Skip to content

chore(deps): bump the pip-sidecar-patch-minor group in /sidecar with 9 updates#302

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/sidecar/pip-sidecar-patch-minor-0a294e4353
Open

chore(deps): bump the pip-sidecar-patch-minor group in /sidecar with 9 updates#302
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/sidecar/pip-sidecar-patch-minor-0a294e4353

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip-sidecar-patch-minor group in /sidecar with 9 updates:

Package From To
scenedetect 0.7 0.7.1
aiohttp 3.14.1 3.14.3
certifi 2026.6.17 2026.7.22
colorlog 6.11.0 6.12.0
filelock 3.30.3 3.32.0
platformdirs 4.10.0 4.11.0
regex 2026.7.10 2026.7.19
tqdm 4.69.0 4.69.1
yarl 1.24.2 1.24.5

Updates scenedetect from 0.7 to 0.7.1

Release notes

Sourced from scenedetect's releases.

PySceneDetect v0.7.1

Release Notes

PySceneDetect 0.7.1 adds support for concatenating multiple videos, along with several stability and robustness fixes for the PyAV and OpenCV backends.

CLI Changes

  • [feature] split-video has a new --expand flag: when scenes are detected within a time window (-s/-e), the first output clip is extended back to the start of the video and the last clip is extended forward to the end, so no footage outside the analysis window is dropped #115

API Changes

  • [feature] scenedetect.detect() now accepts a backend keyword argument ("opencv", "pyav", or "moviepy") similar to open_video. Defaults to "opencv", matching prior behavior.
  • [feature] Add expand_scenes_to_bounds() helper in scenedetect.scene_manager to extend a scene list so the first scene starts at a given lower bound and the last scene ends at a given upper bound
  • [feature] VideoStream now provides a public read-only decode_failures property reporting the number of frames that failed to decode and were skipped (defaults to 0; populated by the OpenCV and PyAV backends)
  • [feature] Add VideoStreamConcat (scenedetect.backends.concat) which concatenates multiple videos into a single continuous stream with a monotonic PTS timeline; open_video() and detect() now accept a list of paths. VideoStreamConcat.map_span() maps spans of the global timeline back to per-source local times
  • [bugfix] The PyAV backend (VideoStreamAv) now skips corrupt frames during read() and continues decoding instead of failing, giving up only after 8 consecutive decode failures (matching the OpenCV backend's tolerance behavior)
  • [bugfix] The PyAV backend now normalizes presentation times by the stream start time, so files with a delayed start (e.g. from edit lists) report the first frame at position 0, consistent with other backends and with seek()
  • [bugfix] Comparisons between two FrameTimecode objects that both carry exact presentation times (e.g. positions from VFR videos) and share the same frame rate are now performed exactly using pts and time_base instead of rounded frame numbers. Previously, distinct frames in VFR sections could compare equal or fail strict ordering when their times rounded to the same approximate frame number. Comparisons involving frame- or seconds-based timecodes, plain values (int/float/str), or differing frame rates are unchanged
  • [bugfix] Fix image sequence inputs when using OpenCV 5.0

Packaging

  • [general] scenedetect and scenedetect-headless are unchanged: they continue to ship the full program (library + CLI) with opencv-python / opencv-python-headless respectively. Both packages provide the same scenedetect module (install or depend only one)
  • [feature] Official Docker images are now published to the GitHub Container Registry with the full CLI, all backends, and external tools (ffmpeg, mkvmerge) included, thanks @​FNGarvin #537
    • Example usage (process a video in the current directory):
docker run --rm -v "$(pwd):/files" ghcr.io/breakthrough/pyscenedetect -i /files/video.mp4 detect-adaptive split-video -o /files
  • [general] The Windows distribution now bundles OpenCV 5.0, PyAV 18, and FFmpeg 8.1.2. The Windows and Docker builds also override Pillow to 12.3.0 for upstream security fixes (moviepy#2553)

General

  • [general] Benchmark results are now published on the website (scenedetect.com/benchmarks), including accuracy at default settings and parameter sweep curves for each detector
Changelog

Sourced from scenedetect's changelog.

PySceneDetect Release Checklist

Use one copy per release, copy into a pull request and check each box as steps are completed. Optional: version referenced below as X.Y[.Z] - replace with the real version throughout.

1. Version Identifiers, Branch Prep

  • Create release branch releases/X.Y[.Z] off main (each release, including patches, gets its own branch - e.g. releases/0.6.7, releases/0.7.1); fast-forward it to main as release work lands.
  • Bump __version__ in scenedetect/__init__.py
  • Bump docs/LATEST_VERSION for any stable release: it must match the releases/X.Y[.Z] branch suffix for generate-docs.yml to update docs/latest
  • Regular release: No -dev suffix or other, pre-release: has suffix -dev0, -dev1, ...

2. Documentation, Website, Changelog

  • Docstrings / API docs reflect any signature changes (cd docs/ && make html builds clean).
  • docs/api/migration_guide.rst updated if any public API changed.
  • Docstring examples all run correctly, nothing references removed or deprecated symbols.
  • Changelog has release notes for major/minor release, all features, breaking changes, bug fixes, and known issues are documented.
  • website/pages/download.md updated with the new version / installer link / release date.
  • website/pages/changelog.md: move the release changes from the Development section at the bottom to the top.
  • website/pages/index.md: Latest release version and date updated.

3. Tests

  • Static analysis passing (ruff + pyright).
  • Unit tests green locally and in CI: pytest -vv (should collect -m 'not release' by default).
  • Release test suite green: manually trigger or make a release candidate tag, all 4 jobs (static, release-tests, install-matrix, long-stress) green across the OS and Python version matrix.
  • pip-audit clean (or exceptions documented in the changelog).

4. Prepare Windows Distribution

  • Update packaging/windows/requirements.txt and bump bundled ffmpeg version in appveyor.yml
  • Run AppVeyor build on release branch, ensure resulting portable distribution and MSI installer are correct

GUI required for structural changes. scripts/update_installer.py covers routine version bumps and --sync-files covers dependency-driven file-list changes, but anything that touches the project structure of the .aip still needs the AdvancedInstaller GUI. Examples:

  • Moving the .aip or its source tree (the build's SourcePath references are stored relative to the .aip and aren't rewritten by /NewSync.
  • Adding/removing build configurations, features, or prerequisites.
  • Install directory layout (APPDIR location), or per-component attributes.
  • Editing dialog layouts, branding bitmaps, install sequences, custom actions, file associations, or shortcuts.

5. Tag & Draft Release

  • Final commit on releases/X.Y[.Z]: "Release vX.Y[.Z]".
  • Tag vX.Y[.Z] on that commit and push (the legacy vX.Y[.Z]-release form is also accepted by all workflows). Wait for all tests/builds to pass.
  • Approve code signing request on SignPath, download scenedetect-signed.zip
  • Finalize Windows artifacts locally (CI can't do this - signing happens after the AppVeyor build, so the post-signing steps must run locally):
    • Create dist/signed/ and drop scenedetect-signed.zip (from SignPath) into it. No other inputs needed - the portable .zip is rebuilt from the signed .msi via msiexec /a, eliminating the AppVeyor download.
    • Run python scripts/finalize_windows_dist.py. This extracts the signed .msi from the bundle, runs msiexec /a to recover the installed file tree, repacks it as the portable .zip with 7-Zip, writes PySceneDetect-X.Y.Z-win64.manifest.json + SHA256SUMS, and then runs scripts/validate_release.py to verify filenames, hashes, Authenticode signatures, MSI/zip parity, and frozen .exe smoke tests.
  • Draft release on Github using the tagged commit: include full changelog & release notes, signed portable .ZIP, signed .MSI installer, Python .whl/.tar.gz packages, and checksum manifests (PySceneDetect-X.Y.Z-win64.manifest.json + SHA256SUMS)

... (truncated)

Commits

Updates aiohttp from 3.14.1 to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

  • Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

    Related issues and pull requests on GitHub: :issue:13180.

  • Fixed error message construction in the C HTTP parser -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:13222.

3.14.2 (2026-07-20)

Bug fixes

  • Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

    Related issues and pull requests on GitHub: :issue:5303.

  • Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

    Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

Updates certifi from 2026.6.17 to 2026.7.22

Commits

Updates colorlog from 6.11.0 to 6.12.0

Release notes

Sourced from colorlog's releases.

v6.12.0

What's Changed

Full Changelog: borntyping/python-colorlog@v6.11.0...v6.12.0

Commits

Updates filelock from 3.30.3 to 3.32.0

Release notes

Sourced from filelock's releases.

3.32.0

What's Changed

Full Changelog: tox-dev/filelock@3.31.2...3.32.0

3.31.2

What's Changed

Full Changelog: tox-dev/filelock@3.31.1...3.31.2

3.31.1

What's Changed

Full Changelog: tox-dev/filelock@3.31.0...3.31.1

3.31.0

What's Changed

Full Changelog: tox-dev/filelock@3.30.3...3.31.0

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.32.0 (2026-07-21)

  • SoftReadWriteLock closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:685
  • Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:683
  • The source distribution ships the capability probes the tests import, and reading one no longer needs coverage installed, so the suite runs from an unpacked sdist instead of failing on a missing coverage_pragmas. :pr:685

3.31.2 (2026-07-21)

  • filelock imports again on runtimes whose errno omits ENOTSUP, such as GraalPy, where importing the package raised ImportError. It probes the code instead, preferring ENOTSUP, falling back to EOPNOTSUPP where that name is absent, and dropping to ENOSYS/EXDEV where neither exists. Platforms defining ENOTSUP keep their behavior. :pr:681

3.31.1 (2026-07-20)

  • A SoftFileLease acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:680

3.31.0 (2026-07-18)

  • Support Termux/Android, whose CPython ships without os.link and reports sys.platform == "android". import filelock and both FileLock and SoftFileLock now work there, StrictSoftFileLock reports its missing hard-link support only when acquired, and process liveness reads /proc on Android instead of PID-only checks. :pr:678
  • StrictSoftFileLock no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no longer miss it and win alongside it. A held lock now exposes both an intent and a held claim. :pr:678

3.30.3 (2026-07-17)

  • AsyncFileLock and AsyncSoftFileLock no longer raise a deadlock RuntimeError when a different asyncio task

... (truncated)

Commits
  • 76525e6 Release 3.32.0
  • 9824d15 🐛 fix(packaging): let an unpacked sdist run the test suite (#685)
  • f6c41e9 👷 ci: add Python 3.15 to the test matrix (#683)
  • caeb1c9 Release 3.31.2
  • 60eda0f 🐛 fix(strict): tolerate an errno without ENOTSUP (#681)
  • c1b2e6f Release 3.31.1
  • 9fd7de5 scope a lease's claim to the context that acquired it (#680)
  • 2b3ad2c ♻️ refactor(coverage): key exclusions on probed capability (#679)
  • 3b66fdc Release 3.31.0
  • 166b2b5 ✨ feat(platform): support Termux/Android (#678)
  • See full diff in compare view

Updates platformdirs from 4.10.0 to 4.11.0

Release notes

Sourced from platformdirs's releases.

4.11.0

What's Changed

Full Changelog: tox-dev/platformdirs@4.10.1...4.11.0

4.10.1

What's Changed

Full Changelog: tox-dev/platformdirs@4.10.0...4.10.1

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

4.11.0 (2026-07-21)

  • Declare support for Python 3.15 and run the test suite against it, currently in beta. :pr:512

4.10.1 (2026-07-18)

  • Stop leaking memory on repeated Windows folder lookups. get_win_folder_via_ctypes defined a fresh ctypes structure on every call, and each one registered a pointer type that was never released; the resolver is now built once and reused. :pr:507

4.10.0 (2026-05-28)

  • Add :func:~platformdirs.user_publicshare_dir, :func:~platformdirs.user_templates_dir, :func:~platformdirs.user_fonts_dir, and :func:~platformdirs.user_preference_dir :pr:491
  • Add :func:~platformdirs.user_projects_dir backed by $XDG_PROJECTS_DIR :pr:490
  • Return only the first path from :func:~platformdirs.site_config_path on macOS when multipath is set :pr:488 - by :user:lphuc2250gma

4.9.6 (2026-04-09)

