Repository navigation
Synchroniser les mises à jour Python avec un verrou maintenu par Dependabot - #14
Merged
NukaColadmin merged 2 commits intoOct 30, 2026
Merged
Conversation
Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [uvicorn](https://github.com/Kludex/uvicorn), [langgraph](https://github.com/langchain-ai/langgraph), [langchain-openai](https://github.com/langchain-ai/langchain) and [pytest](https://github.com/pytest-dev/pytest) to permit the latest version. Updates `fastapi` to 0.162.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.141.0...0.162.0) Updates `uvicorn` to 0.54.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.53.0...0.54.0) Updates `langgraph` to 1.2.18 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@1.2.11...1.2.18) Updates `langchain-openai` to 1.7.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.6.2...langchain-openai==1.7.3) Updates `pytest` to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.1.0...9.1.1) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.162.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: uvicorn dependency-version: 0.54.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: langgraph dependency-version: 1.2.18 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: langchain-openai dependency-version: 1.7.3 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
NukaColadmin
changed the title
dependabot
Bot
deleted the
dependabot/pip/service/python-dependencies-4b4fb82efa
branch
October 30, 2026 10:44
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Le contrôle du service échouait dès l'installation : les nouvelles versions minimales, notamment
fastapi>=0.162.0, étaient incompatibles avec les versions derequirements.lock. Dependabot mettait à jour le manifeste sans reconnaître ce verrou.Les dépendances directes sont désormais déclarées dans
service/requirements.inet pip-compile génèreservice/requirements.txt, un couple reconnu par Dependabot. Le verrou intègre les mises à jour proposées et leurs dépendances nécessaires. Docker, la CI et les commandes documentées utilisent ce même verrou ; la CI vérifie aussi sa compatibilité avec le manifeste et exécutepip check.Validation :
pip checkréussis.La procédure de génération du verrou est documentée dans
docs/securite.md. Le durcissement et la vérification de cohérence restent actifs.