Skip to content

Batch dependabot uv updates#11819

Merged
mergify[bot] merged 1 commit into
haskell:masterfrom
cabalism:bump/dependabot-uv-batch
May 16, 2026
Merged

Batch dependabot uv updates#11819
mergify[bot] merged 1 commit into
haskell:masterfrom
cabalism:bump/dependabot-uv-batch

Conversation

@philderbeast
Copy link
Copy Markdown
Collaborator

@philderbeast philderbeast commented May 12, 2026

Rather than get approvals and merge dependabot individual pull requests, I've created a branch and cherry picked each of the following:

This pull request includes all of those changes.

Manual QA step would be to cd doc followed with uv sync and check for changes to the lock file doc/uv.lock. Also make users-guide and check the docs.

  • Patches conform to the coding conventions.
  • Is this a PR that fixes CI? If so, it will need to be backported to older cabal release branches (ask maintainers for directions).

@philderbeast philderbeast mentioned this pull request May 13, 2026
Merged
2 tasks
@ulysses4ever ulysses4ever requested a review from jappeace May 13, 2026 18:51
@ulysses4ever
Copy link
Copy Markdown
Collaborator

ulysses4ever commented May 13, 2026

@jappeace since you approved #11812, I thought, you might give a hand here: this one just manually batches several earlier PRs from Dependabot

@jappeace
Copy link
Copy Markdown
Collaborator

jappeace commented May 13, 2026

nice, thanks 🙏🏽

@ulysses4ever ulysses4ever added merge me Tell Mergify Bot to merge and removed attention: needs-review labels May 13, 2026
@mergify mergify Bot added the ready and waiting Mergify is waiting out the cooldown period label May 13, 2026
@philderbeast
Copy link
Copy Markdown
Collaborator Author

philderbeast commented May 15, 2026 •
edited
Loading

There's quite a bit of detail in each of dependabot's commit messages. Should I squash them (and tidy up the message formatting) or not?

@mergify mergify Bot added merge delay passed Applied (usually by Mergify) when PR approved and received no updates for 2 days queued labels May 15, 2026
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented May 15, 2026 •
edited
Loading

Merge Queue Status

This pull request spent 3 hours 16 minutes 27 seconds in the queue, including 1 hour 21 minutes 18 seconds running CI.

Reason

The merge conditions cannot be satisfied due to failing checks

Hint

You may have to fix your CI before adding the pull request to the queue again.
If you update this pull request, to fix the CI, it will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue instead, you can requeue the pull request, without updating it, by posting a @mergifyio queue comment.

mergify Bot added a commit that referenced this pull request May 15, 2026
@mergify
Merge of #11819
59d845a
This was referenced May 15, 2026
Merged
Closed
@ulysses4ever
Copy link
Copy Markdown
Collaborator

ulysses4ever commented May 15, 2026

Totally up to you. I personally some time those messages particularly useful.

@philderbeast
Copy link
Copy Markdown
Collaborator Author

philderbeast commented May 16, 2026

The commit messages dependabot wrote are detailed and useful. I'll let them go through as individual commits this time.

@mergify mergify Bot added dequeued and removed queued labels May 16, 2026
@philderbeast philderbeast force-pushed the bump/dependabot-uv-batch branch from cc6ae66 to 2175952 Compare May 16, 2026 10:43
@mergify mergify Bot removed the dequeued label May 16, 2026
@dependabot @philderbeast
Batch dependabot uv updates
4fb5777 
Bump idna from 3.11 to 3.13 in /doc

Bumps [idna](https://github.com/kjd/idna) from 3.11 to 3.13.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.11...v3.13)

---
updated-dependencies:
- dependency-name: idna
  dependency-version: '3.13'
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump certifi from 2026.1.4 to 2026.4.22 in /doc

Bumps [certifi](https://github.com/certifi/python-certifi) from 2026.1.4 to 2026.4.22.
- [Commits](certifi/python-certifi@2026.01.04...2026.04.22)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.4.22
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump sphinx-rtd-theme from 3.0.2 to 3.1.0 in /doc

Bumps [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) from 3.0.2 to 3.1.0.
- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)
- [Commits](readthedocs/sphinx_rtd_theme@3.0.2...3.1.0)

---
updated-dependencies:
- dependency-name: sphinx-rtd-theme
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump sphinx from 8.2.3 to 9.1.0 in /doc

Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 8.2.3 to 9.1.0.
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinx@v8.2.3...v9.1.0)

---
updated-dependencies:
- dependency-name: sphinx
  dependency-version: 9.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump packaging from 25.0 to 26.2 in /doc

Bumps [packaging](https://github.com/pypa/packaging) from 25.0 to 26.2.
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@25.0...26.2)

---
updated-dependencies:
- dependency-name: packaging
  dependency-version: '26.2'
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump urllib3 in /doc in the uv group across 1 directory

Bumps the uv group with 1 update in the /doc directory: [urllib3](https://github.com/urllib3/urllib3).

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: direct:development
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@philderbeast philderbeast force-pushed the bump/dependabot-uv-batch branch from 2175952 to 4fb5777 Compare May 16, 2026 10:44
@philderbeast
Copy link
Copy Markdown
Collaborator Author

philderbeast commented May 16, 2026

I'll let them go through as individual commits this time.

It was Friday night and the pull request was already queued to merge when I let it go. It was dequeued overnight so I squashed those 7 commits down to one this morning.

@mergify mergify Bot added the queued label May 16, 2026
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented May 16, 2026 •
edited
Loading

Merge Queue Status

  • ✅ Entered queue — 2026-05-16 12:36 UTC · Rule: default
  • ✅ Checks skipped · PR is already up-to-date
  • ✅ Merged — 2026-05-16 12:46 UTC · at 4fb5777a7c690d6e1fe87a238697fe11a4ed6d14 · merge

This pull request spent 10 minutes 27 seconds in the queue, including 4 seconds running CI.

Required conditions to merge
  • #approved-reviews-by >= 2 [🛡 GitHub branch protection]
  • #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • #review-threads-unresolved = 0 [🛡 GitHub branch protection]
  • any of [🛡 GitHub branch protection]:
    • check-success = Doctest Cabal
    • check-neutral = Doctest Cabal
    • check-skipped = Doctest Cabal
  • any of [🛡 GitHub branch protection]:
    • check-success = Meta checks
    • check-neutral = Meta checks
    • check-skipped = Meta checks
  • any of [🛡 GitHub branch protection]:
    • check-success = docs/readthedocs.org:cabal
    • check-neutral = docs/readthedocs.org:cabal
    • check-skipped = docs/readthedocs.org:cabal
  • any of [🛡 GitHub branch protection]:
    • check-success = Validate post job
    • check-neutral = Validate post job
    • check-skipped = Validate post job
  • any of [🛡 GitHub branch protection]:
    • check-success = fourmolu
    • check-neutral = fourmolu
    • check-skipped = fourmolu
  • any of [🛡 GitHub branch protection]:
    • check-success = hlint
    • check-neutral = hlint
    • check-skipped = hlint
  • any of [🛡 GitHub branch protection]:
    • check-success = Bootstrap post job
    • check-neutral = Bootstrap post job
    • check-skipped = Bootstrap post job
  • any of [🛡 GitHub branch protection]:
    • check-success = whitespace
    • check-neutral = whitespace
    • check-skipped = whitespace
  • any of [🛡 GitHub branch protection]:
    • check-success = Check sdist post job
    • check-neutral = Check sdist post job
    • check-skipped = Check sdist post job
  • any of [🛡 GitHub branch protection]:
    • check-success = Changelogs
    • check-neutral = Changelogs
    • check-skipped = Changelogs

@mergify mergify Bot merged commit c44e95a into haskell:master May 16, 2026
85 of 86 checks passed
@mergify mergify Bot removed the queued label May 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jappeace jappeace jappeace approved these changes

@ulysses4ever ulysses4ever ulysses4ever approved these changes

Assignees

No one assigned

Labels

merge delay passed Applied (usually by Mergify) when PR approved and received no updates for 2 days merge me Tell Mergify Bot to merge ready and waiting Mergify is waiting out the cooldown period

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@philderbeast @ulysses4ever @jappeace