Skip to content

chore(deps): bump httpcore2 from 2.5.0 to 2.10.0 in /reviewer - #563

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/reviewer/httpcore2-2.10.0
Closed

chore(deps): bump httpcore2 from 2.5.0 to 2.10.0 in /reviewer#563
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/reviewer/httpcore2-2.10.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

This older Dependabot lane changes only reviewer/requirements-ci-hashes.txt, advancing httpcore2 from 2.5.0 to 2.10.0. Exact 46bec70bcc2aca78f9fdda59973c530abfa25555 has terminal SUCCESS for application CI, reviewer-ci, required Security Scan, and patch-validator-image, but it was cut from pre-#560 protected source and is not current merge authority.

#562 is the prospective successor, now based on protected main@e3aa77c3f678336c548440f355f988345b0ba976. Its exact 2cc84d0e993eb7bd89cfb82814e66f0764e66a05 changes the same lockfile entry further to httpcore2==2.12.0, advances httpx2 to the required lockstep 2.12.0, and adds an isolated editable-install pip check regression. That proves the source delta of this one-file lane is semantically included at a newer compatible lockstep version, with additional dependency-integrity evidence; it does not make succession automatic while #562's exact patch-validator-image is still non-terminal.

Keep this PR open and Draft. Close it as verified complete succession only after #562 remains on the required protected base, independently reaches fresh terminal four-GREEN with clean review, and a final changed-path/content comparison confirms every valid delta/test/fixture/contract/evidence item from this lane is inherited. If that proof fails, repair/reconverge this lane rather than dropping its delta.

Bumps [httpcore2](https://github.com/pydantic/httpx2) from 2.5.0 to 2.10.0.
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Commits](pydantic/httpx2@v2.5.0...v2.10.0)

---
updated-dependencies:
- dependency-name: httpcore2
  dependency-version: 2.10.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 8, 2026
@seonghobae
seonghobae marked this pull request as draft September 9, 2026 00:00

Copy link
Copy Markdown
Contributor

이 bump는 별도 merge lane으로 진행하지 않습니다. Current exact 46bec70bcc2aca78f9fdda59973c530abfa25555httpcore2만 2.10.0으로 올리지만, sibling #562의 current exact 25ccd849237961416cc6975990dcd9ca34ef78b0가 이미 httpx2/httpcore2를 함께 2.12.0으로 맞추고 isolated editable install의 pip check 회귀 계약까지 추가해 이 delta를 상위 lockstep version으로 포함합니다.

다만 #562의 patch-validator-image가 아직 terminal SUCCESS가 아니고 active source prerequisite #560도 아직 Draft이므로, 지금 #563을 단순 close해서 successor 승계를 확정하지 않습니다. 우선 Draft로 전환했습니다. #560 정상 integration → #562 ordinary/non-force reconvergence → unchanged exact four-gate GREEN이 확인되면 #562가 #563의 유효 dependency delta와 검증 계약을 완전 승계하는지 다시 확인하고 그때 superseded close를 수행합니다. #563 GREEN 자체를 #562나 protected-main merge authority로 전용하지 않습니다.

Copy link
Copy Markdown
Contributor

Coordination finding: #563 changes only reviewer/requirements-ci-hashes.txt, replacing httpcore2==2.5.0 with 2.10.0. Draft #562 now carries the stronger lockstep successor delta (httpx2==2.12.0 + httpcore2==2.12.0) plus the isolated editable-install pip check regression that caught the original mismatch, and has been non-force reconverged onto protected main@e3aa77c3f678336c548440f355f988345b0ba976. Do not simple-close #563 yet: close as fully superseded only after #562's unchanged reconverged exact reaches all required terminal-success gates and fresh review proves the valid #563 delta is completely inherited.

@seonghobae

Copy link
Copy Markdown
Contributor

Verified complete succession: PR #562 (merged as squash into protected main) carries httpcore2==2.12.0 + httpx2==2.12.0 in the same reviewer/requirements-ci-hashes.txt, a strict superset of this lane's httpcore2==2.10.0 delta (confirmed on live main). No remaining valid delta, test, fixture, contract, or evidence is unique to #563. Closing as superseded; keeping both lanes' history intact (branch untouched).

@seonghobae seonghobae closed this Sep 9, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/reviewer/httpcore2-2.10.0 branch September 9, 2026 03:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant