Skip to content

build(deps): bump headroom-ai from 0.37.0 to 0.40.0 in /python #130

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

build(deps): bump headroom-ai from 0.37.0 to 0.40.0 in /python #130

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion python/requirements-headroom.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,4 @@
# version this action actually installs lives in action.yml's headroom_version input default -- keep
# the two in sync by hand (see README.md's "Context compression (Headroom)" section): when this file's
# version bumps, update action.yml's default to match in the same PR.
headroom-ai[proxy]==0.37.0
headroom-ai[proxy]==0.40.0

@github-actions github-actions Bot Oct 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should fix [policy] — this bumps the anchor file, but action.yml:378's headroom_version default is still "0.37.0" and isn't touched by this PR.

Per this file's own header (lines 3–5 above) and docs/headroom.md's "Version pinning" section: "the version this action actually installs lives in action.yml's headroom_version input default... when this file's version bumps, update action.yml's default to match in the same PR; neither pair wired together automatically." requirements-headroom.txt is explicitly "never installed from directly" — it exists only so Dependabot can track the pin. So as it stands this PR changes nothing about what the action actually installs; the two pins are left out of sync exactly as the comment warns against.

Worth noting for whoever does the action.yml sync: upstream's v0.40.0 release notes list two ⚠ BREAKING CHANGES ("read HEADROOM_LICENSE, make usage reporting opt-in"; "drop crewai extra, remove chromadb from lockfile") despite Dependabot classifying this as semver-minor (headroom-ai is pre-1.0, so a second-position bump can still be breaking). The crewai extra isn't the [proxy] extra this repo installs, but the license/usage-reporting change is proxy-wide and worth a look before trusting the new default blindly.

If you'd like me to fix this, comment:

@claude update action.yml's headroom_version default (currently "0.37.0" at action.yml:378) to "0.40.0" to match the anchor-file bump in python/requirements-headroom.txt, per the sync requirement documented in that file's header and in docs/headroom.md.