chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 in /envs/snake_env#604
Conversation
|
No reviewable files after applying ignore patterns. |
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Alignment Review Report
Automated Checks
- Lint: FAIL (pre-existing, unrelated) — failing files are in
envs/carla_env/andsrc/openenv/core/containers/, not touched by this PR - Debug code: FOUND (pre-existing, unrelated) —
printstatements insrc/openenv/core/containers/test_local_docker_provider.pyand aTODOin CLI code; none in the changed file
Tier 1: Fixes Required
None in this PR's changed files.
Dependency Bump Verification
- Scope: Lock-file only —
envs/snake_env/uv.lock(+3/-3 lines). Nopyproject.tomlor source code changes. - Version delta:
1.2.1→1.2.2(patch-level per SemVer). - Hash integrity: sdist and wheel URLs, hashes, and sizes all updated consistently with the stated PyPI release.
- Upstream breaking changes: The 1.2.2 release notes two behavioral changes in
set_key/unset_key(symlink following and file-mode preservation). These affect the write API.snake_envuses python-dotenv only forload_dotenv(read path); the breaking changes are not in scope.
Tier 2: Alignment Discussion
None identified. This change is isolated to a dependency lock file for a single environment and does not touch any OpenEnv architectural boundary.
Summary
- 0 mechanical issues to fix in this PR
- 0 alignment points for human review
Safe to merge.
Automated review by Claude Code | Learn more
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Alignment Review Report
Automated Checks
- Lint: FAIL - pre-existing formatting issues in
envs/carla_env/andsrc/openenv/are unrelated to this PR;snake_envis clean - Debug code: pre-existing
printstatements insrc/openenv/auto/_discovery.pyand a TODO insrc/openenv/cli/; none introduced by this PR
Tier 1: Fixes Required
None introduced by this PR.
Tier 2: Alignment Discussion
None identified. The change is limited to envs/snake_env/uv.lock - a 3-line addition and 3-line deletion updating the python-dotenv version string, sdist hash/URL, and wheel hash/URL. No source code, no API surface, no architectural impact.
Summary
Patch bump of python-dotenv 1.2.1 -> 1.2.2 in the snake_env lock file only. The upstream release includes a symlink behavior fix for set_key/unset_key and Python 3.14 support; no breaking changes affect OpenEnv's usage pattern (load-only). Safe to merge.
Automated review by Claude Code | Learn more
Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.2.1 to 1.2.2. - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2) --- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
46ea2e9 to
396195c
Compare
Bumps python-dotenv from 1.2.1 to 1.2.2.
Release notes
Sourced from python-dotenv's releases.
Changelog
Sourced from python-dotenv's changelog.
Commits
36004e0Bump version: 1.2.1 → 1.2.2eb20252docs: update changelog for v1.2.2790c5c0Merge commit from fork43340daRemove the use ofshin tests (#612)09d7ceedocs: clarify override behavior and document FIFO support (#610)c8de288ci: improve workflow efficiency with best practices (#609)7bd9e3dAdd Windows testing to CI (#604)1baaf04Drop Python 3.9 support and update to PyPy 3.11 (#608)4a22cf8ci: enable testing on Python 3.14t (free-threaded) (#588)e2e8e77Fix license specifier (#597)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.