Skip to content

chore(deps): update dependency pip-audit to v2.10.0 - autoclosed#290

Closed
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit intomainfrom
konflux/mintmaker/main/pip-audit-2.x-lockfile
Closed

chore(deps): update dependency pip-audit to v2.10.0 - autoclosed#290
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit intomainfrom
konflux/mintmaker/main/pip-audit-2.x-lockfile

Conversation

@red-hat-konflux-kflux-prd-rh02
Copy link
Copy Markdown
Contributor

@red-hat-konflux-kflux-prd-rh02 red-hat-konflux-kflux-prd-rh02 Bot commented Dec 8, 2025

This PR contains the following updates:

Package Change Age Confidence
pip-audit 2.9.02.10.0 age confidence

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

pypa/pip-audit (pip-audit)

v2.10.0

Compare Source

Added
  • pip-audit now supports the --osv-url URL flag, which can be used to
    retrieve vulnerabilities from a custom OSV service. This is useful for
    organizations that host their own mirror of the OSV database, or that
    have custom OSV records
    (#​810)

  • pip-audit now supports the Ecosyste.ms vulnerability service with
    --vulnerability-service=esms
    (#​903).

Changed
  • The minimum version of Python is now 3.10
    (#​905)
Fixed
  • Fixed a bug where pip-audit would fail to parse pyproject.toml files
    containing TOML 1.0.0 features
    (#​910)

  • CycloneDX JSON/XML output now correctly links vulnerabilities to their
    affected components via the affects field
    (#​980)


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 05:59 AM, only on Monday ( * 0-5 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@snyk-io
Copy link
Copy Markdown

snyk-io Bot commented Dec 8, 2025

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh02 red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/mintmaker/main/pip-audit-2.x-lockfile branch from f73cea6 to f5d6345 Compare April 6, 2026 00:23
@red-hat-konflux-kflux-prd-rh02 red-hat-konflux-kflux-prd-rh02 Bot changed the title chore(deps): update dependency pip-audit to v2.10.0 chore(deps): update dependency pip-audit to v2.10.0 - autoclosed Apr 8, 2026
@red-hat-konflux-kflux-prd-rh02 red-hat-konflux-kflux-prd-rh02 Bot deleted the konflux/mintmaker/main/pip-audit-2.x-lockfile branch April 8, 2026 12:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants