From b0efbf0e837a3aafa92dd7153ff8849193ab1de9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Aug 2026 01:32:26 +0000 Subject: [PATCH 1/2] Bump requests from 2.32.3 to 2.33.0 Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.33.0. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](https://github.com/psf/requests/compare/v2.32.3...v2.33.0) --- updated-dependencies: - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 07b66f1d..25e7f9eb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ boto3>=1.37.24 PyYaml>=6.0.1 -requests==2.32.3 +requests==2.33.0 robotframework==6.1.1 \ No newline at end of file From 2792d7a39a1b24efe3d2346d8b00ad80e9d24172 Mon Sep 17 00:00:00 2001 From: Jeffrey Aven Date: Tue, 25 Aug 2026 07:52:54 +1000 Subject: [PATCH 2/2] ci: drop CI_STACKQL_PACKAGE_DOWNLOAD_TOKEN from upstream checkouts stackql/stackql and stackql/any-sdk are public, so actions/checkout can clone them with the default GITHUB_TOKEN. The explicit PAT input broke Dependabot-triggered runs, which only see the Dependabot secret store ("Input required and not supplied: token"). Co-Authored-By: Claude Fable 5 --- .github/workflows/aot.yml | 2 -- .github/workflows/regression.yml | 3 --- 2 files changed, 5 deletions(-) diff --git a/.github/workflows/aot.yml b/.github/workflows/aot.yml index 32e7dfe4..a0c961ba 100644 --- a/.github/workflows/aot.yml +++ b/.github/workflows/aot.yml @@ -56,7 +56,6 @@ jobs: with: repository: ${{ env.STACKQL_CORE_REPOSITORY }} ref: ${{ env.STACKQL_CORE_REF }} - token: ${{ secrets.CI_STACKQL_PACKAGE_DOWNLOAD_TOKEN }} path: stackql-core - name: Download any-sdk @@ -64,7 +63,6 @@ jobs: with: repository: ${{ env.STACKQL_ANY_SDK_REPOSITORY }} ref: ${{ env.STACKQL_ANY_SDK_REF }} - token: ${{ secrets.CI_STACKQL_PACKAGE_DOWNLOAD_TOKEN }} path: stackql-any-sdk - name: Setup Python diff --git a/.github/workflows/regression.yml b/.github/workflows/regression.yml index 09b3e7ab..c7a043e3 100644 --- a/.github/workflows/regression.yml +++ b/.github/workflows/regression.yml @@ -35,7 +35,6 @@ jobs: with: repository: ${{ env.STACKQL_CORE_REPOSITORY }} ref: ${{ env.STACKQL_CORE_REF }} - token: ${{ secrets.CI_STACKQL_PACKAGE_DOWNLOAD_TOKEN }} path: stackql-core-pkg - name: Setup Python @@ -100,7 +99,6 @@ jobs: with: repository: ${{ env.STACKQL_CORE_REPOSITORY }} ref: ${{ env.STACKQL_CORE_REF }} - token: ${{ secrets.CI_STACKQL_PACKAGE_DOWNLOAD_TOKEN }} path: stackql-core - name: Download any-sdk @@ -108,7 +106,6 @@ jobs: with: repository: ${{ env.STACKQL_ANY_SDK_REPOSITORY }} ref: ${{ env.STACKQL_ANY_SDK_REF }} - token: ${{ secrets.CI_STACKQL_PACKAGE_DOWNLOAD_TOKEN }} path: stackql-any-sdk - name: Setup Python