Skip to content

Update cloudevents requirement from ~=1.0 to >=1,<3 in /python#13949

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python/cloudevents-gte-1-and-lt-3
Closed

Update cloudevents requirement from ~=1.0 to >=1,<3 in /python#13949
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python/cloudevents-gte-1-and-lt-3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 5, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on cloudevents to permit the latest version.

Changelog

Sourced from cloudevents's changelog.

[2.0.0]

Changed

  • Released stable v2.0.0. See migration for details and migration guidelines. (#279)

[2.0.0.alpha6]

Changed

  • Updated tooling and workflows. (#278)

Fixed

  • Fixed the v1 compatibility layer. (#276)

[2.0.0.alpha5]

Changed

  • Improved spec compatibility of attributes processing. (#275)

[2.0.0.alpha4]

Changed

  • CloudEvents v2 is ready to become the main version. (#273)

[1.12.1]

Changed

  • CloudEvents v1 moved to security fixes support stage. CloudEvents v2 is a rewrite with ongoing development (#271)

[1.12.0]

Changed

  • Dropped Python3.8 support while it has reached EOL. (#249)

[1.11.1]

Fixed

  • Kafka conversion marshaller and unmarshaller typings (#240)
  • Improved public API type annotations and fixed unit test type errors (#248)

[1.11.0]

... (truncated)

Commits
  • 435fa56 Release v2 (#280)
  • 088b46c chore: release 1.12.1 CloudEvents v1 goes into maintenance mode (#271)
  • a38933d Drop EOL Python 3.8 support (#249)
  • 37ae369 Improve public API type annotations & fix unit test type errors (#248)
  • c5645d8 chpre: disable attestations while we're not using trusted publishing (#243)
  • 96cfaa6 chore: release 1.11.1 (#241)
  • efca352 fix kafka unmarshaller args typing and defaults (#240)
  • c6c7e8c Release/v1.11.0 (#237)
  • 16441d7 Modified content-type to abide by attribute naming conventions for cloudevent...
  • 11520e3 Pydantic v2 (#235)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file. Used by Dependabot. python Pull requests for the Python Semantic Kernel labels May 5, 2026
Copilot AI review requested due to automatic review settings May 5, 2026 01:37
@dependabot
dependabot Bot requested a review from a team as a code owner May 5, 2026 01:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file. Used by Dependabot. python Pull requests for the Python Semantic Kernel labels May 5, 2026
@dependabot
dependabot Bot removed the request for review from Copilot May 5, 2026 01:37
@github-actions github-actions Bot changed the title Update cloudevents requirement from ~=1.0 to >=1,<3 in /python Python: Update cloudevents requirement from ~=1.0 to >=1,<3 in /python May 5, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated Code Review

Reviewers: 4 | Confidence: 81% | Result: All clear

Reviewed: Correctness, Security Reliability, Test Coverage, Design Approach


Automated review by dependabot[bot]'s agents

Updates the requirements on [cloudevents](https://github.com/cloudevents/sdk-python) to permit the latest version.
- [Changelog](https://github.com/cloudevents/sdk-python/blob/main/CHANGELOG.md)
- [Commits](cloudevents/sdk-python@1.0.0...2.0.0)

---
updated-dependencies:
- dependency-name: cloudevents
  dependency-version: 2.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Python: Update cloudevents requirement from ~=1.0 to >=1,<3 in /python Update cloudevents requirement from ~=1.0 to >=1,<3 in /python May 11, 2026
Copilot AI review requested due to automatic review settings May 11, 2026 23:11
@dependabot
dependabot Bot force-pushed the dependabot/pip/python/cloudevents-gte-1-and-lt-3 branch from d3331df to 14c948b Compare May 11, 2026 23:11

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

pull Bot pushed a commit to AmirulAndalib/semantic-kernel that referenced this pull request Jul 23, 2026
### Motivation and Context

Semantic Kernel currently has 43 open Dependabot pull requests spanning
GitHub Actions, .NET, Python, npm, and Yarn dependency graphs. This
rollup applies their compatible net changes together on the latest
`main`, making it possible to validate and merge the updates as one
coherent dependency state.

Supersedes:

- microsoft#13133
- microsoft#13134
- microsoft#13136
- microsoft#13172
- microsoft#13507
- microsoft#13601
- microsoft#13606
- microsoft#13666
- microsoft#13673
- microsoft#13688
- microsoft#13700
- microsoft#13707
- microsoft#13708
- microsoft#13712
- microsoft#13721
- microsoft#13873
- microsoft#13930
- microsoft#13939
- microsoft#13949
- microsoft#13950
- microsoft#13951
- microsoft#13997
- microsoft#14000
- microsoft#14053
- microsoft#14069
- microsoft#14088
- microsoft#14091
- microsoft#14094
- microsoft#14103
- microsoft#14106
- microsoft#14107
- microsoft#14108
- microsoft#14109
- microsoft#14110
- microsoft#14128
- microsoft#14148
- microsoft#14149
- microsoft#14160
- microsoft#14161
- microsoft#14164
- microsoft#14171
- microsoft#14172
- microsoft#14173

### Description

- Updates the requested GitHub Actions and preserves the PR-file-scoped
typos workflow fix.
- Consolidates the .NET Aspire, AWS SDK, ReportGenerator, JavaScript,
and SQLite security updates.
- Regenerates the npm, Yarn, and uv lockfiles from the combined
manifests instead of resolving generated-file conflicts by selection.
- Rolls overlapping updates forward to one compatible result: pyasn1
0.6.4 supersedes 0.6.3; pyOpenSSL 26.2.0 remains compatible with
cryptography 48.0.1; and Vite 8/Rolldown makes the older Rollup-only
overrides obsolete.
- Retains updates already present on current `main` without
reintroducing stale pins, including Aspire Hosting Azure Search 13.3.0
and Prompty.Core 2.0.0-beta.3.

The full .NET solution builds in Debug with zero warnings and errors.
Focused validation passed 82 .NET tests (3 skipped), 1,096 Python tests,
both frontend production builds, and uv lock consistency checks for the
main Python project and OAuth sample.

### Contribution Checklist

- [x] The code builds clean without any errors or warnings
- [ ] The PR follows the [SK Contribution
Guidelines](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md)
and the [pre-submission formatting
script](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md#development-scripts)
raises no violations
- [ ] All unit tests pass, and I have added new tests where possible
- [x] I didn't break anyone 😄

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
@moonbox3

Copy link
Copy Markdown
Collaborator

Superseded by #14176

@moonbox3 moonbox3 closed this Jul 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/python/cloudevents-gte-1-and-lt-3 branch July 23, 2026 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file. Used by Dependabot. python Pull requests for the Python Semantic Kernel

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants