Skip to content

Bump pymdown-extensions from 10.21.3 to 11.0.1 - #469

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/pymdown-extensions-11.0.1
Open

Bump pymdown-extensions from 10.21.3 to 11.0.1#469
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/pymdown-extensions-11.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps pymdown-extensions from 10.21.3 to 11.0.1.

Release notes

Sourced from pymdown-extensions's releases.

11.0.1

  • FIX: BetterEm: Fix regex pattern inefficiencies.
  • FIX: Tilde: Fix regex pattern inefficiencies.
  • FIX: Caret: Fix regex pattern inefficiencies.
  • FIX: MagicLink: Fix regex pattern inefficiencies.

11.0

  • BREAK: B64: Restricts relative links to base_path by default. Can be disabled by setting new restrict_path option to False. The new root_path can be specified if paths are desired to be restricted to a different location separate base_path which is also used as a relative base for image paths.
  • NEW: Drop Python 3.9 support.
  • FIX: Tabbed: Fix issue where an empty title would cause an exception.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.21.3 to 11.0.1.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](facelessuser/pymdown-extensions@10.21.3...11.0.1)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: 11.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 9, 2026 10:37
edge-endpoint-mirror Bot pushed a commit that referenced this pull request Aug 14, 2026
…g across all containers (#469)

* Support SDK 0.31 token rotation on Edge

Bump groundlight to 0.31, disable rotation for inbound request-token
clients, and share a durable device token cache between status-monitor
and the escalation queue reader.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Tidy token-rotation comments

Co-authored-by: Cursor <cursoragent@cursor.com>

* Prefer SDK device token cache for ECR credential refresh

create/refresh ECR jobs share the device token dir and read
current.raw_key via jq when present, falling back to the seed secret
so refresh keeps working after rotation supersedes the seed.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Unify Edge Groundlight API token handling for SDK 0.31 rotation

Authorize SDK-facing routes by same-group check, route all upstream cloud
work through the device ExperimentalApi client, and make remaining shell
consumers prefer the shared rotated token cache so helm upgrades keep working
after the seed is revoked.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Remove multi-account detector tokens from Edge config and DB

Delete the unused inference_deployments.api_token column, reject per-detector
api_token on PUT /edge-config, and strip it at the config load boundary so
existing PVC configs are cleaned on the next startup reconcile.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Fix auth error mapping, metrics call_api shape, and null api_token reject

Reject only non-null per-detector api_token so SDK to_payload() works, pass
metrics headers/body positionally for GroundlightApiClient, and map
ApiException/malformed group.id to 503. Add HTTP gating and real-client tests.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Bump groundlight to 0.32 and use me() for group auth

Replace the who_am_i passthrough with Groundlight.me().group.id now that
SDK 0.32 exposes typed identity.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Drop per-detector api_token strip/reject hygiene

Ignore InferenceConfig.api_token instead of rejecting or scrubbing it;
the device token is already used for all cloud calls.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Remove redundant auth comments from API routers

Co-authored-by: Cursor <cursoragent@cursor.com>

* Rename GroundlightAuthManager to EdgeEndpointAuthManager

Match the singleton accessor to the returned type
(edge_endpoint_auth_manager) and rename the module accordingly.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Trim EdgeEndpointAuthManager comments

Drop exception-mapping noise and keep a short note on why caller
token rotation is disabled.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Drop unused future annotations import from auth module

Co-authored-by: Cursor <cursoragent@cursor.com>

* Shorten edge_endpoint_auth_manager docstring

Co-authored-by: Cursor <cursoragent@cursor.com>

* Automatically reformatting code with black and isort

* Simplify metrics reporting back to device api_client call_api

Drop the EdgeApi ceremony; still use the device client's authenticated
client so token rotation applies.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Pass GROUNDLIGHT_API_TOKEN into CI edge-endpoint containers

Startup now builds EdgeEndpointAuthManager, which requires the device
token. Docker-based integration and SDK jobs were starting the container
without it, so the app crashed and nginx returned 502.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Allow null model binaries from EdgeApi.get_model_urls

Cloud returns null model_binary_id for no-binary detectors; the generated
client rejects that unless return-type checks are disabled. parse_model_info
already handles the no-binary case.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Revert metric_reporting.py comment churn

Restore the file to match main so this PR has no intentional metrics-reporting diff.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Drop ECR creds GROUNDLIGHT_TOKEN_DIR comment

Co-authored-by: Cursor <cursoragent@cursor.com>

* Drop validate-api-token GROUNDLIGHT_TOKEN_DIR comment

Co-authored-by: Cursor <cursoragent@cursor.com>

* Update stale http_transport_retries comment in metadata fetch

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Auto-format Bot <autoformatbot@groundlight.ai>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants