Repository navigation
build(deps): bump headroom-ai from 0.37.0 to 0.41.0 in /python - #151
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [headroom-ai](https://github.com/headroomlabs-ai/headroom) from 0.37.0 to 0.41.0. - [Release notes](https://github.com/headroomlabs-ai/headroom/releases) - [Changelog](https://github.com/headroomlabs-ai/headroom/blob/main/CHANGELOG.md) - [Commits](headroomlabs-ai/headroom@v0.37.0...v0.41.0) --- updated-dependencies: - dependency-name: headroom-ai dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Incomplete dependency bump — the diff touches only python/requirements-headroom.txt, but that file is a Dependabot anchor never actually installed from; the real pinned version (action.yml's headroom_version default, duplicated in the three reusable workflows) is untouched and still 0.37.0. See the inline comment for the specific files/lines and why this file's own header makes the companion update a documented requirement, not a suggestion.
No other findings — the diff is otherwise just the version string.
Title and description are Dependabot's standard, accurate form for this change; left untouched.
| # the two in sync by hand (see README.md's "Context compression (Headroom)" section): when this file's | ||
| # version bumps, update action.yml's default to match in the same PR. | ||
| headroom-ai[proxy]==0.37.0 | ||
| headroom-ai[proxy]==0.41.0 |
There was a problem hiding this comment.
Should fix 🟠 [policy] — this bumps only the anchor file; the version actually installed at runtime is untouched, so this PR doesn't do what its title says.
requirements-headroom.txt is explicitly "never installed from directly" (see its own header, lines 1-5): action.yml pip-installs headroom-ai[proxy]==${HEADROOM_VERSION} from inputs.headroom_version (action.yml:1322,1469), which still defaults to "0.37.0" (action.yml:378). The same default is duplicated, and also still "0.37.0", in .github/workflows/review.yml:219, triage.yml:161, and interactive.yml:182.
This file's own header (and .github/dependabot.yml's pip-ecosystem entry comment) both say the hand-update to action.yml's default belongs "in the same PR". As merged, the Dependabot pip ecosystem will now consider 0.41.0 already applied and stop proposing it, while the action keeps running 0.37.0 indefinitely — a silent, hard-to-notice regression in the update process itself.
Needs action.yml:378, review.yml:219, triage.yml:161, and interactive.yml:182 all bumped to "0.41.0" in this PR.
If you would like me to fix this, comment:
@claude bump the headroom_version default from "0.37.0" to "0.41.0" in action.yml, .github/workflows/review.yml, .github/workflows/triage.yml, and .github/workflows/interactive.yml, to match the python/requirements-headroom.txt bump in this PR
|
🗜️ Headroom context compression
|
Bumps headroom-ai from 0.37.0 to 0.41.0.
Release notes
Sourced from headroom-ai's releases.
... (truncated)
Changelog
Sourced from headroom-ai's changelog.
... (truncated)
Commits
76133cfchore: release 0.41.0 (#4002)f1bc260fix(deps): recommend headroom-ai for optional extras (#4046)9762a14fix(smart-crusher): preserve wrapped retrieval results in apply (#4149)2721f06fix(transforms): keep line-anchored detection regexes linear on blank-line ru...2016dc6fix(onnx): stop magika's ORT intra-op pool from spinning idle cores (#4189)1cf4d05fix(cache): stop Claude Code forks from cold-starting the conversation's line...a9eb2a7fix(proxy): keep Claude Haiku 5.5 mid-conversation system messages in place (...22a1296fix(copilot): send VS Code next-edit requests to the completions host (#4188)1dc7a18fix(copilot): honour GitHub's advertised Business/Enterprise host by default ...feea130fix(wrap): carry the shared proxy's extensions over to a dedicated Copilot pr...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)