Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: SocketDev/socket-python-cli
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.9.4
Choose a base ref
...
head repository: SocketDev/socket-python-cli
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.9.5
Choose a head ref
  • 1 commit
  • 7 files changed
  • 1 contributor

Commits on Sep 21, 2026

  1. Bump gitpython to 3.1.62 and soupsieve to 2.9.2 (#365) 

    Both pins are flagged by pip-audit against the current lock: gitpython by
CVE-2026-87817, CVE-2026-87818 and CVE-2026-87819, and the transitive
soupsieve by GHSA-gjv8-xp57-g29c and GHSA-j934-xhv5-fg8f.

Normalize the gitpython requirement to its lowercase PEP 503 name, matching
uv.lock and the rest of the pins. Dependabot's uv updater errors on this
entry with dependency_file_content_not_changed; the rename is a candidate
fix for that.

Move pip-audit out of the Unit Tests workflow into a Dependency Audit
workflow with a daily schedule. The audit compares the lockfile against
databases that publish continuously, so its result tracks the clock rather
than the commit and needs a trigger to match. A failing scheduled run has no
pull request to report on, so it opens a tracking issue and closes it once
the audit is clean.

Drop the paths filters from the pull_request triggers on Unit Tests and
Version Check. A status check behind a paths filter produces no check context
on a pull request that misses the filter, so those jobs cannot be marked
required while the filters are in place. The push triggers keep theirs.
    @lelia
    lelia authored Sep 21, 2026
    Configuration menu
    Copy the full SHA
    326978d View commit details
    Browse the repository at this point in the history
Loading