[deps-cadence] weekly dependency report #5

Open
opened 2026-09-06 10:01:02 +00:00 by forgejo-actions · 0 comments

Python dependencies

Since last run: No change since last run.

No known advisories.

Behind their pin (1), actionable

package declared installed target
skylos ==4.35.0 4.35.0 4.47.2

Capped on purpose (1), not drift, counts toward nothing

package constraint installed latest outside cap
websockets >=14.0,<15.0 14.2 17.2

4 transitive package(s) also have newer releases. They are not declared in a manifest here, so they are not counted.

Written by .forgejo/workflows/dependency-cadence.yml at 2026-10-11 10:01 UTC. This job only reports: it never changes a pin. The enforcing gate is the security job's --sca --gate prong on every push (ADR CORE-015).

<!-- deps-cadence:python:start --> ### Python dependencies **Since last run:** No change since last run. No known advisories. **Behind their pin (1)**, actionable | package | declared | installed | target | |---|---|---|---| | `skylos` | `==4.35.0` | 4.35.0 | 4.47.2 | **Capped on purpose (1)**, not drift, counts toward nothing | package | constraint | installed | latest outside cap | |---|---|---|---| | `websockets` | `>=14.0,<15.0` | 14.2 | 17.2 | _4 transitive package(s) also have newer releases. They are not declared in a manifest here, so they are not counted._ <!-- deps-cadence:python:state eyJjYXBwZWQiOiBbIndlYnNvY2tldHMiXSwgImN2ZSI6IFtdLCAiZHJpZnQiOiBbInNreWxvcyJdLCAibG9ja3N0YWxlIjogW10sICJzY2FuIjogIm9rIn0= --> <!-- deps-cadence:python:end --> <sub>Written by `.forgejo/workflows/dependency-cadence.yml` at 2026-10-11 10:01 UTC. This job only reports: it never changes a pin. The enforcing gate is the `security` job's `--sca --gate` prong on every push (ADR CORE-015).</sub>
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
official-public/storm-pulse#5
No description provided.