)
- [Changelog](https://github.com/pyveci/pueblo/blob/main/CHANGES.md)
- [Commits](pyveci/pueblo@v0.0.18...v0.1.0)

---
updated-dependencies:
- dependency-name: pueblo
  dependency-version: 0.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Concerns of dependencies. python Pull requests that update Python code labels Oct 5, 2026
@coderabbitai

coderabbitai Bot commented Oct 5, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 82cc188a-c92b-4034-a960-0efd058c8caa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Concerns of dependencies. python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants