chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 in /envs/websearch_env#606
chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 in /envs/websearch_env#606dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.2.1 to 1.2.2. - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2) --- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
|
No reviewable files after applying ignore patterns. |
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Alignment Review Report
Automated Checks
- Lint: PASS - no source code modified
- Debug code: CLEAN - lock file only
Tier 1: Fixes Required
None.
Tier 2: Alignment Discussion
None identified.
Summary
Patch bump of python-dotenv from 1.2.1 to 1.2.2 in envs/websearch_env/uv.lock. The diff is correctly scoped to the single lock file with updated version, source URL, and hashes.
The upstream changelog notes breaking changes in set_key/unset_key symlink behavior, but these affect callers who write to .env files - a pattern not typical for an environment server reading config at startup. No impact expected on websearch_env.
No invariants touched. Safe to merge.
Automated review by Claude Code | Learn more
Darktex
left a comment
There was a problem hiding this comment.
Note: This is an automated review by Claude Code, not a human review.
Routine patch-level dependency bump; safe to merge.
- Single file changed:
envs/websearch_env/uv.lock(3 additions, 3 deletions — URL and hash update only). - Bump is patch-level (1.2.1 → 1.2.2); no OpenEnv source files modified.
- Upstream release notes list breaking changes only in
dotenv.set_key/dotenv.unset_keysymlink handling and file-mode preservation. OpenEnv'swebsearch_envusespython-dotenvexclusively for reading.envvariables at startup; neither of those APIs is exercised here, so the breaking changes have no impact. - No lint concerns, no debug artifacts, no invariant violations.
Automated review by Claude Code | Learn more
Bumps python-dotenv from 1.2.1 to 1.2.2.
Release notes
Sourced from python-dotenv's releases.
Changelog
Sourced from python-dotenv's changelog.
Commits
36004e0Bump version: 1.2.1 → 1.2.2eb20252docs: update changelog for v1.2.2790c5c0Merge commit from fork43340daRemove the use ofshin tests (#612)09d7ceedocs: clarify override behavior and document FIFO support (#610)c8de288ci: improve workflow efficiency with best practices (#609)7bd9e3dAdd Windows testing to CI (#604)1baaf04Drop Python 3.9 support and update to PyPy 3.11 (#608)4a22cf8ci: enable testing on Python 3.14t (free-threaded) (#588)e2e8e77Fix license specifier (#597)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.