chore(deps): bump compliance-trestle from 3.10.4 to 3.11.0 by dependabot[bot] · Pull Request #778 · complytime/complyscribe

dependabot · 2026-01-19T08:37:58Z

Bumps compliance-trestle from 3.10.4 to 3.11.0.

Release notes

Sourced from compliance-trestle's releases.

v3.11.0 (2026-01-14)

This release is published under the Apache-2.0 License.

Bug Fixes

Clean up bdist (#2005, f85944c)

Clean up dependency maps (#2005, f85944c)

Clear RuleParametersValidator state between validations (#2033, d6d4819)

Correct build caching (#2005, f85944c)

Ensure coverag fiels are generated (#2005, f85944c)

Extra safefy on chdir tests (#2033, d6d4819)

Fixing flaky tests including bug on reuse of a validator instance (#2033, d6d4819)

Hatch coverage (#2005, f85944c)

Install mypy in binary distribution test (#2005, f85944c)

Move dmcg to dev dependencies (#2005, f85944c)

Move gitpython to dev dependencies (#2005, f85944c)

Move pre-commit (#2005, f85944c)

Pin dmcg version (#2005, f85944c)

Run utility scripts through hatch environment (#2005, f85944c)

deps: Bump actions/checkout from 6.0.0 to 6.0.1 (#2011, 5023fbc)

deps: Bump actions/create-github-app-token from 2.2.0 to 2.2.1 (#2006, 3fc61f4)

deps: Bump actions/stale from 10.1.0 to 10.1.1 (#2007, b7b908a)

deps: Bump cryptography from 45.0.7 to 46.0.3 (#1958, 4092387)

deps: Bump github/codeql-action from 4.31.5 to 4.31.7 (#2012, 309aba4)

deps: Bump sigstore/gh-action-sigstore-python from 3.1.0 to 3.2.0 (#2009, 6303780)

Chores

Add makefile utilities (#2005, f85944c)

... (truncated)

Changelog

Sourced from compliance-trestle's changelog.

v3.11.0 (2026-01-14)

Bug Fixes

Clean up bdist (#2005, f85944c)

Clean up dependency maps (#2005, f85944c)

Clear RuleParametersValidator state between validations (#2033, d6d4819)

Correct build caching (#2005, f85944c)

Ensure coverag fiels are generated (#2005, f85944c)

Extra safefy on chdir tests (#2033, d6d4819)

Fixing flaky tests including bug on reuse of a validator instance (#2033, d6d4819)

Hatch coverage (#2005, f85944c)

Install mypy in binary distribution test (#2005, f85944c)

Move dmcg to dev dependencies (#2005, f85944c)

Move gitpython to dev dependencies (#2005, f85944c)

Move pre-commit (#2005, f85944c)

Pin dmcg version (#2005, f85944c)

... (truncated)

Commits

49495af 3.11.0
38dd62b Merge pull request #2036 from oscal-compass/develop
29bdb1a chore: clean up mypy errors in pipeline.py and command_docs.py (#2030)
d6d4819 fix: fixing flaky tests including bug on reuse of a validator instance (#2033)
4092387 fix(deps): Bump cryptography from 45.0.7 to 46.0.3 (#1958)
3fc61f4 fix(deps): bump actions/create-github-app-token from 2.2.0 to 2.2.1 (#2006)
b7b908a fix(deps): bump actions/stale from 10.1.0 to 10.1.1 (#2007)
6303780 fix(deps): bump sigstore/gh-action-sigstore-python from 3.1.0 to 3.2.0 (#2009)
5023fbc fix(deps): bump actions/checkout from 6.0.0 to 6.0.1 (#2011)
309aba4 fix(deps): bump github/codeql-action from 4.31.5 to 4.31.7 (#2012)
Additional commits viewable in compare view

github-actions · 2026-01-19T08:38:15Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Dependencies Review: success
- View detailed logs
Calculated Risk: medium
Dependency Usage: At least 0 repositories are using this dependency version

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

marcusburghardt · 2026-01-21T09:39:54Z

@dependabot rebase

github-actions · 2026-01-21T09:41:57Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Dependencies Review: success
- View detailed logs
Calculated Risk: medium
Dependency Usage: At least 0 repositories are using this dependency version

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions · 2026-01-26T12:07:18Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Dependencies Review: success
- View detailed logs
Calculated Risk: medium
Dependency Usage: At least 0 repositories are using this dependency version

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

marcusburghardt · 2026-02-09T17:17:38Z

@dependabot rebase

github-actions · 2026-02-09T17:32:16Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Dependencies Review: success
- View detailed logs
Calculated Risk: medium
Dependency Usage: At least 0 repositories are using this dependency version

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions · 2026-02-11T12:24:41Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Dependencies Review: success
- View detailed logs
Calculated Risk: medium
Dependency Usage: At least 0 repositories are using this dependency version

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

marcusburghardt · 2026-04-16T08:55:56Z

@dependabot rebase

Bumps [compliance-trestle](https://github.com/oscal-compass/compliance-trestle) from 3.10.4 to 3.11.0. - [Release notes](https://github.com/oscal-compass/compliance-trestle/releases) - [Changelog](https://github.com/oscal-compass/compliance-trestle/blob/develop/CHANGELOG.md) - [Commits](oscal-compass/compliance-trestle@v3.10.4...v3.11.0) --- updated-dependencies: - dependency-name: compliance-trestle dependency-version: 3.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-04-16T08:57:48Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Dependencies Review: success
- View detailed logs
Calculated Risk: medium
Dependency Usage: At least 0 repositories are using this dependency version

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

marcusburghardt · 2026-04-16T11:20:33Z

e2e test should be fixed by #822

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 19, 2026

dependabot bot force-pushed the dependabot/pip/compliance-trestle-3.11.0 branch from 126bc1b to a0b3398 Compare January 21, 2026 09:41

marcusburghardt mentioned this pull request Jan 21, 2026

Review e2e-tests with new new version of compliance-trestle #780

Open

dependabot bot force-pushed the dependabot/pip/compliance-trestle-3.11.0 branch from a0b3398 to cf7a2a6 Compare January 26, 2026 12:06

dependabot bot force-pushed the dependabot/pip/compliance-trestle-3.11.0 branch from cf7a2a6 to 065999e Compare February 9, 2026 17:31

dependabot bot force-pushed the dependabot/pip/compliance-trestle-3.11.0 branch from 065999e to d6bfdc9 Compare February 11, 2026 12:24

dependabot bot force-pushed the dependabot/pip/compliance-trestle-3.11.0 branch from d6bfdc9 to f58affd Compare April 16, 2026 08:57

marcusburghardt mentioned this pull request Apr 16, 2026

fix: add click as a direct dependency #822

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump compliance-trestle from 3.10.4 to 3.11.0#778

chore(deps): bump compliance-trestle from 3.10.4 to 3.11.0#778
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/compliance-trestle-3.11.0

dependabot bot commented on behalf of github Jan 19, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 19, 2026

Uh oh!

marcusburghardt commented Jan 21, 2026

Uh oh!

github-actions bot commented Jan 21, 2026

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

marcusburghardt commented Feb 9, 2026

Uh oh!

github-actions bot commented Feb 9, 2026

Uh oh!

github-actions bot commented Feb 11, 2026

Uh oh!

marcusburghardt commented Apr 16, 2026

Uh oh!

github-actions bot commented Apr 16, 2026

Uh oh!

marcusburghardt commented Apr 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.11.0 (2026-01-14)

Bug Fixes

Chores

v3.11.0 (2026-01-14)

Bug Fixes

Uh oh!

github-actions bot commented Jan 19, 2026

Uh oh!

marcusburghardt commented Jan 21, 2026

Uh oh!

github-actions bot commented Jan 21, 2026

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

marcusburghardt commented Feb 9, 2026

Uh oh!

github-actions bot commented Feb 9, 2026

Uh oh!

github-actions bot commented Feb 11, 2026

Uh oh!

marcusburghardt commented Apr 16, 2026

Uh oh!

github-actions bot commented Apr 16, 2026

Uh oh!

marcusburghardt commented Apr 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jan 19, 2026 •

edited

Loading