Repository navigation
chore(deps): bundle the Dependabot updates, pin redis-py 8 defaults - #15
Merged
Merged
Conversation
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit 9e44016)
Updates the requirements on [pycryptodome](https://github.com/Legrandin/pycryptodome) to permit the latest version. - [Release notes](https://github.com/Legrandin/pycryptodome/releases) - [Changelog](https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst) - [Commits](Legrandin/pycryptodome@v3.20.0...v4.4.0) --- updated-dependencies: - dependency-name: pycryptodome dependency-version: 4.2.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit a7766ed)
Updates the requirements on [streamlink](https://github.com/streamlink/streamlink) to permit the latest version. - [Release notes](https://github.com/streamlink/streamlink/releases) - [Changelog](https://github.com/streamlink/streamlink/blob/master/CHANGELOG.md) - [Commits](streamlink/streamlink@8.0.0...8.6.3) --- updated-dependencies: - dependency-name: streamlink dependency-version: 8.6.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit 1f62406)
Updates the requirements on [markupsafe](https://github.com/pallets/markupsafe) to permit the latest version. - [Release notes](https://github.com/pallets/markupsafe/releases) - [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst) - [Commits](pallets/markupsafe@2.1.0...3.0.4) --- updated-dependencies: - dependency-name: markupsafe dependency-version: 3.0.4 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit d60b3d7)
Updates the requirements on [numpy](https://github.com/numpy/numpy) to permit the latest version. - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v1.26.0...v2.2.6) --- updated-dependencies: - dependency-name: numpy dependency-version: 2.2.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit 0eafe4c)
Updates the requirements on [redis](https://github.com/redis/redis-py) to permit the latest version. - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v5.0.0...v8.1.0) --- updated-dependencies: - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit d85da27)
redis-py 8 defaults to RESP3 and retries the connect; an unreachable Redis took 4.23 s instead of 2.01 s before falling back to local mode (measured on Windows). Pinning both keeps the old behaviour and older servers working. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…inimum versions One retry on timeouts only (as redis-py 5), connection errors are not retried. The test now builds the real pool and checks the connection's protocol and retry behaviour instead of a mocked kwarg. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This was referenced Nov 12, 2026
This was referenced Nov 12, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bundles the open Dependabot updates into one branch, because branch protection requires an up-to-date base and every single merge would restart the CI of all the others.
AES.MODE_GCMandget_random_bytesare used (core/storage/crypto.py)Markup(escape()),+andjoinare used#3 (actions/setup-python 7) is already on master.
redis-py 8. The new defaults are RESP3 and retries on connection errors too. With an unreachable Redis, the fallback to local mode took 4.23 s instead of 2.01 s (measured on Windows against a closed port).
core/redis_client.pynow pins the redis-py 5 behaviour:protocol=2and one immediate retry on timeouts only (_legacy_retry()). Measured again: 2.03 s with redis 8.1.0, 2.01 s with 5.2.1.tests/test_redis_client.pybuilds the real pool and checks the connection's protocol, the timeout retry and that a connection error is tried exactly once. CHANGELOG lists the new minimum versions under Breaking changes.Conflict: #4 and #7 change neighbouring lines in
requirements.txt; resolved topycryptodome>=4.4.0andnumpy>=2.2.6,<3.0.0.Local:
unittest discoverOK (skipped=20),ruff check .passed.Supersedes #2, #4, #5, #6, #7, #8.
🤖 Generated with Claude Code