  • Fix macOS XDG variables leaking across :func:~platformdirs.user_config_dir, :func:~platformdirs.user_data_dir, and :func:~platformdirs.user_state_dir when only some are set :pr:473 - by :user:Goddesen
  • Avoid duplicate site directories in Unix :meth:~platformdirs.PlatformDirs.iter_config_dirs and :meth:~platformdirs.PlatformDirs.iter_data_dirs when use_site_for_root is active :pr:469 - by :user:viccie30

4.9.4 (2026-03-05)

  • Respect XDG_CONFIG_HOME when reading the user-dirs configuration :pr:453 - by :user:bysiber
  • Create the directory in Android :func:~platformdirs.user_log_dir and :func:~platformdirs.user_runtime_dir when ensure_exists is set :pr:452 - by :user:bysiber

... (truncated)

Commits
  • 2140495 Release 4.11.0
  • a562df9 👷 ci: run the test suite against Python 3.15 (#512)
  • 7c764c4 [pre-commit.ci] pre-commit autoupdate (#511)
  • 2e74013 Release 4.10.1
  • 3076722 📝 docs(changelog): rebuild against release history (#510)
  • 42751ce 🚀 ci(release): towncrier changelog + publish on tag push (#509)
  • d2e5756 fix(windows): stop leaking ctypes pointer types on repeated calls (#507)
  • 4f52c4f build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 in the all group (#506)
  • f68e56f build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 in the all group (#504)
  • 806560b build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 in the all group (#502)
  • Additional commits viewable in compare view

Updates regex from 2026.7.10 to 2026.7.19

Changelog

Sourced from regex's changelog.

Version: 2026.7.19

Git issue 607: SIGSEGV: NULL pointer dereference in `basic_match()` when `(?R)`/`(?0)` recursion is used inside a fuzzy-matching quantifier
Git issue 608: SIGSEGV: out-of-bounds read in `bytes1_char_at()` with `DOTALL` + a fuzzy constraint + `(?r)` reverse-direction matching

Version: 2026.7.10

Clarified that the POSIX flag makes it look for only the longest overall match.

Git issue 606: regex's compiled-pattern cache eviction is not free-threading-safe

Version: 2026.6.28

Git issue 604: regex fails on free-threading python because setlocale is not thread-safe

Version: 2026.5.9

Reverse matching with full unicode casefolding could lead to out-of-range string indexes.

Version: 2026.4.4

A fix for older Python versions before free-threading was  supported.

Version: 2026.4.3

More fixes for free-threading.

Version: 2026.3.32

Fixed segfault.

Version: 2026.3.31

Fixed bug again.

Version: 2026.3.30

Fixed bug.

Version: 2026.3.28

Fixed version.

Version: 2026.3.27

Various fixes, including ones to improve free-threading support.

Version: 2026.2.28

Replaced atomic operations with mutex on pattern object for free-threaded Python.

... (truncated)

Commits
  • 0525aff Git issue 608: SIGSEGV: out-of-bounds read in bytes1_char_at() with `DOTALL...
  • 07dfa3b Git issue 607: SIGSEGV: NULL pointer dereference in basic_match() when `(?R...
  • e7716da Python 3.15 not released yet.
  • See full diff in compare view

Updates tqdm from 4.69.0 to 4.69.1

Release notes

Sourced from tqdm's releases.

tqdm v4.69.1 stable

Commits

Updates yarl from 1.24.2 to 1.24.5

Changelog

Sourced from yarl's changelog.

v1.24.5

(2026-07-19)

Contributor-facing changes

  • Restricted the exhaustive IDNA default-ignorable sweep test to a native Linux x86_64 runner. It iterates roughly 140,000 code points and its result does not depend on the architecture, so running it under emulated wheel builds only added minutes and intermittently crashed the test workers -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:1806.

v1.24.4

(2026-07-19)

Packaging updates and notes for downstreams

  • Stopped installing hypothesis in the wheel-build test environment. The property-based quoting tests that need it are skipped there already, and building it from source on architectures without a prebuilt wheel (such as armv7l musllinux, where the build pulls in a Rust toolchain) was failing the wheel jobs -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:1804.

v1.24.3

(2026-07-19)

... (truncated)

