Skip to content

Python: update dependencies and the pip pin - #1399

Merged
gusthoff merged 6 commits into
AdaCore:mainfrom
gusthoff:dev/topic/infrastructure/python/update-deps/2026-10-30
Oct 30, 2026
Merged

gusthoff merged 6 commits into
AdaCore:mainfrom
gusthoff:dev/topic/infrastructure/python/update-deps/2026-10-30

Conversation

@gusthoff

Copy link
Copy Markdown
Collaborator
  • Upgrade Sphinx to 9.2.0, Docutils to 0.23, Pillow to 13.0.0 and
    IPython to 9.18.0, along with their supporting dependencies.
  • Refresh HTTP/WebSocket dependencies, coverage and type-checking
    tools, keeping direct and frozen requirements consistent.
  • Pin pip to 26.2.2 in CI and both Vagrant provisioners so local
    and CI environments use the same installer.

Validated locally with type checks, 29 plugin tests, 481 pipeline
tests (four expected failures), and HTML/PDF/EPUB builds. Frozen
environment reproduction and pip check pass; the Python security
audit reports zero findings across 59 packages.

Co-Authored-By: Codex noreply@openai.com

gusthoff and others added 6 commits October 30, 2026 18:27
- Refresh HTTPS dependencies and pin `websocket-client` to 1.9.2 in
  both requirements files to keep the network tooling current.
- Validate the complete Python update with `pip check`, frozen
  environment reproduction and a security audit with no findings.

Co-Authored-By: Codex <noreply@openai.com>
- Pin `pillow` to 13.0.0 in both requirements files to update the
  image-processing dependency used by the publishing pipeline.
- Validate cover generation and PDF/EPUB builds with the complete
  Python dependency update.

Co-Authored-By: Codex <noreply@openai.com>
- Upgrade `Sphinx` to 9.2.0 and `docutils` to 0.23, and refresh the
  supporting documentation packages in both requirements files.
- Validate the complete Python update with HTML, PDF and EPUB builds;
  book warnings match the previous dependency versions.

Co-Authored-By: Codex <noreply@openai.com>
- Upgrade `ipython` to 9.18.0 and refresh its supporting dependencies.
- Remove `decorator` from the frozen dependency closure because the
  updated environment no longer requires it.
- Verify `pip check` and frozen environment reproduction with the
  complete Python dependency update.

Co-Authored-By: Codex <noreply@openai.com>
- Update `coverage` to 7.17.0, `pyright` to 1.1.414 and `nodeenv` to
  1.11.1 to keep the test and type-checking toolchain current.
- Validate the complete Python update with type checks, 29 plugin
  tests and 481 pipeline tests, with four expected failures.

Co-Authored-By: Codex <noreply@openai.com>
- Pin `pip` to 26.2.2 in the four test workflows and both Vagrant
  provisioners so local and CI environments use the same installer.
- Verify `pip check` on both VMs and reproduce the frozen environment
  with the complete Python dependency update.

Co-Authored-By: Codex <noreply@openai.com>
@gusthoff gusthoff added website infrastructure python Pull requests that update Python code labels Oct 30, 2026
@gusthoff
gusthoff merged commit 53d058f into AdaCore:main Oct 30, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

python Pull requests that update Python code website infrastructure

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant