pip-audit brew packages #1607
Annotations
10 errors and 15 warnings
|
auto-pr / auto-pr
Unable to determine dependencies for "https://github.com/facebook/redex/archive/refs/tags/v2017.10.31.tar.gz" because of a failure when running
`/opt/homebrew/opt/python@3.14/libexec/bin/python -m pip install -q --disable-pip-version-check --dry-run --ignore-installed --uploaded-prior-to=2026-04-15T08:59:21Z --report=/dev/stdout https://github.com/facebook/redex/archive/refs/tags/v2017.10.31.tar.gz`.
Please update the resources manually.
|
|
auto-pr / auto-pr
Unable to update resource blocks for "pytr" automatically. Please update them manually.
|
|
auto-pr / auto-pr
Unable to determine dependencies for "https://downloads.python.org/pypy/pypy3.10-v7.3.17-src.tar.bz2" because of a failure when running
`/opt/homebrew/opt/python@3.14/libexec/bin/python -m pip install -q --disable-pip-version-check --dry-run --ignore-installed --uploaded-prior-to=2026-04-15T08:59:06Z --report=/dev/stdout https://downloads.python.org/pypy/pypy3.10-v7.3.17-src.tar.bz2`.
Please update the resources manually.
|
|
auto-pr / auto-pr
Unable to determine dependencies for "https://downloads.python.org/pypy/pypy2.7-v7.3.21-src.tar.bz2" because of a failure when running
`/opt/homebrew/opt/python@3.14/libexec/bin/python -m pip install -q --disable-pip-version-check --dry-run --ignore-installed --uploaded-prior-to=2026-04-15T08:59:00Z --report=/dev/stdout https://downloads.python.org/pypy/pypy2.7-v7.3.21-src.tar.bz2`.
Please update the resources manually.
|
|
auto-pr / auto-pr
Unable to determine dependencies for "manim==0.20.1" because of a failure when running
`/opt/homebrew/opt/python@3.14/libexec/bin/python -m pip install -q --disable-pip-version-check --dry-run --ignore-installed --uploaded-prior-to=2026-04-15T08:55:03Z --report=/dev/stdout manim==0.20.1`.
Please update the resources manually.
|
|
auto-pr / auto-pr
Unable to determine dependencies for "mac-cleanup==3.3.0" because of a failure when running
`/opt/homebrew/opt/python@3.14/libexec/bin/python -m pip install -q --disable-pip-version-check --dry-run --ignore-installed --uploaded-prior-to=2026-04-15T08:54:29Z --report=/dev/stdout mac-cleanup==3.3.0`.
Please update the resources manually.
|
|
auto-pr / auto-pr
Unable to determine dependencies for "https://ftpmirror.gnu.org/gnu/global/global-6.6.14.tar.gz" because of a failure when running
`/opt/homebrew/opt/python@3.14/libexec/bin/python -m pip install -q --disable-pip-version-check --dry-run --ignore-installed --uploaded-prior-to=2026-04-15T08:52:55Z --report=/dev/stdout https://ftpmirror.gnu.org/gnu/global/global-6.6.14.tar.gz`.
Please update the resources manually.
|
|
auto-pr / auto-pr
Unable to determine dependencies for "fava==1.30.12" because of a failure when running
`/opt/homebrew/opt/python@3.14/libexec/bin/python -m pip install -q --disable-pip-version-check --dry-run --ignore-installed --uploaded-prior-to=2026-04-15T08:51:38Z --report=/dev/stdout fava==1.30.12`.
Please update the resources manually.
|
|
auto-pr / auto-pr
Unable to determine dependencies for "charm-tools==3.0.8 ct3" because of a failure when running
`/opt/homebrew/opt/python@3.14/libexec/bin/python -m pip install -q --disable-pip-version-check --dry-run --ignore-installed --uploaded-prior-to=2026-04-15T08:48:55Z --report=/dev/stdout charm-tools==3.0.8 ct3`.
Please update the resources manually.
|
|
auto-pr / auto-pr
These open pull requests might be duplicates:
airshare: bump python resources https://github.com/Homebrew/homebrew-core/pull/275708
Duplicate PRs must not be opened.
Manually open these PRs if you are sure that they are not duplicates (and tell us that in the PR).
|
|
audit
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
audit
On September 12, 2023, AWS will no longer maintain the Homebrew installer for AWS SAM CLI (aws/tap/aws-sam-cli).
For AWS supported installations, use the first-party installers (https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/install-sam-cli.html).
To continue using Homebrew, use the community supported installer (https://formulae.brew.sh/formula/aws-sam-cli).
|
|
audit
On September 12, 2023, AWS will no longer maintain the Homebrew installer for nightly version of AWS SAM CLI (aws/tap/aws-sam-cli-nightly).
For AWS supported installations, use the first-party installers (https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/manage-sam-cli-versions.html#manage-sam-cli-versions-nightly-build).
|
|
audit
Untapping hashicorp/tap even though it contains the following installed formulae or casks:
packer
|
|
auto-pr / auto-pr
checkdmarc: no vulnerabilities patched; skipping this PR
|
|
auto-pr / auto-pr
charm-tools update_python_resources! failed: suppressing the previous exit and skipping
|
|
auto-pr / auto-pr
certsync: no vulnerabilities patched; skipping this PR
|
|
auto-pr / auto-pr
bbot: no vulnerabilities patched; skipping this PR
|
|
auto-pr / auto-pr
backgroundremover: no vulnerabilities patched; skipping this PR
|
|
auto-pr / auto-pr
athenacli: no vulnerabilities patched; skipping this PR
|
|
auto-pr / auto-pr
ansible: no vulnerabilities patched; skipping this PR
|
|
auto-pr / auto-pr
animdl: no vulnerabilities patched; skipping this PR
|
|
auto-pr / auto-pr
airshare PR dupe check failed: suppressing the previous exit and skipping
|
|
auto-pr / auto-pr
aider: no vulnerabilities patched; skipping this PR
|
|
auto-pr / auto-pr
Can't add secret mask for empty string in ##[add-mask] command.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
github-pages
Expired
|
381 KB |
sha256:66c2e73477075a2dd95e80db51f6649ad18183afe03a8c95f72548b2f42306a0
|
|