fix(deps): update dependency beautifulsoup4 to v4.14.3#3510
fix(deps): update dependency beautifulsoup4 to v4.14.3#3510renovate[bot] wants to merge 1 commit intomasterfrom
Conversation
|
7d47d9b to
e90679d
Compare
eacc7b4 to
f13d044
Compare
7bbd17a to
56120c3
Compare
f7f1e2c to
af48d29
Compare
f847fd8 to
fe17da1
Compare
|
This is blocked on Wagtail upgrade as per #3510 (comment). |
| "Pillow==10.4.0", | ||
| "PyNaCl==1.6.2", | ||
| "beautifulsoup4==4.8.2", | ||
| "beautifulsoup4==4.14.3", |
There was a problem hiding this comment.
Bug: The pyproject.toml dependency for beautifulsoup4 was updated, but the uv.lock file was not regenerated. This will cause the production build to fail.
Severity: CRITICAL
Suggested Fix
Regenerate the uv.lock file to reflect the updated dependency version specified in pyproject.toml. This can be done by running the appropriate uv command to update and sync the lock file.
Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.
Location: pyproject.toml#L17
Potential issue: The `pyproject.toml` file specifies `beautifulsoup4==4.14.3`, but the
`uv.lock` file still contains version `4.8.2`. The production Docker build uses the `uv
sync --frozen` command, which enforces that the lock file's contents must match the
project's dependencies. This version mismatch will cause a constraint failure, leading
to a failed build in the CI/CD pipeline and preventing the application from being
deployed.
Did we get this right? 👍 / 👎 to inform future reviews.
This PR contains the following updates:
==4.8.2→==4.14.3Configuration
📅 Schedule: Branch creation - "every weekend" in timezone US/Eastern, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.