Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 29, 2025

Bumps psutil from 7.2.0 to 7.2.1.

Changelog

Sourced from psutil's changelog.

7.2.1

2025-12-29

Bug fixes

  • 2699_, [FreeBSD], [NetBSD]: heap_info()_ does not detect small allocations (<= 1K). In order to fix that, we now flush internal jemalloc cache before fetching the metrics.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [psutil](https://github.com/giampaolo/psutil) from 7.2.0 to 7.2.1.
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](giampaolo/psutil@release-7.2.0...release-7.2.1)

---
updated-dependencies:
- dependency-name: psutil
  dependency-version: 7.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Dec 29, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 29, 2025 17:13
@dependabot dependabot bot added the python Pull requests that update python code label Dec 29, 2025
@github-actions
Copy link

🤖 Claude Code Review

Code Review: Dependency Update - psutil 7.2.0 → 7.2.1

Summary

This is a minor dependency version bump for psutil from version 7.2.0 to 7.2.1 in the development dependencies.


Review Against Checklist

Code Quality

  • Code follows style guide: N/A - This is a dependency version update only, no code changes
  • No commented-out code: No code changes in this PR
  • Meaningful variable names: N/A - No code changes
  • DRY principle followed: N/A - No code changes
  • Defects identified: None. This is a routine dependency update to a minor patch version (7.2.0 → 7.2.1), which typically contains bug fixes. No logic errors, edge cases, or vulnerabilities introduced.
  • Project memory (.claude/CLAUDE.md): No project-specific Claude configuration file found in the repository, so this criterion does not apply.

Testing

  • Unit tests for new functions: N/A - No new functions added
  • Integration tests for new endpoints: N/A - No new endpoints added
  • Edge cases covered: N/A - No functional changes
  • Test coverage > 80%: N/A - Dependency update shouldn't affect test coverage (existing tests remain)

Documentation

  • README updated if needed: N/A - Dependency updates typically don't require README changes
  • API docs updated: N/A - No API changes
  • Inline comments for complex logic: N/A - No code changes
  • CHANGELOG.md updated: ISSUE FOUND - The CHANGELOG.md (pyproject.toml:38) has not been updated to reflect this dependency bump. The latest version in CHANGELOG.md is 0.0.10 from 2025-08-11, but this dependency update should be documented.
  • Markdown files formatted with prettier: The CHANGELOG.md follows CommonMark specification format

Security

  • No hardcoded credentials: No credentials added
  • Input validation implemented: N/A - No code changes
  • Proper error handling: N/A - No code changes
  • No sensitive data in logs: N/A - No code changes
  • No license files (.lic) checked in: Grep search for AQAAAD found matches only in build-resources and temporary files (not tracked), no critical license files detected in the actual source code

Issues Found

Critical Issues

None

Major Issues

None

Minor Issues

  1. Missing CHANGELOG entry (CHANGELOG.md)
    • The CHANGELOG.md should be updated to document this dependency version bump
    • Suggested entry format:
      ## [Unreleased]
      
      ### Changed in Unreleased
      
      - Bump psutil from 7.2.0 to 7.2.1

Recommendation

APPROVE with minor documentation update recommended

This is a straightforward dependency patch update that poses minimal risk. The only improvement would be to add an entry to CHANGELOG.md to maintain a complete project history. However, for automated dependency updates like this (appears to be from Dependabot based on commit message pattern), it's common practice in many projects to batch these into periodic CHANGELOG updates rather than documenting each individual patch version bump.

Automated code review analyzing defects and coding standards

Copy link

@senzingdevops senzingdevops left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated: approving this pull request because it includes a patch update

@github-actions github-actions bot enabled auto-merge (squash) December 29, 2025 17:15
@docktermj docktermj self-assigned this Jan 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants