Skip to content

Dependabot: no longer bump pip for security-only 3.13 - #159253

Merged
hugovk merged 1 commit into
python:mainfrom
hugovk:3.16-dependabot-rm-3.13
Oct 12, 2026
Merged

hugovk merged 1 commit into
python:mainfrom
hugovk:3.16-dependabot-rm-3.13

Conversation

@hugovk

@hugovk hugovk commented Oct 12, 2026

Copy link
Copy Markdown
Member

The pip group's comment says:

  # Only bump bugfix branches for pip. Remove
  # the entry when branch goes security-only.

@StanFromIreland StanFromIreland left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this be added to the release process note somewhere?

@hugovk

hugovk commented Oct 12, 2026

Copy link
Copy Markdown
Member Author

Yep, I've opened python/peps#5167.

@hugovk
hugovk merged commit 178a5ef into python:main Oct 12, 2026
61 checks passed
@hugovk
hugovk deleted the 3.16-dependabot-rm-3.13 branch October 12, 2026 20:40
@ezio-melotti

Copy link
Copy Markdown
Member

Can this be automated (like python/release-tools#441)?

@hugovk

hugovk commented Oct 13, 2026

Copy link
Copy Markdown
Member Author

Probably! Editing files isn't as easy as deleting them, but want to open an issue for it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

infra CI, GitHub Actions, buildbots, Dependabot, etc. skip issue skip news

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants