google / osv.dev

Open source vulnerability DB and triage service.
https://osv.dev
Apache License 2.0
1.45k stars 173 forks source link

Lock file maintenance appengine-backend #2339

Closed renovate-bot closed 5 days ago

renovate-bot commented 6 days ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
lockFileMaintenance All locks refreshed
Flask-Caching packages minor ==2.1.0 -> ==2.3.0 age adoption passing confidence
google-auth packages minor ==2.29.0 -> ==2.30.0 age adoption passing confidence
google-cloud-pubsub packages patch ==2.21.1 -> ==2.21.5 age adoption passing confidence
grpcio-status packages minor ==1.62.2 -> ==1.64.1 age adoption passing confidence
requests (changelog) packages patch ==2.32.2 -> ==2.32.3 age adoption passing confidence

🔧 This Pull Request updates lock files to use the latest dependency versions.


Release Notes

psf/requests (requests) ### [`v2.32.3`](https://togithub.com/psf/requests/blob/HEAD/HISTORY.md#2323-2024-05-29) [Compare Source](https://togithub.com/psf/requests/compare/v2.32.2...v2.32.3) **Bugfixes** - Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. ([#​6716](https://togithub.com/psf/requests/issues/6716)) - Fixed issue where Requests started failing to run on Python versions compiled without the `ssl` module. ([#​6724](https://togithub.com/psf/requests/issues/6724))

Configuration

📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.

forking-renovate[bot] commented 6 days ago

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: gcp/appengine/Pipfile.lock
Command failed: pipenv lock
Creating a virtualenv for this project...
Pipfile: /tmp/renovate/repos/github/google/osv.dev/gcp/appengine/Pipfile
Using /opt/containerbase/tools/python/3.11.9/bin/python3 (3.11.9) to create virtualenv...
created virtual environment CPython3.11.9.final.0-64 in 320ms
  creator CPython3Posix(dest=/tmp/renovate/cache/others/virtualenvs/appengine-hhkn4FiX, clear=False, no_vcs_ignore=False, global=False)
  seeder FromAppData(download=False, pip=bundle, setuptools=bundle, wheel=bundle, via=copy, app_data_dir=/home/ubuntu/.local/share/virtualenv)
    added seed packages: pip==24.1, setuptools==70.1.0, wheel==0.43.0
  activators BashActivator,CShellActivator,FishActivator,NushellActivator,PowerShellActivator,PythonActivator

✔ Successfully created virtual environment!
Virtualenv location: /tmp/renovate/cache/others/virtualenvs/appengine-hhkn4FiX
Locking [packages] dependencies...

CRITICAL:pipenv.patched.pip._internal.resolution.resolvelib.factory:Cannot install -r /tmp/pipenvnvz0ab4qrequirements/pipenv-srdlpsdj-constraints.txt (line 10), -r /tmp/pipenvnvz0ab4qrequirements/pipenv-srdlpsdj-constraints.txt (line 25), -r /tmp/pipenvnvz0ab4qrequirements/pipenv-srdlpsdj-constraints.txt (line 5) and -r /tmp/pipenvnvz0ab4qrequirements/pipenv-srdlpsdj-constraints.txt (line 8) because these package versions have conflicting dependencies.
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2022.12.19/3.11.9/lib/python3.11/site-packages/pipenv/resolver.py", line 811, in _main
[ResolutionFailure]:       resolve_packages(
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2022.12.19/3.11.9/lib/python3.11/site-packages/pipenv/resolver.py", line 759, in resolve_packages
[ResolutionFailure]:       results, resolver = resolve(
[ResolutionFailure]:       ^^^^^^^^
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2022.12.19/3.11.9/lib/python3.11/site-packages/pipenv/resolver.py", line 738, in resolve
[ResolutionFailure]:       return resolve_deps(
[ResolutionFailure]:       ^^^^^^^^^^^^^
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2022.12.19/3.11.9/lib/python3.11/site-packages/pipenv/utils/resolver.py", line 1100, in resolve_deps
[ResolutionFailure]:       results, hashes, markers_lookup, resolver, skipped = actually_resolve_deps(
[ResolutionFailure]:       ^^^^^^^^^^^^^^^^^^^^^^
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2022.12.19/3.11.9/lib/python3.11/site-packages/pipenv/utils/resolver.py", line 899, in actually_resolve_deps
[ResolutionFailure]:       resolver.resolve()
[ResolutionFailure]:   File "/opt/containerbase/tools/pipenv/2022.12.19/3.11.9/lib/python3.11/site-packages/pipenv/utils/resolver.py", line 687, in resolve
[ResolutionFailure]:       raise ResolutionFailure(message=str(e))
[pipenv.exceptions.ResolutionFailure]: Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.
  Hint: try $ pipenv lock --pre if it is a pre-release dependency.
ERROR: ResolutionImpossible: for help visit https://pip.pypa.io/en/latest/topics/dependency-resolution/#dealing-with-dependency-conflicts