Prepare for release with version bump and dependency refresh#20
Conversation
uv audit previously showed multiple vulnerabilities which are now fixed by the dependency update
WalkthroughVersion bumps across three interdependent packages: Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Poem
🚥 Pre-merge checks | ✅ 2 | ❌ 1❌ Failed checks (1 inconclusive)
✅ Passed checks (2 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
🧹 Nitpick comments (1)
python-interpreter/packages/afm-cli/pyproject.toml (1)
14-15: Capafm-langchainto the same release train asafm-coreto prevent future resolver conflicts.Line 14 pins
afm-core==0.3.0, but Line 15 leavesafm-langchain>=0.3.0unbounded. Whenafm-langchain0.4.0 releases and requiresafm-core>=0.4.0, this constraint will become unsatisfiable. Add an upper bound:afm-langchain>=0.3.0,<0.4.0.Proposed diff
dependencies = [ "afm-core==0.3.0", - "afm-langchain>=0.3.0", + "afm-langchain>=0.3.0,<0.4.0", ]🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed. In `@python-interpreter/packages/afm-cli/pyproject.toml` around lines 14 - 15, Update the afm-langchain dependency constraint in pyproject.toml so it is capped to the same release train as afm-core: change the dependency declaration for "afm-langchain>=0.3.0" to include an upper bound like "afm-langchain>=0.3.0,<0.4.0" to avoid future resolver conflicts when afm-langchain 0.4.x requires a newer afm-core; adjust the dependency string where "afm-core==0.3.0" and "afm-langchain>=0.3.0" are declared.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Nitpick comments:
In `@python-interpreter/packages/afm-cli/pyproject.toml`:
- Around line 14-15: Update the afm-langchain dependency constraint in
pyproject.toml so it is capped to the same release train as afm-core: change the
dependency declaration for "afm-langchain>=0.3.0" to include an upper bound like
"afm-langchain>=0.3.0,<0.4.0" to avoid future resolver conflicts when
afm-langchain 0.4.x requires a newer afm-core; adjust the dependency string
where "afm-core==0.3.0" and "afm-langchain>=0.3.0" are declared.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: dbaef8e7-b92f-4f86-9d2e-b26c56c6be3d
⛔ Files ignored due to path filters (1)
python-interpreter/uv.lockis excluded by!**/*.lock
📒 Files selected for processing (3)
python-interpreter/packages/afm-cli/pyproject.tomlpython-interpreter/packages/afm-core/pyproject.tomlpython-interpreter/packages/afm-langchain/pyproject.toml
Purpose
Updates the pyproject files for the following package releases,
v0.3.0v0.4.0v0.3.0Also updates the 3rd party dependencies for latest fixes and security patches.
Note:
uv auditwas used to check vulnerable 3rd party dependencies.Merge after #18
Summary by CodeRabbit