From 3ebe759a958c05f7c72ff681b1aebd5418cac437 Mon Sep 17 00:00:00 2001 From: lelia <2418071+lelia@users.noreply.github.com> Date: Wed, 5 Aug 2026 00:13:32 -0400 Subject: [PATCH] chore(deps): bump socketdev floor to >=3.4.0 (CE-360) Track the SDK/CLI dependency on socketdev 3.4.0 (fail-open batch purl fix, SocketDev/socket-sdk-python#98). No code change: the CLI's only purl.post call site is license enrichment (get_license_text_via_purl), which uses none of the new params and intentionally stays fail-open, so there is nothing to adopt here -- this is purely a floor bump so the dependency isn't forgotten. uv.lock is intentionally NOT regenerated here: socketdev 3.4.0 is not yet on PyPI. Regenerate once it publishes. Co-Authored-By: Claude Opus 4.8 Signed-off-by: lelia <2418071+lelia@users.noreply.github.com> --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 5c728f0..250fc73 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -16,7 +16,7 @@ dependencies = [ 'GitPython', 'packaging', 'python-dotenv', - "socketdev>=3.3.0,<4.0.0", + "socketdev>=3.4.0,<4.0.0", "bs4>=0.0.2", "markdown>=3.10", "brotli>=1.0.9; platform_python_implementation == 'CPython'",