From e20fa1ff622f4ccd27668dfddd769012591c1b98 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 21 Sep 2023 16:26:30 +0000 Subject: [PATCH 1/2] Bump msgpack from 1.0.5 to 1.0.6 in /.github/dependabot Bumps [msgpack](https://github.com/msgpack/msgpack-python) from 1.0.5 to 1.0.6. - [Release notes](https://github.com/msgpack/msgpack-python/releases) - [Changelog](https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst) - [Commits](https://github.com/msgpack/msgpack-python/compare/v1.0.5...v1.0.6) --- updated-dependencies: - dependency-name: msgpack dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/dependabot/constraints.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot/constraints.txt b/.github/dependabot/constraints.txt index 9c064488..30dd7957 100644 --- a/.github/dependabot/constraints.txt +++ b/.github/dependabot/constraints.txt @@ -2,7 +2,7 @@ cloudpickle==2.2.1 coverage==6.2 h5py<3.10.0 karabo-bridge==0.7.0 -msgpack==1.0.5 +msgpack==1.0.6 msgpack-numpy==0.4.8 numpy<1.27.0 pandas<2.2.0 From 1d035e8909f036689f496017046df13a03d3f8ad Mon Sep 17 00:00:00 2001 From: Thomas Kluyver Date: Fri, 22 Sep 2023 14:43:10 +0100 Subject: [PATCH 2/2] Change msgpack version constraint to <= --- .github/dependabot/constraints.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot/constraints.txt b/.github/dependabot/constraints.txt index 30dd7957..3b4963c4 100644 --- a/.github/dependabot/constraints.txt +++ b/.github/dependabot/constraints.txt @@ -2,7 +2,7 @@ cloudpickle==2.2.1 coverage==6.2 h5py<3.10.0 karabo-bridge==0.7.0 -msgpack==1.0.6 +msgpack<=1.0.6 msgpack-numpy==0.4.8 numpy<1.27.0 pandas<2.2.0