[dependabot]

Bumps the internal-packages group with 2 updates: costs and clickmd.

Updates costs from 0.2.0 to 0.2.1

Updates clickmd from 1.1.15 to 1.1.16

Changelog

Sourced from clickmd's changelog.

Changelog

[Unreleased]

Commits

• 0d9480d chore(release): bump version to v1.1.16
• 12fda28 ci: add Planfile GitHub sync workflow (v0.1.126) (#11)
• da1738b Merge pull request #8 from semcod/ticket/007-remove-pfix
• 228b32d [ticket-007] build: remove pfix auto-repair configuration
• b09fbe4 Merge pull request #7 from semcod/ticket/006-shared-python-verification
• 0f06729 docs(ci): exercise shared protected Python runner
• 97156f9 Merge pull request #5 from semcod/ticket/004-local-verification
• 4d96039 Adopt documentation metadata for protected local verification
• b8720fb Merge pull request #3 from semcod/ticket/002-local-ci-publication
• 680f8e2 docs: adopt pinned local OneDev and Validator publication policy
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[tom-sapletta-com]

@dependabot rebase

[dependabot]

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[ifuri-validator-agent]

Validator approval after policy checks for exact head f603f350441a958c947002212b2ce351ac3dd241.

Ticket: ticket-616
Correlation ID: fleet-16
Model: gemini/gemini-3.8-flash
Reviewed diff chunks: 8
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 8 diff chunk(s). Lockfile updates removing unused transitive packages in uv.lock. Required checks have passed successfully. | Diff chunk 2 of 8 updates the uv.lock file entries corresponding to the dependency bumps. Required CI checks pass and no issues were identified in this chunk. | Lockfile updates in chunk 3 reflecting the version bumps for clickmd (1.1.15 -> 1.1.16) and costs (0.2.0 -> 0.2.1), along with associated dependency graph pruning in uv.lock. All required checks have passed. | Diff chunk 4 updates lockfile dependencies in uv.lock, bumping goal to 2.2.1 and pruning unused transitive packages. Required CI checks pass. | This chunk of uv.lock removes transitive dependencies associated with pfix (such as nbclient, nbconvert, nbformat, pandocfilters, parso, pathspec, pexpect, pickleshare, pipreqs) and cleans up dependency markers, aligning with upstream changes in clickmd 1.1.16. | This chunk reflects expected removals of unused transitive dependencies (platformdirs, prompt-toolkit, ptyprocess, pure-eval, pycparser, pyzmq) from uv.lock resulting from dependency resolution updates. All required checks passed. | Diff chunk 7/8 updates uv.lock entries as part of dependency updates. All required checks have passed. | Lockfile updates in chunk 8 remove unused transitive packages (including soupsieve, stack-data, tinycss2, tornado, traitlets, wcwidth, webencodings, and yarg) following dependency updates. Required checks have passed.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Semantic review prerequisite: not_required; policy 676cb4516bbfed2a000e40b9b1b6e4a430ecc761ec546aeb53d721a1905cfdd7.

Actual PR impact radar

Exact range: b5e762be024e4221f3fd30928c6eadb118e9fcde...f603f350441a958c947002212b2ce351ac3dd241
Change digest: 9814340cba33652b7b828b7f09b84e362af59bc6bb6fe1a6216ac695084e6d01
Score: 80/100 (L), estimated 132 min, split recommended: true
Affected services/components: repository-wide/unclassified

Machine-readable radar JSONL and SVG

{"actual_change":{"additions":28,"base_sha":"b5e762be024e4221f3fd30928c6eadb118e9fcde","binary_files":0,"categories":{"code":1},"change_digest":"9814340cba33652b7b828b7f09b84e362af59bc6bb6fe1a6216ac695084e6d01","comparison":"b5e762be024e4221f3fd30928c6eadb118e9fcde...f603f350441a958c947002212b2ce351ac3dd241","deletions":649,"file_count":1,"files":["uv.lock"],"head_sha":"f603f350441a958c947002212b2ce351ac3dd241","service_count":0,"services":[]},"assessment_mode":"observed-pr","axes":{"coupling":5,"delivery":5,"scope":5,"uncertainty":3,"validation":2},"complexity":"L","confidence":0.9,"diagnostics":["RADAR-ACCEPTANCE-MISSING","RADAR-BUDGET-EXCEEDED"],"estimate":{"budget_minutes":30,"minutes":132,"within_budget":false},"impact":{"components":["github.com","redirect.github.com","repository-root","semcod"],"files":["github.com/semcod/clickmd/blob/main/CHANGELOG.md","github.com/semcod/clickmd/commit/0d9480df6ac1c6f6f2e97c36876a0478018d672d","github.com/semcod/clickmd/commit/0f0672930cbab9d9d42a5e9bce266190a68622f7","github.com/semcod/clickmd/commit/12fda28c0a77dff89effa3c83d4ac53dcb24bb00","github.com/semcod/clickmd/commit/228b32df819583590aa2baa0a9fd42ef332908f8","github.com/semcod/clickmd/commit/4d9603931b3133835054eba267286c869dab9b3d","github.com/semcod/clickmd/commit/680f8e2e0c2a3f8aaa73d22663a7d2a990df1835","github.com/semcod/clickmd/commit/97156f9d33ca8e36a617651ede1b464c4622b0a1","github.com/semcod/clickmd/commit/b09fbe48f37cc58aa7e9ce6ac55f71e84e66f2fa","github.com/semcod/clickmd/commit/b8720fb50d63103007e229872c92c190d7fa326e","github.com/semcod/clickmd/commit/da1738b96317c42ff0729141ffd902c47be473a9","github.com/wronai/clickmd","github.com/wronai/clickmd/compare/v1.1.15...v1.1.16","redirect.github.com/wronai/clickmd/issues/11","redirect.github.com/wronai/clickmd/issues/3","redirect.github.com/wronai/clickmd/issues/5","redirect.github.com/wronai/clickmd/issues/7","redirect.github.com/wronai/clickmd/issues/8","semcod/ticket/002-local-ci-publication","semcod/ticket/004-local-verification","semcod/ticket/006-shared-python-verification","semcod/ticket/007-remove-pfix","uv.lock"],"public_interfaces":[],"runtime_dependencies":1},"schema":"subactor.ticket-radar/v1","score":80,"split":{"parts":[{"estimated_minutes":30,"name":"Implement github.com","scope":["github.com"]},{"estimated_minutes":30,"name":"Implement redirect.github.com","scope":["redirect.github.com"]},{"estimated_minutes":30,"name":"Implement repository-root","scope":["repository-root"]},{"estimated_minutes":30,"name":"Implement semcod","scope":["semcod"]},{"estimated_minutes":15,"name":"Validate and project to trackers","scope":["tests","planfile","github/gitlab/jira projections"]}],"reason":"estimated_minutes_exceed_budget","recommended":true},"standards":[{"id":"wellmanifest/dsl","revision":"6c60fc4e0dd1f1bb74f46a7745e28019908d1203","version":"0.1.0-dev"},{"id":"wellmanifest/ticket-lifecycle","revision":"5bf581907a87b46a13a73e6c033d3abe4d9a306f","version":"0.1.0-dev"},{"id":"wellmanifest/git-lifecycle","revision":"7d77d4b7af57e69bc75c3a0290b3a4805c5c4438","version":"0.2.0-dev"},{"id":"wellmanifest/logs","revision":"48c284ef7a069055c0bcb6b900147ce5e65f8b43","version":"0.3.0"}],"ticket_ref":"ticket-616"}

<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128" role="img"><title>ticket-616: chore(deps): bump the internal-packages group with 2 updates</title><rect width="128" height="128" rx="12" fill="#f8fafc"/><g stroke-width="1"><polygon points="64,55 72,61 69,71 59,71 56,61" fill="none" stroke="#d7dde5"/><polygon points="64,47 80,59 74,78 54,78 48,59" fill="none" stroke="#d7dde5"/><polygon points="64,38 89,56 79,85 49,85 39,56" fill="none" stroke="#d7dde5"/><polygon points="64,30 97,53 84,92 44,92 31,53" fill="none" stroke="#d7dde5"/><polygon points="64,21 105,51 89,99 39,99 23,51" fill="none" stroke="#d7dde5"/><line x1="64" y1="64" x2="64" y2="21" stroke="#aab4c0"/><line x1="64" y1="64" x2="105" y2="51" stroke="#aab4c0"/><line x1="64" y1="64" x2="89" y2="99" stroke="#aab4c0"/><line x1="64" y1="64" x2="39" y2="99" stroke="#aab4c0"/><line x1="64" y1="64" x2="23" y2="51" stroke="#aab4c0"/></g><polygon points="64,21 105,51 79,85 54,78 23,51" fill="#fb923c" fill-opacity="0.45" stroke="#c2410c" stroke-width="2"/><circle cx="64" cy="64" r="3" fill="#c2410c"/><g font-family="sans-serif" font-size="7" fill="#334155"><text x="64" y="11" text-anchor="middle">SCO</text><text x="114" y="48" text-anchor="middle">COU</text><text x="95" y="107" text-anchor="middle">UNC</text><text x="33" y="107" text-anchor="middle">VAL</text><text x="14" y="48" text-anchor="middle">DEL</text></g><text x="64" y="124" text-anchor="middle" font-family="sans-serif" font-size="8" fill="#0f172a">L · 132m</text></svg>

Merge will be attempted after this approval when explicitly authorized. ## Decision record (recomputable)

DECISION D-616-8498
TICKET ticket-616
HEAD_SHA f603f350441a958c947002212b2ce351ac3dd241
CORRELATION_ID fleet-16
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "dependabot[bot]"
INPUT observed_checks = ["freshness=PASS","test (3.13)=PASS","test (3.10)=PASS"]
INPUT required_checks = ["test (3.10)","test (3.13)"]
INPUT required_checks_source = "protected registry (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT semantic_review_assessment = {"schema":"subactor.validator/semantic-review-assessment/v1","subject":{"repository":"semcod/docval","pull_request":16,"head_sha":"f603f350441a958c947002212b2ce351ac3dd241","base_sha":"b5e762be024e4221f3fd30928c6eadb118e9fcde","diff_sha256":"e16abbf679a7ad60d1a7df21fe15a5f07ccd884b3b34ef98c03276edab00d9e1"},"policy":{"policy_schema":"subactor.validator/semantic-review-policy/v1","policy_version":1,"policy_sha256":"676cb4516bbfed2a000e40b9b1b6e4a430ecc761ec546aeb53d721a1905cfdd7","required":false,"critical_paths":[],"observed_paths":["uv.lock"]},"grounding":"full-diff-not-per-finding-proof","execution_authority":false,"status":"not_required","reason":null,"review_sha256":null,"unresolved":[]}
INPUT superseded_checks = []
INPUT ticket_radar_receipt = {"schema":"subactor.ticket-radar/v1","base_sha":"b5e762be024e4221f3fd30928c6eadb118e9fcde","head_sha":"f603f350441a958c947002212b2ce351ac3dd241","change_digest":"9814340cba33652b7b828b7f09b84e362af59bc6bb6fe1a6216ac695084e6d01","score":80,"complexity":"L","estimated_minutes":132,"split_recommended":true,"services":[],"authority":"ADVISORY","promotion":"FORBIDDEN"}
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "gemini/gemini-3.8-flash"
ASSERT VERDICT_AUTHORITY != "ADVISORY"