From 0015a003d5deea9f9c161a0df536904201b78cfd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 22:05:52 +0000 Subject: [PATCH 1/2] Bump the analysis-requirements group in /analysis with 2 updates Bumps the analysis-requirements group in /analysis with 2 updates: [rosbags](https://gitlab.com/ternaris/rosbags) and [hypothesis](https://github.com/HypothesisWorks/hypothesis). Updates `rosbags` from 0.11.8 to 0.11.9 - [Changelog](https://gitlab.com/ternaris/rosbags/blob/master/CHANGES.rst) - [Commits](https://gitlab.com/ternaris/rosbags/compare/v0.11.8...v0.11.9) Updates `hypothesis` from 6.170.1 to 6.170.9 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](https://github.com/HypothesisWorks/hypothesis/compare/v6.170.1...v6.170.9) --- updated-dependencies: - dependency-name: rosbags dependency-version: 0.11.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: analysis-requirements - dependency-name: hypothesis dependency-version: 6.170.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: analysis-requirements ... Signed-off-by: dependabot[bot] --- analysis/requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/analysis/requirements.txt b/analysis/requirements.txt index 8d72d5c..b31b730 100644 --- a/analysis/requirements.txt +++ b/analysis/requirements.txt @@ -2,7 +2,7 @@ numpy==2.5.4 matplotlib==3.11.2 PyYAML==6.0.3 -rosbags==0.11.8 +rosbags==0.11.9 pillow==13.0.0 pytest==9.1.1 -hypothesis==6.170.1 +hypothesis==6.170.9 From 7d0f625591b80181d107f98aea7e471194eaf9eb Mon Sep 17 00:00:00 2001 From: OctaviusLeo Date: Tue, 27 Oct 2026 19:18:38 -0400 Subject: [PATCH 2/2] Record the Dependabot pin bumps in THIRD_PARTY and ENVIRONMENT Co-Authored-By: Claude Fable 5.1 --- THIRD_PARTY.md | 4 ++-- docs/ENVIRONMENT.md | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/THIRD_PARTY.md b/THIRD_PARTY.md index cd278cb..464cc27 100644 --- a/THIRD_PARTY.md +++ b/THIRD_PARTY.md @@ -15,8 +15,8 @@ is not committed (portfolio rules). | numpy | 2.5.4 | BSD-3-Clause (bundled 0BSD, MIT, Zlib, CC0-1.0) | | matplotlib | 3.11.2 | PSF-based matplotlib license | | PyYAML | 6.0.3 | MIT | -| rosbags | 0.11.8 | Apache-2.0 | +| rosbags | 0.11.9 | Apache-2.0 | | Pillow | 13.0.0 | MIT-CMU | | pytest | 9.1.1 | MIT | -| Hypothesis | 6.170.1 | MPL-2.0 | +| Hypothesis | 6.170.9 | MPL-2.0 | diff --git a/docs/ENVIRONMENT.md b/docs/ENVIRONMENT.md index c8cb2c7..89a992f 100644 --- a/docs/ENVIRONMENT.md +++ b/docs/ENVIRONMENT.md @@ -118,11 +118,11 @@ equivalent command-line capture.) | GitHub CLI | 2.102.0 (2026-09-30) | `gh --version` → `gh version 2.102.0 (2026-09-30)` | | FFmpeg | N-118205-gd3aa99a4f4-20250101 | `ffmpeg -version` → `ffmpeg version N-118205-gd3aa99a4f4-20250101` | | pytest | 9.1.1 | `.\.venv\Scripts\python -m pip freeze` → `pytest==9.1.1` | -| Hypothesis | 6.170.1 | `.\.venv\Scripts\python -m pip freeze` → `hypothesis==6.170.1` | +| Hypothesis | 6.170.9 | `.\.venv\Scripts\python -m pip freeze` → `hypothesis==6.170.9` | | NumPy | 2.5.4 | `.\.venv\Scripts\python -m pip freeze` → `numpy==2.5.4` | | matplotlib | 3.11.2 | `.\.venv\Scripts\python -m pip freeze` → `matplotlib==3.11.2` | | PyYAML | 6.0.3 | `.\.venv\Scripts\python -m pip freeze` → `PyYAML==6.0.3` | -| rosbags / ros2 bag reader | 0.11.8 | `.\.venv\Scripts\python -m pip freeze` → `rosbags==0.11.8` | +| rosbags / ros2 bag reader | 0.11.9 | `.\.venv\Scripts\python -m pip freeze` → `rosbags==0.11.9` | | Pillow | 13.0.0 | `.\.venv\Scripts\python -m pip freeze` → `pillow==13.0.0` | | Python (Windows .venv) | 3.12.10 | `py -3.12 --version` → `Python 3.12.10` |