Skip to content

chore: bump python generator to 5.14.20 (major)#359

Open
bpapillon wants to merge 1 commit into
mainfrom
bump-python-generator-5.14.20
Open

chore: bump python generator to 5.14.20 (major)#359
bpapillon wants to merge 1 commit into
mainfrom
bump-python-generator-5.14.20

Conversation

@bpapillon

Copy link
Copy Markdown
Collaborator

Major bump of fern-python-sdk 4.64.1 → 5.14.20 to resolve the pytest tmpdir vuln Dependabot flagged in schematic-python (alert #3).

That vuln can only be fixed upstream at the generator — the pytest = "^7.4.0" pin lives in the generator's pyproject.toml template, so Dependabot bumps get overwritten on the next fern generate. Verified via a local fern generate --local run that the new generator emits pytest = "^9.0.3" (≥ the patched 9.0.3).

Also bumps the fern CLI 5.6.0 → 5.50.0, required by the new generator (refuses to run on CLI < 5.44.6).

Since this is a 4.x→5.x generator jump, the regenerated schematic-python PR may carry more than the pytest pin — review its diff and CI before merging.

Major bump of fern-python-sdk 4.64.1 -> 5.14.20 to pull in the pytest
^9.0.3 dev-dependency pin, resolving the pytest tmpdir vuln flagged by
Dependabot (alert #3) that can only be fixed upstream at the generator.

Also bumps the fern CLI 5.6.0 -> 5.50.0, required by the new generator
(refuses to run on CLI < 5.44.6).
@github-actions

Copy link
Copy Markdown
Contributor

@bpapillon bpapillon marked this pull request as ready for review June 18, 2026 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant