chore(deps): bump httpcore2 from 2.5.0 to 2.10.0 in /reviewer - #563
chore(deps): bump httpcore2 from 2.5.0 to 2.10.0 in /reviewer#563dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [httpcore2](https://github.com/pydantic/httpx2) from 2.5.0 to 2.10.0. - [Release notes](https://github.com/pydantic/httpx2/releases) - [Commits](pydantic/httpx2@v2.5.0...v2.10.0) --- updated-dependencies: - dependency-name: httpcore2 dependency-version: 2.10.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
|
이 bump는 별도 merge lane으로 진행하지 않습니다. Current exact 다만 #562의 patch-validator-image가 아직 terminal SUCCESS가 아니고 active source prerequisite #560도 아직 Draft이므로, 지금 #563을 단순 close해서 successor 승계를 확정하지 않습니다. 우선 Draft로 전환했습니다. #560 정상 integration → #562 ordinary/non-force reconvergence → unchanged exact four-gate GREEN이 확인되면 #562가 #563의 유효 dependency delta와 검증 계약을 완전 승계하는지 다시 확인하고 그때 superseded close를 수행합니다. #563 GREEN 자체를 #562나 protected-main merge authority로 전용하지 않습니다. |
|
Coordination finding: #563 changes only |
|
Verified complete succession: PR #562 (merged as squash into protected main) carries |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
This older Dependabot lane changes only
reviewer/requirements-ci-hashes.txt, advancinghttpcore2from 2.5.0 to 2.10.0. Exact46bec70bcc2aca78f9fdda59973c530abfa25555has terminal SUCCESS for application CI, reviewer-ci, required Security Scan, and patch-validator-image, but it was cut from pre-#560 protected source and is not current merge authority.#562 is the prospective successor, now based on protected
main@e3aa77c3f678336c548440f355f988345b0ba976. Its exact2cc84d0e993eb7bd89cfb82814e66f0764e66a05changes the same lockfile entry further tohttpcore2==2.12.0, advanceshttpx2to the required lockstep2.12.0, and adds an isolated editable-installpip checkregression. That proves the source delta of this one-file lane is semantically included at a newer compatible lockstep version, with additional dependency-integrity evidence; it does not make succession automatic while #562's exact patch-validator-image is still non-terminal.Keep this PR open and Draft. Close it as verified complete succession only after #562 remains on the required protected base, independently reaches fresh terminal four-GREEN with clean review, and a final changed-path/content comparison confirms every valid delta/test/fixture/contract/evidence item from this lane is inherited. If that proof fails, repair/reconverge this lane rather than dropping its delta.