Skip to content

Automate PR assignment and update dependencies - #270

Merged
YoshihitoAso merged 1 commit into
dev-2.9from
bump-packages
Oct 23, 2026
Merged

YoshihitoAso merged 1 commit into
dev-2.9from
bump-packages

Conversation

@YoshihitoAso

Copy link
Copy Markdown
Member

This pull request introduces automated reviewer assignment for pull requests via GitHub Actions, updates dependency constraints to address a security advisory, and upgrades the web3 library to a new major version.

Automation and Workflow Enhancements:

  • Added .github/auto_assign.yml to configure automatic assignment of reviewers and the PR author for new pull requests.
  • Introduced .github/workflows/auto-assign.yml to enable the auto-assign GitHub Action, which triggers on PR creation and when PRs are marked ready for review.

Dependency and Security Updates:

  • Updated the web3 dependency from version 7.16.0 to 8.0.0 in pyproject.toml.
  • Added constraints in both pyproject.toml and tests/pyproject.toml to require certifi>=2026.10.19 immediately (with no release-age delay), addressing the GHSA-6q48-6c7w-9gw2 security advisory. [1] [2]

@YoshihitoAso
YoshihitoAso merged commit 41c83bd into dev-2.9 Oct 23, 2026
2 checks passed
@YoshihitoAso
YoshihitoAso deleted the bump-packages branch October 23, 2026 01:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants