specmatic / specmatic/specmatic-python-extensions
Dependency Dashboard
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
Other Branches
The following updates are pending. To force the creation of a PR, click on a checkbox below.
- chore(deps): update dependency python to 3.14
- chore(deps): update actions/upload-artifact action to v7
- chore(deps): update mikepenz/action-junit-report action to v6
- chore(deps): update softprops/action-gh-release action to v3
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- [SECURITY] Update dependency Werkzeug to v3.1.6
- [SECURITY] Update dependency python-dotenv to v1.2.2
- [SECURITY] Update dependency requests to v2.33.0
- [SECURITY] Update dependency flask to v3.1.3
- [SECURITY] Update dependency pytest to v9.0.3
- chore(deps): update dependency sanic to v25.12.1
- chore(deps): update dependency coverage to v7.14.1
- chore(deps): update dependency fastapi to v0.136.3
- chore(deps): update dependency marshmallow to v4.3.0
- chore(deps): update dependency setuptools to v80.10.2
- chore(deps): update dependency uvicorn to v0.49.0
- chore(deps): update dependency setuptools to v82
- Click on this checkbox to rebase all open PRs at once
Vulnerabilities
[!IMPORTANT]
11/11CVEs have Renovate fixes.
pip_requirements
requirements.txt
pytest
- GHSA-6w46-j5rx-g56g (fixed in >= 9.0.3)
requests
- GHSA-gc5v-m9x4-r6x2 (fixed in >= 2.33.0)
werkzeug
- GHSA-29vq-49wr-vm6x (fixed in >= 3.1.6)
- GHSA-87hc-h4r5-73f7 (fixed in >= 3.1.5)
flask
- GHSA-68rp-wp8r-4726 (fixed in >= 3.1.3)
python-dotenv
- GHSA-mf9w-mj56-hr94 (fixed in >= 1.2.2)
pip_setup
setup.py
pytest
- GHSA-6w46-j5rx-g56g (fixed in >= 9.0.3)
requests
- GHSA-gc5v-m9x4-r6x2 (fixed in >= 2.33.0)
werkzeug
- GHSA-29vq-49wr-vm6x (fixed in >= 3.1.6)
- GHSA-87hc-h4r5-73f7 (fixed in >= 3.1.5)
flask
- GHSA-68rp-wp8r-4726 (fixed in >= 3.1.3)
Detected Dependencies
github-actions (3)
.github/workflows/publish-to-test-pypi.yml (5)
actions/checkout v6actions/setup-java v5actions/setup-python v6pypa/gh-action-pypi-publish release/v1python 3.11→ [Updates:3.14].github/workflows/run-tests.yml (5)
actions/setup-java v5actions/checkout v6actions/setup-python v6mikepenz/action-junit-report v4→ [Updates:v6]actions/upload-artifact v6→ [Updates:v7].github/workflows/update-specmatic-version-and-publish.yml (2)
actions/checkout v6softprops/action-gh-release v2→ [Updates:v3]
pip_requirements (1)
requirements.txt (11)
pytest ==9.0.2→ [Updates:==9.0.3]requests ==2.32.5→ [Updates:==2.33.0]Werkzeug ==3.1.4→ [Updates:==3.1.6]uvicorn ==0.40.0→ [Updates:==0.49.0]fastapi ==0.128.0→ [Updates:==0.136.3]flask ==3.0.3→ [Updates:==3.1.3]sanic ==25.12.0→ [Updates:==25.12.1]marshmallow ==4.1.2→ [Updates:==4.3.0]coverage ==7.13.1→ [Updates:==7.14.1]python-dotenv ==1.0.1→ [Updates:==1.2.2]setuptools ==80.9.0→ [Updates:==80.10.2,==82.0.1]
pip_setup (1)
setup.py (7)
pytest >=7.3.1→ [Updates:>=9.0.3]requests >=2.32.4→ [Updates:>=2.33.0]Werkzeug >=3.1.4→ [Updates:>=3.1.6]uvicorn >=0.18.0fastapi >=0.70.0flask >=2.2.5→ [Updates:>=3.1.3]sanic >=22.12.0
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the open Renovate pull requests linked in the dashboard, then compare the dependency entries in requirements.txt and setup.py with the three listed GitHub Actions workflows. Check the run-tests workflow and the relevant dependency changes first; done means the selected updates are applied consistently and the available checks pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- fastapi, flask, github-actions, python
- Domain
- ci-cd, devops, tooling
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100