Skip to content

chore(deps)(deps): update pip-licenses requirement from >=4.0.0 to >=5.5.5 - #289

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-licenses-gte-5.5.5
Open

chore(deps)(deps): update pip-licenses requirement from >=4.0.0 to >=5.5.5#289
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-licenses-gte-5.5.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pip-licenses to permit the latest version.

Release notes

Sourced from pip-licenses's releases.

5.5.5

Patch Notes for 5.5.5

Combines recent pre-releases (including 5.5.2-5.5.4) to deliver significant codebase cleanup and lays the groundwork for upcoming changes planned for version v6.0.

What's Changed

  • (RC-3) Additional tweaks to CHANGELOG and various comments.
  • (RC-2) Updated Copyright lines and made note of new maintainer
  • (RC-1) Reverts experiments from PR #313 to prepare for a proper release.

Full Changelog: raimon49/pip-licenses@v-5.5.4...v-5.5.5

Changelog

Sourced from pip-licenses's changelog.

5.5.5

  • Updated cc lines and officially made note of change in maintainers

5.5.4

  • Expanded typing annotations through-out codebase
  • Configured prek/pre-commit for CI linting and local developer workflows
  • Additional configuration following v5.5.2's migration of linters
    • Fine tune ruff to enforce typing and black style opinions (Code style remains PEP-8 aligned)
    • Cleanup/gitignore for ruff
  • Fixed a typo in previous changelog

5.5.3

  • Aligned parsing logic with PEP 753
  • Refactored to better leverage f-strings to improve performance slightly
  • Fixed various warnings in tests
  • Got rid of historical Python 3.5 left-overs

5.5.2

  • Added support for multi-line allow-only and fail-on arguments
    • Relaxed parsing of most whitespace around semicolon delimiter
  • Added simple SECURITY.md policy document
  • Fixed a duplication behavior in output when a package was found at multiple paths (e.g., symlinks)
  • Fixed issue where lowercase license filenames were ignored
  • Improved project Makefile stability for developers
  • Migrated from the linters black and isort to ruff
    • Code style remains PEP-8 aligned, but should be slightly more readable.
    • Linting configuration remains in pyproject.toml
  • Updated CONTRIBUTORS.md guide with related changes

5.5.1

  • Fixed typographical issue in README examples, closing GHI #209.
  • Fixed typographical issue in docstring found by codespell.
  • Aligned Project URLs in pyproject.toml with PEP 753
  • Brought pyproject.toml (e.g., packaging metadata) into alignment with PEP 639 and related packaging guidance.
    • Improved MANIFEST.in to setuptools-scm build logic with better filtering, closing GHI #266
  • Fixed a regression in linting via black by deprecating support for python 3.9, closing GHI #264
    • Applied black 26.1.0suggestions to codebase, closing GHI #269

5.5.0

  • Replace dependency on tomli with builtin tomllib for Python 3.11
  • Added support for License-Expression metadata field, see PEP 639
  • Added --from=expression option
  • Breaking change: The --from=all output now includes the License-Expression value
  • Fixed KeyError with --partial and --allow-only if a license matches multiple allowed licenses.

... (truncated)

Commits
  • a870ce4 Apply suggestions from self code review of v5.5.5-rc3
  • 187bca9 Version bump to v5.5.5
  • 55279ab Fix for deployment GHA
  • cada4a6 Update changelog and bump version to 5.5.4
  • aa4f1ef cherrypick commit 'd6c980189c4a845e2c6fcfe5607cf6677f1d156c' into no-feature-...
  • 08e5a25 cherrypick commit '3ccf905e2ea97386fed87884e915e65945e36b63' into no-feature-...
  • 1f3e51b Merge commit '32d1ef1dcfaa424476d31a3ddf1dbcc34a60f2c6' into no-feature-prek-...
  • 40d48a6 Merge branch 'fix-type-annotation-warnings-from-ruff-315' into no-feature-pre...
  • 708d00a Merge branch 'fix-warning-in-generated-dev-requirementstxt-file-314' into no-...
  • 94dfd7e cherrypick commit '0ae66a5000a454a359c38dd70d69b79377fdba64' into no-feature-...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps)(deps): update pip-licenses requirement
44ed2e0 
Updates the requirements on [pip-licenses](https://github.com/raimon49/pip-licenses) to permit the latest version.
- [Release notes](https://github.com/raimon49/pip-licenses/releases)
- [Changelog](https://github.com/raimon49/pip-licenses/blob/master/CHANGELOG.md)
- [Commits](raimon49/pip-licenses@v-4.0.0...v-5.5.5)

---
updated-dependencies:
- dependency-name: pip-licenses
  dependency-version: 5.5.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: YOUR_GITHUB_USERNAME. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: automerge-candidate, dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from cryptoxdog as a code owner September 21, 2026 03:08
@github-actions

github-actions Bot commented Sep 21, 2026

Copy link
Copy Markdown

✅ PR reviewable size is within recommended limits

@github-actions

github-actions Bot commented Sep 21, 2026

Copy link
Copy Markdown

L9 Audit Harness Report

  • Generated: 2026-09-21T03:09:05.548295+00:00
  • Repo root: /home/runner/work/Cognitive.Engine.Graphs/Cognitive.Engine.Graphs
  • Overall result: ✅ PASSED
  • Exit code: 0

Step Results

Step Status Exit Code Notes
Architecture Audit ✅ Passed 0
Spec Coverage ✅ Passed 0
Contract Wiring ✅ Passed 0

Architecture Audit Findings

Severity Count
🔴 CRITICAL 0
🟠 HIGH 0
🟡 MEDIUM 17
🔵 LOW 0

See artifacts/audit_report.md for full details.

Spec Coverage

  • ✅ Implemented: 37
  • ⚠️ Partial: 9
  • ❌ Missing: 0
  • Total features: 46
Category Implemented Partial Missing Total
gates 10 0 0 10
scoring 7 0 0 7
v1.1_node 2 0 0 2
v1.1_edge 2 0 0 2
v1.1_action 0 2 0 2
v1.1_scoring 1 1 0 2
action_handler 0 6 0 6
gds_algorithm 5 0 0 5
research_pattern 10 0 0 10

See artifacts/coverage_report.md for full details.

Next Steps

All checks passed. Safe to merge.

@sonarqubecloud

sonarqubecloud Bot commented Sep 21, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cryptoxdog cryptoxdog Awaiting requested review from cryptoxdog cryptoxdog is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants