Skip to content

fix(security): bump black to 26.10.1 (Dependabot #3) - #80

Open
pratapalakshmi wants to merge 1 commit into
mainfrom
chore/dependabot-sla-2026-11
Open

pratapalakshmi wants to merge 1 commit into
mainfrom
chore/dependabot-sla-2026-11

Conversation

@pratapalakshmi

@pratapalakshmi pratapalakshmi commented Nov 11, 2026 •

Copy link
Copy Markdown

Summary

Clears the one open Dependabot alert (Sprinto SLA).

Package Old New Alert
black (pip, requirements.txt) 26.3.1 26.10.1 #3, high, GHSA-cg8m-r9f2-5wm2 / CVE-2026-114134

Verification

  • pip install -e . -r requirements.txt on Python 3.12 resolves black 26.10.1.
  • ruff check plane/api/v2 plane/models/v2 tests/v2: all checks passed.
  • pytest tests/v2 --ignore=tests/v2/integration: passed. pytest tests/v2/integration: 407 skipped (no PLANE_* env, the expected state).
  • Formatting is unchanged. black --check plane tests scripts flags the same 60 pre-existing files under 26.3.1 and 26.10.1 (identical lists), and plane/api/v2/_generated/constants.py is left unchanged by both. The v2-golden-drift job should not drift.
  • Not run locally: the generator against the plane-ee OpenAPI golden (needs the plane-ee checkout).

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Updated the project’s code-formatting tooling to a newer release as part of routine maintenance.
    • This update does not change app features or behavior visible to end users. No other user-facing changes are included.

Clears Dependabot alert #3 (CVE-2026-114134, high). Formatting output is
unchanged: black 26.3.1 and 26.10.1 flag the same 60 pre-existing files and
leave the generated v2 constants file untouched.
@coderabbitai

coderabbitai Bot commented Nov 11, 2026 •

Copy link
Copy Markdown

Explain Change →

No actionable comments were generated in the recent review.

Walkthrough

The Black dependency pin in requirements.txt changes from version 26.3.1 to 26.10.1.

Changes: Black dependency update

Layer / File(s) Summary
Update Black version pin
requirements.txt
The pinned Black version changes from 26.3.1 to 26.10.1.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: dheeru0198

Merge Risk: Minimal · up to 89691

This updates the Black development dependency to a version that addresses a reported security advisory. No runtime behavior change or merge-blocking risk was found.

Pre-merge checks: Passed 5

Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly identifies the primary change: a security-related upgrade of Black to version 26.10.1. It is concise and matches the changeset.
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

Generate unit tests (beta)

  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Recent review info

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: f9e7eae0-a538-4be3-8b67-ae3617951f76
Commits

Reviewing files that changed from the base of the PR and between 4fe2ec8 and 8969110.

Files selected for processing: 1

  • requirements.txt

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant