Skip to content

chore(deps-dev)(deps-dev): update safety requirement from <4.0.0,>=2.0.0 to >=3.7.0,<4.0.0#156

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/safety-gte-3.7.0-and-lt-4.0.0
Closed

chore(deps-dev)(deps-dev): update safety requirement from <4.0.0,>=2.0.0 to >=3.7.0,<4.0.0#156
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/safety-gte-3.7.0-and-lt-4.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Updates the requirements on safety to permit the latest version.

Release notes

Sourced from safety's releases.

Version 3.7.0

What's Changed

  • bump: version 3.7.0b5 → 3.7.0 (9df3a6f)
  • fix: npm ecosystem check on render package details (#820) (9780ac2)
Changelog

Sourced from safety's changelog.

3.7.0 (2025-11-06)

Fix

  • npm ecosystem check on render package details (#820)

3.7.0b5 (2025-11-04)

Fix

  • bash priority issues (#819)

3.7.0b4 (2025-11-03)

3.7.0b3 (2025-11-03)

3.7.0b2 (2025-11-03)

3.7.0b1 (2025-11-03)

3.7.0b0 (2025-10-22)

Feat

  • add firewall support for NPM (#800)

Fix

  • replace deprecated pkg_resources with importlib.metadata (#813)

3.6.2 (2025-09-24)

3.6.2b0 (2025-09-23)

Fix

  • allow passing package and tool location (#797)

Refactor

  • firewall tools and parsers (#798)

3.6.1 (2025-09-01)

Fix

  • Import rich_utils as a module and don't access as an attribute. (#780)

3.6.1b0 (2025-08-25)

... (truncated)

Commits
  • 9df3a6f bump: version 3.7.0b5 → 3.7.0
  • 9780ac2 fix: npm ecosystem check on render package details (#820)
  • 7f138f1 bump: version 3.7.0b4 → 3.7.0b5
  • 933dc82 fix: bash priority issues (#819)
  • 3b1e4dc bump: version 3.7.0b3 → 3.7.0b4
  • c5134b5 ci: remove version from the artifacts name (#818)
  • 04f24e5 bump: version 3.7.0b2 → 3.7.0b3
  • a08a347 ci: separate checksum artifacts for signed and unsigned builds (#817)
  • 2ff7ace bump: version 3.7.0b1 → 3.7.0b2
  • 2964f19 ci: load version on release jobs (#816)
  • Additional commits viewable in compare view

Updates the requirements on [safety](https://github.com/pyupio/safety) to permit the latest version.
- [Release notes](https://github.com/pyupio/safety/releases)
- [Changelog](https://github.com/pyupio/safety/blob/main/CHANGELOG.md)
- [Commits](pyupio/safety@2.0.0...3.7.0)

---
updated-dependencies:
- dependency-name: safety
  dependency-version: 3.7.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/safety-gte-3.7.0-and-lt-4.0.0 branch from 7984773 to c090e05 Compare April 29, 2026 10:14
@longieirl
Copy link
Copy Markdown
Owner

Superseded by #161 which consolidates all pending Dependabot bumps into a single commit.

@longieirl longieirl closed this Apr 29, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 29, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/pip/safety-gte-3.7.0-and-lt-4.0.0 branch April 29, 2026 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant