From 08bbc6c37b1a00ccaf92ff5fac85cf0d699cda11 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 8 Jan 2026 06:36:42 +0000 Subject: [PATCH 1/2] build(deps): bump urllib3 in the pip group across 1 directory Bumps the pip group with 1 update in the / directory: [urllib3](https://github.com/urllib3/urllib3). Updates `urllib3` from 2.6.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](https://github.com/urllib3/urllib3/compare/2.6.0...2.6.3) --- updated-dependencies: - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index a4c93ecc87..ce11ab2364 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,4 +2,4 @@ certifi==2025.7.14 charset-normalizer==3.4.2 idna==3.10 requests==2.32.4 -urllib3==2.6.0 +urllib3==2.6.3 From 159a238cfa91cf35bf0b8e8f3c9d550634030e3f Mon Sep 17 00:00:00 2001 From: Roman Zavarnitsyn Date: Mon, 26 Jan 2026 20:15:01 +0100 Subject: [PATCH 2/2] Add missing permissions for update-deps --- .github/workflows/update-deps.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml index 0519496b33..e4e2d5433b 100644 --- a/.github/workflows/update-deps.yml +++ b/.github/workflows/update-deps.yml @@ -9,6 +9,11 @@ on: branches: - main +permissions: + contents: write + pull-requests: write + actions: write + jobs: native: runs-on: ubuntu-latest