chore(deps-dev): bump the gha group across 1 directory with 11 updates #3335
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
the
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
![ellipsis-dev[bot]](https://avatars.githubusercontent.com/in/64358?s=60&v=4){kind=small}
There was a problem hiding this comment.
Important
Looks good to me! 👍
Reviewed everything up to 7db7be0 in 1 minute and 47 seconds. Click for details.
- Reviewed
41lines of code in1files - Skipped
1files when reviewing. - Skipped posting
8draft comments. View those below. - Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. packages/opentelemetry-instrumentation-llamaindex/pyproject.toml:35
- Draft comment:
flake8 bumped from 7.0.0 to 7.3.0. Consider pinning a narrow range (e.g. >=7.3.0,<7.4.0) for patch updates if that’s preferred. - Reason this comment was not posted:
Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 10% vs. threshold = 50% This is a dependency version suggestion. According to the rules, we should not comment on dependency changes or library versions. While the suggestion to use ranges is technically valid and matches the style used elsewhere in the file, the rules explicitly state not to comment on dependency-related matters. The author likely has a reason for choosing an exact pin vs a range. The comment does point out an inconsistency in versioning style compared to other dependencies in the file. Maybe this consistency is important for the project. Even if consistency is valuable, the rules are clear that we should not comment on dependency versions or assume we know better than the author about version constraints. The comment should be deleted as it violates the rule about not commenting on dependency changes and version numbers.
2. packages/opentelemetry-instrumentation-llamaindex/pyproject.toml:38
- Draft comment:
vcrpy version updated from '^6.0.1' to '>=6.0.1,<8.0.0', which locks out major releases while allowing minor/patch updates. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is purely informative about the version change of a dependency. It doesn't provide any actionable feedback or suggestions for the PR author.
3. packages/opentelemetry-instrumentation-llamaindex/pyproject.toml:40
- Draft comment:
pytest-asyncio now uses a range (>=0.23.7,<1.2.0), ensuring support up to v1.1.x. Verify the lower bound meets all required features. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%The comment is about a dependency version range, which is not something I should comment on according to the rules. It asks to verify the lower bound, which is similar to asking the author to ensure compatibility, which is not allowed.
4. packages/opentelemetry-instrumentation-llamaindex/pyproject.toml:41
- Draft comment:
chromadb version constraint updated to '>=0.5.23,<1.1.0', which allows current v1.0.x updates while preventing unwanted major upgrades. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is purely informative, explaining the version constraint update for a dependency. It does not provide a suggestion, ask for confirmation, or highlight a potential issue. It violates the rule against making purely informative comments.
5. packages/opentelemetry-instrumentation-llamaindex/pyproject.toml:45
- Draft comment:
llama-index-postprocessor-cohere-rerank updated to '>=0.3,<0.5', which accommodates 0.3.x and 0.4.x releases as intended. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is purely informative, providing details about a dependency version update. It does not suggest any action or raise any concerns about the change.
6. packages/opentelemetry-instrumentation-llamaindex/pyproject.toml:52
- Draft comment:
llama-index-llms-cohere version constraint revised to '>=0.4,<0.6' to support the new 0.5.0 release, while guarding against major changes. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is purely informative, providing details about a version constraint change. It does not suggest any action or raise any concerns about the change. According to the rules, purely informative comments should be removed.
7. packages/opentelemetry-instrumentation-llamaindex/pyproject.toml:55
- Draft comment:
onnxruntime upper bound increased to '<1.21.0' to include 1.20.x patches; this update appears correct. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is purely informative, as it states that the update appears correct without providing any actionable feedback or suggestions. It does not ask for confirmation or suggest any changes.
8. packages/opentelemetry-instrumentation-llamaindex/pyproject.toml:56
- Draft comment:
llama-parse now uses a range '>=0.5.20,<0.7.0', covering updates up to version 0.6.x. This seems aligned with recent changes. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is purely informative, as it simply states the range of versions for a dependency and notes that it seems aligned with recent changes. It does not provide a suggestion, ask for confirmation of intent, or point out a potential issue.
Workflow ID: wflow_LDgPXzmqRhGNjIdT
You can customize 
dependabot
bot
force-pushed
the
dependabot/pip/packages/opentelemetry-instrumentation-llamaindex/gha-eb9b5e477f
branch
5 times, most recently
from
a28e0d1 to
e29972b
Compare
dependabot
bot
force-pushed
the
dependabot/pip/packages/opentelemetry-instrumentation-llamaindex/gha-eb9b5e477f
branch
3 times, most recently
from
729fd0f to
80055d5
Compare
dependabot
bot
force-pushed
the
dependabot/pip/packages/opentelemetry-instrumentation-llamaindex/gha-eb9b5e477f
branch
from
80055d5 to
607aa37
Compare
Bumps the gha group with 11 updates in the /packages/opentelemetry-instrumentation-llamaindex directory: | Package | From | To | | --- | --- | --- | | [flake8](https://github.com/pycqa/flake8) | `7.0.0` | `7.3.0` | | [vcrpy](https://github.com/kevin1024/vcrpy) | `6.0.2` | `7.0.0` | | [pytest-recording](https://github.com/kiwicom/pytest-recording) | `0.13.2` | `0.13.4` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `0.23.8` | `1.1.0` | | [chromadb](https://github.com/chroma-core/chroma) | `0.5.23` | `1.0.20` | | [openai](https://github.com/openai/openai-python) | `1.99.9` | `1.101.0` | | llama-index-postprocessor-cohere-rerank | `0.3.0` | `0.4.0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.36` | `2.0.43` | | llama-index-llms-cohere | `0.4.1` | `0.5.0` | | [onnxruntime](https://github.com/microsoft/onnxruntime) | `1.19.2` | `1.20.1` | | llama-parse | `0.5.20` | `0.6.62` | Updates `flake8` from 7.0.0 to 7.3.0 - [Commits](PyCQA/flake8@7.0.0...7.3.0) Updates `vcrpy` from 6.0.2 to 7.0.0 - [Release notes](https://github.com/kevin1024/vcrpy/releases) - [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst) - [Commits](kevin1024/vcrpy@v6.0.2...v7.0.0) Updates `pytest-recording` from 0.13.2 to 0.13.4 - [Release notes](https://github.com/kiwicom/pytest-recording/releases) - [Changelog](https://github.com/kiwicom/pytest-recording/blob/master/docs/changelog.rst) - [Commits](kiwicom/pytest-recording@v0.13.2...v0.13.4) Updates `pytest-asyncio` from 0.23.8 to 1.1.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v0.23.8...v1.1.0) Updates `chromadb` from 0.5.23 to 1.0.20 - [Release notes](https://github.com/chroma-core/chroma/releases) - [Changelog](https://github.com/chroma-core/chroma/blob/main/RELEASE_PROCESS.md) - [Commits](chroma-core/chroma@0.5.23...1.0.20) Updates `openai` from 1.99.9 to 1.101.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v1.99.9...v1.101.0) Updates `llama-index-postprocessor-cohere-rerank` from 0.3.0 to 0.4.0 Updates `sqlalchemy` from 2.0.36 to 2.0.43 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `llama-index-llms-cohere` from 0.4.1 to 0.5.0 Updates `onnxruntime` from 1.19.2 to 1.20.1 - [Release notes](https://github.com/microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md) - [Commits](microsoft/onnxruntime@v1.19.2...v1.20.1) Updates `llama-parse` from 0.5.20 to 0.6.62 --- updated-dependencies: - dependency-name: flake8 dependency-version: 7.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: vcrpy dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: gha - dependency-name: pytest-recording dependency-version: 0.13.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: gha - dependency-name: pytest-asyncio dependency-version: 1.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: gha - dependency-name: chromadb dependency-version: 1.0.20 dependency-type: direct:development update-type: version-update:semver-major dependency-group: gha - dependency-name: openai dependency-version: 1.101.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: llama-index-postprocessor-cohere-rerank dependency-version: 0.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: sqlalchemy dependency-version: 2.0.43 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: gha - dependency-name: llama-index-llms-cohere dependency-version: 0.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: onnxruntime dependency-version: 1.20.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: llama-parse dependency-version: 0.6.62 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/pip/packages/opentelemetry-instrumentation-llamaindex/gha-eb9b5e477f
branch
from
607aa37 to
8946259
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the gha group with 11 updates in the /packages/opentelemetry-instrumentation-llamaindex directory:
7.0.07.3.06.0.27.0.00.13.20.13.40.23.81.1.00.5.231.0.201.99.91.101.00.3.00.4.02.0.362.0.430.4.10.5.01.19.21.20.10.5.200.6.62Updates
flake8from 7.0.0 to 7.3.0Commits
c48217eRelease 7.3.0f9e0f33Merge pull request #1986 from PyCQA/document-f5426bcdb62document F54270a15b8Merge pull request #1985 from PyCQA/upgrade-deps4941a3eupgrade pyflakes / pycodestyle23e4005Merge pull request #1983 from PyCQA/py314019424badd support for t-strings6b6f3d5Merge pull request #1980 from PyCQA/asottile-patch-18dfa669add rtd sphinx configce34111Merge pull request #1976 from PyCQA/document-f824Updates
vcrpyfrom 6.0.2 to 7.0.0Release notes
Sourced from vcrpy's releases.
Changelog
Sourced from vcrpy's changelog.
... (truncated)
Commits
3278619Release v7.0.03fb62e0fix: correctly handle asyncio.run when loop exists8197865build(deps): update sphinx requirement from <8 to <9be651bdpre-commit: Autoupdatea6698edFix aiohttp tests48d0a2eFixed missingversion_stringattribute when used with urllib3>=2.3.05b858b1Fix lintc8d99a9Fix ruff configurationce27c63Merge pull request #736 from kevin1024/drop-python38ab8944dDrop python 3.8 supportUpdates
pytest-recordingfrom 0.13.2 to 0.13.4Release notes
Sourced from pytest-recording's releases.
Changelog
Sourced from pytest-recording's changelog.
Commits
c2d2db7chore: Release 0.13.4cf919c9test: Run tests on Windowsb8b45b7fix: Use fallback for max filename length on Windows8a7e19fdocs: Update README.rst3ad7910chore: Release 0.13.39a6e12cdocs: Add a note for package maintainersa70532bchore: Revert "test: Disable pretty plugin in pytest"6b84832chore(deps): update codecov/codecov-action action to v5.4.2460a7f9test: Add long_cassette_name test9822a50fix: Checkdefault_cassetteto prevent it from being too long.Updates
pytest-asynciofrom 0.23.8 to 1.1.0Release notes
Sourced from pytest-asyncio's releases.
... (truncated)
Commits
ce06c07chore: Prepare release of v1.1.0.d9a8dccci: Workaround missing Tag annotation during release.d66e12f[pre-commit.ci] pre-commit autoupdate9e5e25fBuild(deps): Bump certifi in /dependencies/docs0e63423Build(deps): Bump hypothesis in /dependencies/defaultbd4551cBuild(deps): Bump ncipollo/release-action from 1.16.0 to 1.18.08e20305Build(deps): Bump hypothesis in /dependencies/defaultb7a8ab5Build(deps): Bump coverage from 7.9.1 to 7.9.2 in /dependencies/default8cc378dBuild(deps): Bump typing-extensions in /dependencies/defaultfb6bfbf[pre-commit.ci] pre-commit autoupdateUpdates
chromadbfrom 0.5.23 to 1.0.20Release notes
Sourced from chromadb's releases.
... (truncated)
Commits
b6b059d[RELEASE] 1.0.20 (#5303)1993cd4[RELEASE] CLI 1.1.8, Python 1.0.19, JS 3.0.14 (#5302)19600af[BUG] Fix CLI copy arg number types (#5301)d3602cd[CHORE] Update JS binding deps in the client (#5300)2570b47[RELEASE] CLI 1.1.7, Python 1.0.18, JS 3.0.13 (#5299)51a7d16[ENH] Add support for default space in create coll config (#5293)163133a[BUG] Fix CLI copy offset (#5288)2f06586[DOC] update quota limits (#5297)9837280[ENH] Sync before flushing (#5296)649e14c[BUG]: Don't GC hnsw if it is empty (#5295)Updates
openaifrom 1.99.9 to 1.101.0Release notes
Sourced from openai's releases.
Changelog
Sourced from openai's changelog.
Commits
4e28a42release: 1.101.0 (#2577)e328fb4release: 1.100.372e0ad6chore(internal/ci): setup breaking change detection4ada66frelease: 1.100.2a94bd5bchore(api): accurately represent shape for verbosity on Chat Completionsf889071release: 1.100.1b3547d6fix(types): revert response text config deletionadb1af8release: 1.100.00843a11feat(api): add new text parameters, expiration optionsUpdates
llama-index-postprocessor-cohere-rerankfrom 0.3.0 to 0.4.0Updates
sqlalchemyfrom 2.0.36 to 2.0.43Release notes
Sourced from sqlalchemy's releases.
... (truncated)
Commits
Updates
llama-index-llms-coherefrom 0.4.1 to 0.5.0Updates
onnxruntimefrom 1.19.2 to 1.20.1Release notes
Sourced from onnxruntime's releases.
... (truncated)
Commits
5c1b7cc[ORT 1.20.1 Release] Cherry pick 2nd round (#22845)c6156c1[ORT 1.20.1 Release] Cherry pick 1st round (#22785)c4fb724ORT 1.20.0 release preparation: Cherry pick round 2 (#22643)2d00351ORT 1.20.0 Release: Cherry pick round 1 (#22526)f9e623eUpdate CMake to 3.31.0rc1 (#22433)691de83Enable BrowserStack tests (#22457)bf60442[ROCm] Update ROCm Nuget pipeline to ROCm 6.2 (#22461)2b8fc55Enable RunMatMulTest all test cases support FP16 (#22440)af00a20Change ORT nightly python packages' name (#22450)a5e85a9Fix training artifacts for 2GB+ models andMSELoss(#22414)Updates
llama-parsefrom 0.5.20 to 0.6.62You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsImportant
Update multiple dependencies in
pyproject.tomlforopentelemetry-instrumentation-llamaindexto newer versions.flake8updated to7.3.0.vcrpyupdated to>=6.0.1,<8.0.0.pytest-asyncioupdated to>=0.23.7,<1.2.0.chromadbupdated to>=0.5.23,<1.1.0.llama-index-postprocessor-cohere-rerankupdated to>=0.3,<0.5.llama-index-llms-cohereupdated to>=0.4,<0.6.onnxruntimeupdated to<1.21.0.llama-parseupdated to>=0.5.20,<0.7.0.This description was created by
for 7db7be0. You can customize this summary. It will automatically update as commits are pushed.