build(deps): Bump annotations 1.3.1 → 1.4.0, asserts 1.5.0 → 1.6.1 and 2 more packages

[Stivo182]

• annotations: 1.3.1 → 1.4.0
  (repo · hub)
• asserts: 1.5.0 → 1.6.1
  (repo · hub)
• autumn: 4.3.11 → 4.3.12
  (repo · hub)
• lambdas: 0.3.2 → 0.3.3
  (repo · hub)

Summary by CodeRabbit

• Chores
  • Updated dependency versions to the latest releases for annotations, asserts, autumn, and lambdas packages.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

📝 Walkthrough

Walkthrough

Updated four dependency declarations in packagedef: annotations 1.3.1 → 1.4.0, asserts 1.5.0 → 1.6.1, autumn 4.3.11 → 4.3.12, lambdas 0.3.2 → 0.3.3; no other files or logic changed.

Changes

Cohort / File(s)	Summary
Dependency Version Updates packagedef	Bumped dependency versions: ЗависитОт("annotations", "1.3.1") → ЗависитОт("annotations", "1.4.0"), ЗависитОт("asserts", "1.5.0") → ЗависитОт("asserts", "1.6.1"), ЗависитОт("autumn", "4.3.11") → ЗависитОт("autumn", "4.3.12"), ЗависитОт("lambdas", "0.3.2") → ЗависитОт("lambdas", "0.3.3").

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 I hopped through lines with nimble paws,
Four tiny bumps to tidy the cause.
Annotations, asserts, autumn, lambdas — done,
A quick tidy-up, then off to run.
🥕

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change—updating four package dependencies with specific version numbers, matching the changeset contents.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch depos/bump-deps/latest

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 2

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 1936a0f and 2346626.

📒 Files selected for processing (1)

• packagedef (1 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (14)

• GitHub Check: test (stable) / build (ubuntu-latest, stable)
• GitHub Check: test (dev) / build (windows-latest, dev)
• GitHub Check: test (dev) / build (macos-latest, dev)
• GitHub Check: test (stable) / build (macos-latest, stable)
• GitHub Check: test (dev) / build (ubuntu-latest, dev)
• GitHub Check: test (stable) / build (windows-latest, stable)
• GitHub Check: sonar / test
• GitHub Check: test (stable) / build (macos-latest, stable)
• GitHub Check: sonar / test
• GitHub Check: test (stable) / build (ubuntu-latest, stable)
• GitHub Check: test (dev) / build (windows-latest, dev)
• GitHub Check: test (dev) / build (ubuntu-latest, dev)
• GitHub Check: test (stable) / build (windows-latest, stable)
• GitHub Check: test (dev) / build (macos-latest, dev)

🔇 Additional comments (1)

packagedef (1)

22-22: Verify all three dependency versions exist on hub.oscript.io before merging.

Unable to confirm via GitHub API or web search whether versions 1.4.0 (annotations), 1.6.0 (asserts), and 0.3.3 (lambdas) exist or have security issues. Please manually verify these versions are available on the package hub and check for any known security vulnerabilities before merging.

[coderabbitai]

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Verify the lambdas 0.3.3 version exists and check for security advisories.

Please verify that version 0.3.3 of the lambdas package exists and has no known vulnerabilities.

---

🏁 Script executed:

#!/bin/bash
# Description: Verify lambdas version 0.3.3 exists

# Check oscript-library for lambdas package
echo "Checking for lambdas package version 0.3.3..."
gh api repos/oscript-library/lambdas/releases --jq '.[] | select(.tag_name | contains("0.3.3")) | {tag_name, published_at, body}'

# Alternative: Check tags
gh api repos/oscript-library/lambdas/tags --jq '.[] | select(.name | contains("0.3.3")) | .name'

Length of output: 45

---

---

🏁 Script executed:

```shell
#!/bin/bash
# Try to list all repos in oscript-library to find lambdas
gh repo list oscript-library --limit 200 | grep -i lambda

Length of output: 117

---

---

🏁 Script executed:

```shell
#!/bin/bash
# Get all releases and tags for lambdas repository
echo "=== Releases ===" 
gh api repos/oscript-library/lambdas/releases --paginate --jq '.[] | {tag_name, published_at, draft, prerelease}'

echo ""
echo "=== Tags ===" 
gh api repos/oscript-library/lambdas/tags --paginate --jq '.[] | .name'

Length of output: 37

---

lambdas version 0.3.3 does not exist in the repository.

The oscript-library/lambdas repository only contains a single tag: v0.1.0. The version 0.3.3 referenced in the dependency update does not exist, making this an invalid version specification.

🤖 Prompt for AI Agents

In packagedef around line 28, the dependency entry .ЗависитОт("lambdas",
"0.3.3") references a non‑existent version; replace "0.3.3" with the actual
available tag (e.g., "v0.1.0") or the correct version string from the
oscript-library/lambdas repo, or remove the dependency if it’s not needed, then
run the dependency validation to ensure the new version exists.

[sonar-openbsl-ru-qa-bot]

Quality Gate passed

Issues

• 0 New Issues
• 0 Fixed Issues
• 0 Accepted Issues

Measures

• 0 Security Hotspots
• No data about coverage (95.20% Estimated after merge)
• No data about duplications (0.50% Estimated after merge)

Project ID: benchmark

View in SonarQube