chore(deps): update all non-major dependencies (patch) - #1497
Conversation
Signed-off-by:
|
You do not have enough credits to review this pull request. Please purchase more credits to continue. |
📝 WalkthroughSummary by CodeRabbit
WalkthroughThis PR updates dependency versions across two configuration files: bumping the Renovate GitHub Action from v46.1.7 to v46.1.8 in the workflow file, and updating minimum version constraints for three tool dependencies ( Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Possibly related issues
Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Mesa DescriptionTL;DRUpdates several non-major dependencies, including What changed?
Description generated by Mesa. Update settings |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🧹 Nitpick comments (1)
pyproject.toml (1)
12-16: Update package versions—newer releases are available.All three packages have newer versions available:
claude-swap: 0.7.3 → 0.8.0mistral-vibe: 2.7.4 → 2.7.6 (aligns with PR objectives)ruff: 0.15.10 → 0.15.11No security advisories were found for any of these packages. Consider updating to the latest versions, particularly
mistral-vibeto the pending 2.7.6 release.🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed. In `@pyproject.toml` around lines 12 - 16, Update the dependency versions in pyproject.toml: bump "claude-swap" from 0.7.3 to 0.8.0, "mistral-vibe" from 2.7.4 to 2.7.6, and "ruff" from 0.15.10 to 0.15.11; locate the package entries for "claude-swap", "mistral-vibe", and "ruff" in the dependency list and change their version specifiers accordingly, then run your dependency lock/install command to verify compatibility.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In @.github/workflows/renovate.yml:
- Line 17: The workflow currently references the Renovate action version string
"renovatebot/github-action@v46.1.8"; update that exact reference to
"renovatebot/github-action@v46.1.9" so the workflow uses the new release, commit
the change to the workflow file, and push to trigger CI to verify the updated
action runs correctly.
---
Nitpick comments:
In `@pyproject.toml`:
- Around line 12-16: Update the dependency versions in pyproject.toml: bump
"claude-swap" from 0.7.3 to 0.8.0, "mistral-vibe" from 2.7.4 to 2.7.6, and
"ruff" from 0.15.10 to 0.15.11; locate the package entries for "claude-swap",
"mistral-vibe", and "ruff" in the dependency list and change their version
specifiers accordingly, then run your dependency lock/install command to verify
compatibility.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: 4da5a25a-f2e4-413b-9380-01eb64854a23
📒 Files selected for processing (2)
.github/workflows/renovate.ymlpyproject.toml
| uses: actions/checkout@v6 | ||
| - name: Renovate | ||
| uses: renovatebot/github-action@v46.1.7 | ||
| uses: renovatebot/github-action@v46.1.8 |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Description: Check if v46.1.8 exists and find the latest version of renovatebot/github-action
# Check if v46.1.8 tag exists
echo "Checking if v46.1.8 exists..."
gh api repos/renovatebot/github-action/git/ref/tags/v46.1.8 --jq '.ref' 2>/dev/null || echo "Version v46.1.8 not found"
# Get latest releases
echo -e "\nLatest releases:"
gh api repos/renovatebot/github-action/releases --jq '.[0:5] | .[] | "\(.tag_name) - \(.published_at)"'
# Check for security advisories
echo -e "\nChecking for security advisories..."
gh api graphql -f query='
{
repository(owner: "renovatebot", name: "github-action") {
vulnerabilityAlerts(first: 5) {
nodes {
securityAdvisory {
summary
severity
publishedAt
}
vulnerableManifestFilename
vulnerableRequirements
}
}
}
}'Repository: shunkakinoki/dotfiles
Length of output: 383
Update renovatebot/github-action to v46.1.9
v46.1.9 is now available and should be used instead of v46.1.8. The newer version was released on April 13, 2026, with no security advisories.
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In @.github/workflows/renovate.yml at line 17, The workflow currently references
the Renovate action version string "renovatebot/github-action@v46.1.8"; update
that exact reference to "renovatebot/github-action@v46.1.9" so the workflow uses
the new release, commit the change to the workflow file, and push to trigger CI
to verify the updated action runs correctly.
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates several tool dependencies in the pyproject.toml file, specifically bumping the versions for claude-swap, mistral-vibe, and ruff. The review feedback suggests that mistral-vibe and ruff should be updated to even newer patch versions (2.7.6 and 0.15.11, respectively) to fully align with the pull request's intent and ensure the latest fixes are included.
| "mempalace>=3.1.0", | ||
| "mistral-vibe>=2.7.3", | ||
| "ruff>=0.15.9", | ||
| "mistral-vibe>=2.7.4", |
There was a problem hiding this comment.
The PR description indicates that mistral-vibe has a pending update to 2.7.6. Additionally, note that v2.7.4 introduces a change where only agents of type agent are loadable with the --agent flag. If your workflow relies on other agent types with this flag, please verify compatibility. Consider updating to the latest available patch version 2.7.6 to fully satisfy the PR's intent.
| "mistral-vibe>=2.7.4", | |
| "mistral-vibe>=2.7.6", |
| "mistral-vibe>=2.7.3", | ||
| "ruff>=0.15.9", | ||
| "mistral-vibe>=2.7.4", | ||
| "ruff>=0.15.10", |
There was a problem hiding this comment.
The PR description indicates that ruff has a pending update to 0.15.11. Since this PR aims to update all non-major dependencies, it is recommended to use the latest available patch version to ensure all fixes are included.
| "ruff>=0.15.10", | |
| "ruff>=0.15.11", |
2 participants
This PR contains the following updates:
>=0.7.1→>=0.7.3>=2.7.3→>=2.7.42.7.6(+1)v46.1.7→v46.1.8v46.1.9>=0.15.9→>=0.15.100.15.11Release Notes
realiti4/claude-swap (claude-swap)
v0.7.3Compare Source
What's Changed
Full Changelog: realiti4/claude-swap@v0.7.2...v0.7.3
v0.7.2Compare Source
What's Changed
New Contributors
Full Changelog: realiti4/claude-swap@v0.7.1...v0.7.2
mistralai/mistral-vibe (mistral-vibe)
v2.7.4Compare Source
Added
/mcpcommand to display MCP servers and their statusChanged
Fixed
renovatebot/github-action (renovatebot/github-action)
v46.1.8Compare Source
Documentation
Miscellaneous Chores
Build System
Continuous Integration
astral-sh/ruff (ruff)
v0.15.10Compare Source
Released on 2026-04-09.
Preview features
flake8-logging] Allow closures in except handlers (LOG004) (#24464)flake8-self] MakeSLFdiagnostics robust to non-self-named variables (#24281)flake8-simplify] Make the fix forcollapsible-ifsafe inpreview(SIM102) (#24371)Bug fixes
E502fixes in f-strings and t-strings (#24410)dedent_to(#24381)pyupgrade] Fix panic caused by handling of octals (UP012) (#24390)Rule changes
ruff] Treat f-string interpolation as potential side effect (RUF019) (#24426)Server
Documentation
Contributors
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
Summary by cubic
Updated non-major dependencies and the Renovate workflow to the latest patch releases. Changes are limited to
pyproject.tomland.github/workflows/renovate.yml.claude-swap→>=0.7.3(fixes deadlock on OAuth token refresh)mistral-vibe→>=2.7.4(startup and stability fixes)ruff→>=0.15.10(linter bug fixes and rule updates)renovatebot/github-action→v46.1.8(maintenance updates)Written for commit dec9330. Summary will update on new commits.