Skip to content

chore(deps): bump the security-updates group across 2 directories with 1 update - #59

Merged
lukaszstolarczuk merged 1 commit into
mainfrom
dependabot/uv/examples/ParakeetRNNT/security-updates-e48c845655
Oct 29, 2026
Merged

chore(deps): bump the security-updates group across 2 directories with 1 update#59
lukaszstolarczuk merged 1 commit into
mainfrom
dependabot/uv/examples/ParakeetRNNT/security-updates-e48c845655

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the security-updates group with 1 update in the /examples/ParakeetCTC directory: hydra-core.
Bumps the security-updates group with 1 update in the /examples/ParakeetRNNT directory: hydra-core.

Updates hydra-core from 1.3.7 to 1.3.8

Release notes

Sourced from hydra-core's releases.

Hydra 1.3.8

Bug fixes

  • Prevent arbitrary code execution through unsafe PyYAML loaders in hydra.utils.instantiate(). Safe YAML loading and dumping remain supported.
Changelog

Sourced from hydra-core's changelog.

1.3.8 (2026-10-25)

Bug Fixes

  • Prevent arbitrary code execution through unsafe PyYAML loaders in hydra.utils.instantiate(). Safe YAML loading and dumping remain supported.
Commits
  • 004658a Clarify the Hydra 1.3.8 security release note
  • 2f20add Prepare Hydra 1.3.8 security release
  • de55543 Merge commit from fork
  • 39f3b31 Prepare Ray launcher 1.2.2 release
  • ed11e57 Backport the Ray version resolver fix to Hydra 1.3 (#3567)
  • d620c0b Update Hydra 1.3 package metadata after repository transfer
  • 35cd89d Support publishing 1.3 plugins
  • 8429daa Prepare hydra-optuna-sweeper 1.3.0 release
  • See full diff in compare view

Updates hydra-core from 1.3.7 to 1.3.8

Release notes

Sourced from hydra-core's releases.

Hydra 1.3.8

Bug fixes

  • Prevent arbitrary code execution through unsafe PyYAML loaders in hydra.utils.instantiate(). Safe YAML loading and dumping remain supported.
Changelog

Sourced from hydra-core's changelog.

1.3.8 (2026-10-25)

Bug Fixes

  • Prevent arbitrary code execution through unsafe PyYAML loaders in hydra.utils.instantiate(). Safe YAML loading and dumping remain supported.
Commits
  • 004658a Clarify the Hydra 1.3.8 security release note
  • 2f20add Prepare Hydra 1.3.8 security release
  • de55543 Merge commit from fork
  • 39f3b31 Prepare Ray launcher 1.2.2 release
  • ed11e57 Backport the Ray version resolver fix to Hydra 1.3 (#3567)
  • d620c0b Update Hydra 1.3 package metadata after repository transfer
  • 35cd89d Support publishing 1.3 plugins
  • 8429daa Prepare hydra-optuna-sweeper 1.3.0 release
  • See full diff in compare view

Updates hydra-core from 1.3.7 to 1.3.8

Release notes

Sourced from hydra-core's releases.

Hydra 1.3.8

Bug fixes

  • Prevent arbitrary code execution through unsafe PyYAML loaders in hydra.utils.instantiate(). Safe YAML loading and dumping remain supported.
Changelog

Sourced from hydra-core's changelog.

1.3.8 (2026-10-25)

Bug Fixes

  • Prevent arbitrary code execution through unsafe PyYAML loaders in hydra.utils.instantiate(). Safe YAML loading and dumping remain supported.
Commits
  • 004658a Clarify the Hydra 1.3.8 security release note
  • 2f20add Prepare Hydra 1.3.8 security release
  • de55543 Merge commit from fork
  • 39f3b31 Prepare Ray launcher 1.2.2 release
  • ed11e57 Backport the Ray version resolver fix to Hydra 1.3 (#3567)
  • d620c0b Update Hydra 1.3 package metadata after repository transfer
  • 35cd89d Support publishing 1.3 plugins
  • 8429daa Prepare hydra-optuna-sweeper 1.3.0 release
  • See full diff in compare view

Updates hydra-core from 1.3.7 to 1.3.8

Release notes

Sourced from hydra-core's releases.

Hydra 1.3.8

Bug fixes

  • Prevent arbitrary code execution through unsafe PyYAML loaders in hydra.utils.instantiate(). Safe YAML loading and dumping remain supported.
Changelog

Sourced from hydra-core's changelog.

1.3.8 (2026-10-25)

Bug Fixes

  • Prevent arbitrary code execution through unsafe PyYAML loaders in hydra.utils.instantiate(). Safe YAML loading and dumping remain supported.
Commits
  • 004658a Clarify the Hydra 1.3.8 security release note
  • 2f20add Prepare Hydra 1.3.8 security release
  • de55543 Merge commit from fork
  • 39f3b31 Prepare Ray launcher 1.2.2 release
  • ed11e57 Backport the Ray version resolver fix to Hydra 1.3 (#3567)
  • d620c0b Update Hydra 1.3 package metadata after repository transfer
  • 35cd89d Support publishing 1.3 plugins
  • 8429daa Prepare hydra-optuna-sweeper 1.3.0 release
  • See full diff in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner October 29, 2026 07:46
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 29, 2026
@lukaszstolarczuk

lukaszstolarczuk commented Oct 29, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
chore(deps): bump the security-updates group across 2 directories wit…
ca0ab5a 
…h 1 update

Bumps the security-updates group with 1 update in the /examples/ParakeetCTC directory: [hydra-core](https://github.com/hydra-ecosystem/hydra).
Bumps the security-updates group with 1 update in the /examples/ParakeetRNNT directory: [hydra-core](https://github.com/hydra-ecosystem/hydra).


Updates `hydra-core` from 1.3.7 to 1.3.8
- [Release notes](https://github.com/hydra-ecosystem/hydra/releases)
- [Changelog](https://github.com/hydra-ecosystem/hydra/blob/v1.3.8/NEWS.md)
- [Commits](hydra-ecosystem/hydra@v1.3.7...v1.3.8)

Updates `hydra-core` from 1.3.7 to 1.3.8
- [Release notes](https://github.com/hydra-ecosystem/hydra/releases)
- [Changelog](https://github.com/hydra-ecosystem/hydra/blob/v1.3.8/NEWS.md)
- [Commits](hydra-ecosystem/hydra@v1.3.7...v1.3.8)

Updates `hydra-core` from 1.3.7 to 1.3.8
- [Release notes](https://github.com/hydra-ecosystem/hydra/releases)
- [Changelog](https://github.com/hydra-ecosystem/hydra/blob/v1.3.8/NEWS.md)
- [Commits](hydra-ecosystem/hydra@v1.3.7...v1.3.8)

Updates `hydra-core` from 1.3.7 to 1.3.8
- [Release notes](https://github.com/hydra-ecosystem/hydra/releases)
- [Changelog](https://github.com/hydra-ecosystem/hydra/blob/v1.3.8/NEWS.md)
- [Commits](hydra-ecosystem/hydra@v1.3.7...v1.3.8)

---
updated-dependencies:
- dependency-name: hydra-core
  dependency-version: 1.3.8
  dependency-type: indirect
  dependency-group: security-updates
- dependency-name: hydra-core
  dependency-version: 1.3.8
  dependency-type: indirect
  dependency-group: security-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/examples/ParakeetRNNT/security-updates-e48c845655 branch from 6405fc9 to ca0ab5a Compare October 29, 2026 07:58
@lukaszstolarczuk
lukaszstolarczuk merged commit 3d591ce into main Oct 29, 2026
10 checks passed
@lukaszstolarczuk
lukaszstolarczuk deleted the dependabot/uv/examples/ParakeetRNNT/security-updates-e48c845655 branch October 29, 2026 09:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lukaszstolarczuk lukaszstolarczuk lukaszstolarczuk approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lukaszstolarczuk