Commits
  • 0b30cb0 Release 1.24.5 (#1807)
  • 56150c8 Run the IDNA sweep test only on native Linux x86_64 (#1806)
  • 515adca Release 1.24.4 (#1805)
  • ab5dec2 Do not install hypothesis in the wheel-build test env (#1804)
  • f9d10fb Release 1.24.3 (#1803)
  • 058b7cb Test lone surrogate handling in encoded and parsed URL paths (#991)
  • a181cee Update hypothesis requirement from >=6.156.4 to >=6.157.0 in /requirements (#...
  • 28c1bcc Encode scheme-shaped path colon in relative-path builders (#1802)
  • 51e2802 Reject hosts with Unicode default-ignorable code points (#1801)
  • 3921a73 Drop lone surrogates that split a percent escape in the Cython quoter (#1752)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the pip-sidecar-patch-minor group
d07de68 
Bumps the pip-sidecar-patch-minor group in /sidecar with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [scenedetect](https://github.com/Breakthrough/PySceneDetect) | `0.7` | `0.7.1` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.14.1` | `3.14.3` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.6.17` | `2026.7.22` |
| [colorlog](https://github.com/borntyping/python-colorlog) | `6.11.0` | `6.12.0` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.30.3` | `3.32.0` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.10.0` | `4.11.0` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2026.7.10` | `2026.7.19` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.69.0` | `4.69.1` |
| [yarl](https://github.com/aio-libs/yarl) | `1.24.2` | `1.24.5` |


Updates `scenedetect` from 0.7 to 0.7.1
- [Release notes](https://github.com/Breakthrough/PySceneDetect/releases)
- [Changelog](https://github.com/Breakthrough/PySceneDetect/blob/main/RELEASE-PLAN.md)
- [Commits](https://github.com/Breakthrough/PySceneDetect/commits/v0.7.1)

Updates `aiohttp` from 3.14.1 to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/v3.14.3/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.14.1...v3.14.3)

Updates `certifi` from 2026.6.17 to 2026.7.22
- [Commits](certifi/python-certifi@2026.06.17...2026.07.22)

Updates `colorlog` from 6.11.0 to 6.12.0
- [Release notes](https://github.com/borntyping/python-colorlog/releases)
- [Commits](borntyping/python-colorlog@v6.11.0...v6.12.0)

Updates `filelock` from 3.30.3 to 3.32.0
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.30.3...3.32.0)

Updates `platformdirs` from 4.10.0 to 4.11.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.10.0...4.11.0)

Updates `regex` from 2026.7.10 to 2026.7.19
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2026.7.10...2026.7.19)

Updates `tqdm` from 4.69.0 to 4.69.1
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.69.0...v4.69.1)

Updates `yarl` from 1.24.2 to 1.24.5
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.24.2...v1.24.5)

---
updated-dependencies:
- dependency-name: scenedetect
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-sidecar-patch-minor
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-sidecar-patch-minor
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-sidecar-patch-minor
- dependency-name: colorlog
  dependency-version: 6.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-sidecar-patch-minor
- dependency-name: filelock
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-sidecar-patch-minor
- dependency-name: platformdirs
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-sidecar-patch-minor
- dependency-name: regex
  dependency-version: 2026.7.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-sidecar-patch-minor
- dependency-name: tqdm
  dependency-version: 4.69.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-sidecar-patch-minor
- dependency-name: yarl
  dependency-version: 1.24.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-sidecar-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 24, 2026
chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Jul 24, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d07de68946

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread sidecar/runtime_setup/requirements-sidecar.txt
faster-whisper==1.2.1
ctranslate2==4.8.1
scenedetect==0.7
scenedetect==0.7.1

@chatgpt-codex-connector chatgpt-codex-connector Bot Jul 24, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep runtime pin assertions in sync

The default sidecar pytest gate loads this shipped requirements file and asserts the pins, but sidecar/tests/test_runtime_setup.py:69-72 still requires pins["scenedetect"] == "0.7". With this bump to 0.7.1, python -m pytest --cov=media_studio ... in .github/workflows/quality.yml:90-95 fails even though the requirements parser succeeds, so the dependency update cannot pass CI until the expected pin is updated or the bump is reverted.

Useful? React with 👍 / 👎.

@Prekzursil Prekzursil mentioned this pull request Jul 25, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chatgpt-codex-connector chatgpt-codex-connector[bot] chatgpt-codex-connector[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants