chore(deps): bump tornado from 6.5.6 to 6.5.7 in /envs/wildfire_env - #807
chore(deps): bump tornado from 6.5.6 to 6.5.7 in /envs/wildfire_env#807dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
Dependencies
python:uv
|
The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update. |
Darktex
left a comment
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Clean, automated patch-level bump of tornado 6.5.6 → 6.5.7 scoped entirely to envs/wildfire_env/uv.lock.
Tier 1 (bugs/lint): No issues. Only lockfile version strings, URLs, and SHA-256 hashes change (13 add / 13 del). tornado is a transitive dependency via uvicorn[standard] with no direct pin, so no pyproject.toml change is expected. The upstream release is a single bugfix (curl HTTP client object reset before freelist return) — no breaking API changes.
Tier 2 (alignment): None. Lockfile-only, single-environment patch bump with no architectural or API-surface implications.
Safe to merge.
Automated review by Claude Code | Learn more
Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.5.6 to 6.5.7. - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.6...v6.5.7) --- updated-dependencies: - dependency-name: tornado dependency-version: 6.5.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
81f5c14 to
c757ae5
Compare
|
Grouped into #815 for easier maintainer review. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
2 participants
Bumps tornado from 6.5.6 to 6.5.7.
Changelog
Sourced from tornado's changelog.
... (truncated)
Commits
48fc2d4Merge pull request #3633 from bdarnell/curl-reset-654ae1dddRelease notes and version bump for 6.5.73154caacurl_httpclient: Reset the curl object before putting it on the freelist7d869c0Merge pull request #3631 from bdarnell/cve-links288241fdocs: Use the correct link syntax8da981cdocs: Add CVE links to 6.5.6 release notes