From 13f2e708c11e35e20a550c3b43ae7e0de99f1ca7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 11:49:34 +0000 Subject: [PATCH 1/6] Build(deps): Bump protobuf Bumps the protobuf-major group with 1 update in the / directory: [protobuf](https://github.com/protocolbuffers/protobuf). Updates `protobuf` from 6.33.5 to 7.35.1 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) --- updated-dependencies: - dependency-name: protobuf dependency-version: 7.35.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: protobuf-major ... Signed-off-by: dependabot[bot] Signed-off-by: Mathias L. Baumann --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index f84a73b..f5f9a58 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -10,7 +10,7 @@ requires = [ # sure the code is generated using the minimum supported versions, as older # versions can't work with code that was generated with newer versions. # https://protobuf.dev/support/cross-version-runtime-guarantee/#backwards - "protobuf == 6.33.5", + "protobuf == 7.35.1", "grpcio-tools == 1.81.1", "grpcio == 1.81.1", ] From 69c017a4fc10a6be2b2d706b9dd6d40cad0da183 Mon Sep 17 00:00:00 2001 From: "frequenz-auto-dependabot[bot]" <261417025+frequenz-auto-dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 11:50:11 +0000 Subject: [PATCH 2/6] Apply migration from 6.33.5 to 7.35.0 === v7.35.0 ========================================================= Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/529d30b554392e6d8b66e84e92c04ac9cd170da7/cookiecutter/scripts/dependabot-grpc-fixer.py Updated pyproject.toml with 1 grpc/protobuf constraint(s). The migration completed successfully. Applied-by: frequenz-floss/gh-action-dependabot-migrate Signed-off-by: Mathias L. Baumann --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index f5f9a58..1e48dcf 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -48,7 +48,7 @@ dependencies = [ # We can't widen beyond the current value unless we bump the minimum # requirements too because of protobuf cross-version runtime guarantees: # https://protobuf.dev/support/cross-version-runtime-guarantee/#major - "protobuf >= 6.33.5, < 8", # Do not widen beyond 8! + "protobuf >= 7.35.0, < 9", # Do not widen beyond 9! # We couldn't find any document with a spec about the cross-version runtime # guarantee for grpcio, so unless we find one in the future, we'll assume # major version jumps are not compatible From 0edcfa4c830ed69291c65cdf33b428fe76943a28 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 11:41:55 +0000 Subject: [PATCH 3/6] Build(deps): Bump the grpc-compatible group with 2 updates Bumps the grpc-compatible group with 2 updates: [grpcio](https://github.com/grpc/grpc) and [grpcio-tools](https://github.com/grpc/grpc). Updates `grpcio` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](https://github.com/grpc/grpc/compare/v1.81.1...v1.83.0) Updates `grpcio-tools` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](https://github.com/grpc/grpc/compare/v1.81.1...v1.83.0) --- updated-dependencies: - dependency-name: grpcio dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: grpc-compatible - dependency-name: grpcio-tools dependency-version: 1.83.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: grpc-compatible ... Signed-off-by: dependabot[bot] Signed-off-by: Mathias L. Baumann --- pyproject.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 1e48dcf..3bd849d 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -11,8 +11,8 @@ requires = [ # versions can't work with code that was generated with newer versions. # https://protobuf.dev/support/cross-version-runtime-guarantee/#backwards "protobuf == 7.35.1", - "grpcio-tools == 1.81.1", - "grpcio == 1.81.1", + "grpcio-tools == 1.83.0", + "grpcio == 1.83.0", ] build-backend = "setuptools.build_meta" From aee37a3c3103420c844fe22f9d68202af033f9e1 Mon Sep 17 00:00:00 2001 From: "frequenz-auto-dependabot[bot]" <261417025+frequenz-auto-dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 11:42:39 +0000 Subject: [PATCH 4/6] Apply migration from 1.81.1 to 1.83.0 === v1.83.0 ========================================================= Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/529d30b554392e6d8b66e84e92c04ac9cd170da7/cookiecutter/scripts/dependabot-grpc-fixer.py Updated pyproject.toml with 1 grpc/protobuf constraint(s). The migration completed successfully. Signed-off-by: Mathias L. Baumann --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 3bd849d..d8d88e7 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -52,7 +52,7 @@ dependencies = [ # We couldn't find any document with a spec about the cross-version runtime # guarantee for grpcio, so unless we find one in the future, we'll assume # major version jumps are not compatible - "grpcio >= 1.81.1, < 2", # Do not widen beyond 2! + "grpcio >= 1.83.0, < 2", # Do not widen beyond 2! ] dynamic = ["version"] From 596a7f275d204d60bd710d692a2083b2a6a47e6e Mon Sep 17 00:00:00 2001 From: Leandro Lucarella Date: Tue, 11 Aug 2026 14:02:09 +0200 Subject: [PATCH 5/6] Fix protobuf dependency The migration script updated the dependency to an older version because of a dependabot fetch-metadata action bug, so we fix it manually. Signed-off-by: Leandro Lucarella Signed-off-by: Mathias L. Baumann --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index d8d88e7..102ebcb 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -48,7 +48,7 @@ dependencies = [ # We can't widen beyond the current value unless we bump the minimum # requirements too because of protobuf cross-version runtime guarantees: # https://protobuf.dev/support/cross-version-runtime-guarantee/#major - "protobuf >= 7.35.0, < 9", # Do not widen beyond 9! + "protobuf >= 7.35.1, < 9", # Do not widen beyond 9! # We couldn't find any document with a spec about the cross-version runtime # guarantee for grpcio, so unless we find one in the future, we'll assume # major version jumps are not compatible From 2fa8a141c71c8e77da1d129ca06cde018a510811 Mon Sep 17 00:00:00 2001 From: Leandro Lucarella Date: Tue, 11 Aug 2026 14:02:51 +0200 Subject: [PATCH 6/6] Bump googleapis-common-protos We need to update it to a version that supports the new protobuf version. Signed-off-by: Leandro Lucarella Signed-off-by: Mathias L. Baumann --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 102ebcb..bdf2a29 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -44,7 +44,7 @@ classifiers = [ requires-python = ">= 3.11, < 4" dependencies = [ "frequenz-api-common >= 0.8.0, < 1.0", - "googleapis-common-protos >= 1.70.0, < 2", + "googleapis-common-protos >= 1.75.1, < 2", # We can't widen beyond the current value unless we bump the minimum # requirements too because of protobuf cross-version runtime guarantees: # https://protobuf.dev/support/cross-version-runtime-guarantee/#major