Skip to content

chore(deps): Upgrade geopandas, pyopenssl, pillow and black#94

Merged
m1so merged 3 commits intomainfrom
mb/bump-dependencies-2026-04-16
Apr 16, 2026
Merged

chore(deps): Upgrade geopandas, pyopenssl, pillow and black#94
m1so merged 3 commits intomainfrom
mb/bump-dependencies-2026-04-16

Conversation

@m1so
Copy link
Copy Markdown
Contributor

@m1so m1so commented Apr 16, 2026

Summary by CodeRabbit

  • Chores
    • Added PyOpenSSL (>=26.0.0) and Pillow (>=12.2.0) as new dependencies.
    • Updated Black (>=26.3.1) and GeoPandas (>=1.1.2) to newer versions.
    • Updated CI security vulnerability scanning configuration.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Apr 16, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 76b68a81-15b9-417d-a07f-9e5ad00d50e4

📥 Commits

Reviewing files that changed from the base of the PR and between 2f33a6b and c441974.

⛔ Files ignored due to path filters (1)
  • poetry.lock is excluded by !**/*.lock
📒 Files selected for processing (19)
  • .github/workflows/ci.yml
  • deepnote_core/resources/jupyter/jupyter_server_config.py
  • deepnote_toolkit/config.py
  • deepnote_toolkit/ocelots/pyspark/implementation.py
  • deepnote_toolkit/runtime_initialization.py
  • dockerfiles/builder/constraintsgen.py
  • installer/module/constants.py
  • installer/module/downloader.py
  • installer/module/kernels.py
  • installer/module/symlinks.py
  • installer/module/types.py
  • installer/module/virtual_environment.py
  • pyproject.toml
  • tests/integration/test_deepnote_toolkit_cli_integration.py
  • tests/unit/test_cli_config.py
  • tests/unit/test_config.py
  • tests/unit/test_get_webapp_url.py
  • tests/unit/test_set_notebook_path_config.py
  • tests/unit/test_toolkit_config.py
💤 Files with no reviewable changes (1)
  • .github/workflows/ci.yml

📝 Walkthrough

Walkthrough

This PR removes three CVEs from the CI vulnerability ignore list, normalizes docstring formatting across nine Python modules by trimming extraneous whitespace, refactors test file setup invocations to single-line calls, and updates project dependencies. Changes include adding pyopenssl and pillow, bumping black to a newer version, and unifying geopandas constraints across Python version conditionals.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

🚥 Pre-merge checks | ✅ 3 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 43.75% which is insufficient. The required threshold is 80.00%. Write docstrings for the functions missing them to satisfy the coverage threshold.
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed Title accurately reflects the main changes: dependency version updates for geopandas, pyopenssl, pillow, and black across multiple files.
Updates Docs ✅ Passed PR contains only dependency updates, docstring formatting, and CI cleanup with no new features or functionality.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Copy Markdown

📦 Python package built successfully!

  • Version: 2.2.0.dev10+9375529
  • Wheel: deepnote_toolkit-2.2.0.dev10+9375529-py3-none-any.whl
  • Install:
    pip install "deepnote-toolkit @ https://deepnote-staging-runtime-artifactory.s3.amazonaws.com/deepnote-toolkit-packages/2.2.0.dev10%2B9375529/deepnote_toolkit-2.2.0.dev10%2B9375529-py3-none-any.whl"

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 16, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.32%. Comparing base (2f33a6b) to head (c441974).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #94   +/-   ##
=======================================
  Coverage   74.32%   74.32%           
=======================================
  Files          94       94           
  Lines        5535     5535           
  Branches      824      824           
=======================================
  Hits         4114     4114           
  Misses       1155     1155           
  Partials      266      266           
Flag Coverage Δ
combined 74.32% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@deepnote-bot
Copy link
Copy Markdown

🚀 Review App Deployment Started

📝 Description 🌐 Link / Info
🌍 Review application ra-94
🔑 Sign-in URL Click to sign-in
📊 Application logs View logs
🔄 Actions Click to redeploy
🚀 ArgoCD deployment View deployment
Last deployed 2026-04-16 12:03:02 (UTC)
📜 Deployed commit 1f1e21268b7b17629ca5e65e7641c42c8b5fb5f0
🛠️ Toolkit version 9375529

@m1so m1so marked this pull request as ready for review April 16, 2026 12:06
@m1so m1so requested a review from a team as a code owner April 16, 2026 12:06
@m1so m1so requested review from mfranczel, saltenasl and tkislan April 16, 2026 12:06
Copy link
Copy Markdown
Contributor

@tkislan tkislan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested bigquery and snowflake in RA

@m1so m1so merged commit f2ac75a into main Apr 16, 2026
32 checks passed
@m1so m1so deleted the mb/bump-dependencies-2026-04-16 branch April 16, 2026 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants