Skip to content

chore(deps): bump pyinstaller from 6.16.0 to 6.22.2 - #5117

Merged
neubig merged 1 commit into
mainfrom
dependabot/uv/pyinstaller-6.22.2
Sep 22, 2026
Merged

neubig merged 1 commit into
mainfrom
dependabot/uv/pyinstaller-6.22.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps pyinstaller from 6.16.0 to 6.22.2.

Release notes

Sourced from pyinstaller's releases.

v6.22.2

Please see the v6.22.2 section of the changelog for a list of the changes since v6.22.1.

v6.22.1

Please see the v6.22.1 section of the changelog for a list of the changes since v6.22.0.

v6.22.0

Please see the v6.22.0 section of the changelog for a list of the changes since v6.21.0.

v6.21.0

Please see the v6.21.0 section of the changelog for a list of the changes since v6.20.0.

v6.20.0

Please see the v6.20.0 section of the changelog for a list of the changes since v6.19.0.

v6.19.0

Please see the v6.19.0 section of the changelog for a list of the changes since v6.18.0.

v6.18.0

Please see the v6.18.0 section of the changelog for a list of the changes since v6.17.0.

v6.17.0

Please see the v6.17.0 section of the changelog for a list of the changes since v6.16.0.

Changelog

Sourced from pyinstaller's changelog.

6.22.2 (2026-08-17)

Bugfix


* (Windows) Fix spurious security validation error when a ``onefile``
  executable is launched from a symlinked directory or a junction.
  (:issue:`9508`)

6.22.1 (2026-08-15)

Bugfix

  • Fix invalid spec file generation when :option:--hide-console option is given (regression introduced in v6.22.0). (:issue:9503)
  • (NetBSD) Fix binary dependency analysis. (:issue:9505)
  • (NetBSD) Fix/improve NetBSD support: add the is_netbsd platform flag, treat NetBSD as a Unix platform, and search /usr/local/lib for shared libraries, as is already done for FreeBSD and OpenBSD. (:issue:9496)
  • (OpenBSD) Fix binary dependency analysis. (:issue:9505)

Incompatible Changes


* (POSIX) Executables built in ``onedir`` mode with ``setuid`` bit set
  now validate the owner and permissions on their contents directory
  (typically the ``_internal`` directory); the owner ID must match the
  effective user ID under which the process is running, and the
  permissions on the directory need to be `0700`. This aims to prevent
  unprivileged users from modifying contents of an application that
  runs in privileged mode. (:issue:`9492`)
* (POSIX) When running as a ``onefile`` child process (on POSIX platforms
  other than OpenBSD and AIX), the bootloader now attempts to verify
  the parent process executable via ``procfs`` lookup. This check is
  mandatory for ``onefile`` executables with ``setuid`` bit set; if the
  relevant ``procfs`` entry is inaccessible (for example, due to ``procfs``
  not being mounted, as is the case on FreeBSD by default, or due to access
  being blocked by local security policy), the process will exit with
  security validation error message. For regular ``onefile`` executables
  (without ``setuid`` bit set), the parent-process check is enforced when the
  relevant ``procfs`` entry is accessible, and skipped when it happens to be
  inaccessible. (:issue:`9492`)
* (POSIX) When running as a ``onefile`` child process and the executable
  has ``setuid`` bit set, the bootloader now validates the owner and
  permissions on the (inherited) temporary directory. The owner ID of the
</tr></table> 

... (truncated)

Commits
  • 19f42e7 Release v6.22.2. [skip ci]
  • 72bbdb4 bootloader: Windows: use QueryFullProcessImageNameW for executable resolution
  • 0d6941c tests: add test to ensure security validation works with symlinked executables
  • 6e00368 Tests: Requirements: Scheduled weekly dependency update for week 33 (#9506)
  • 22ea0f2 Release v6.22.1. [skip ci]
  • e709c04 bootloader: relax parent-process validation requirements on POSIX platforms
  • e0388d3 bootloader: relax parent-process validation requirements on FreeBSD
  • 92afdf8 tests: test_application_home_directory_hijack: handle 8.3 short paths
  • 4b509a2 tests: improve logging in test_application_home_directory_hijack
  • 66b0249 doc: document the new security validation and its implications
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
---
🐳 Agent Server images for this PR — GHCR package, pull/run commands, and all pushed tags (click to expand)

• GHCR package: https://github.com/OpenHands/agent-sdk/pkgs/container/agent-server

Variants & Base Images

Variant Architectures Base Image Docs / Tags
java amd64, arm64 eclipse-temurin:17-jdk Link
python-slim amd64, arm64 python-node-runtime Link
python-minimal amd64, arm64 python-node-runtime Link
python amd64, arm64 python-node-runtime Link
golang amd64, arm64 golang:1.21-bookworm Link

Pull (multi-arch manifest)

# Each variant is a multi-arch manifest supporting both amd64 and arm64
docker pull ghcr.io/openhands/agent-server:f755196-python

Run

docker run -it --rm \
  -p 8000:8000 \
  --name agent-server-f755196-python \
  ghcr.io/openhands/agent-server:f755196-python

All tags pushed for this build

ghcr.io/openhands/agent-server:f755196-golang-amd64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-golang-amd64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-golang-amd64
ghcr.io/openhands/agent-server:f755196-golang_tag_1.21-bookworm-amd64
ghcr.io/openhands/agent-server:f755196-golang-arm64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-golang-arm64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-golang-arm64
ghcr.io/openhands/agent-server:f755196-golang_tag_1.21-bookworm-arm64
ghcr.io/openhands/agent-server:f755196-java-amd64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-java-amd64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-java-amd64
ghcr.io/openhands/agent-server:f755196-eclipse-temurin_tag_17-jdk-amd64
ghcr.io/openhands/agent-server:f755196-java-arm64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-java-arm64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-java-arm64
ghcr.io/openhands/agent-server:f755196-eclipse-temurin_tag_17-jdk-arm64
ghcr.io/openhands/agent-server:f755196-python-amd64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-python-amd64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-python-amd64
ghcr.io/openhands/agent-server:f755196-python-node-runtime-amd64
ghcr.io/openhands/agent-server:f755196-python-arm64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-python-arm64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-python-arm64
ghcr.io/openhands/agent-server:f755196-python-node-runtime-arm64
ghcr.io/openhands/agent-server:f755196-python-minimal-amd64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-python-minimal-amd64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-python-minimal-amd64
ghcr.io/openhands/agent-server:f755196-python-node-runtime-minimal-amd64
ghcr.io/openhands/agent-server:f755196-python-minimal-arm64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-python-minimal-arm64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-python-minimal-arm64
ghcr.io/openhands/agent-server:f755196-python-node-runtime-minimal-arm64
ghcr.io/openhands/agent-server:f755196-python-slim-amd64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-python-slim-amd64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-python-slim-amd64
ghcr.io/openhands/agent-server:f755196-python-node-runtime-slim-amd64
ghcr.io/openhands/agent-server:f755196-python-slim-arm64
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-python-slim-arm64
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-python-slim-arm64
ghcr.io/openhands/agent-server:f755196-python-node-runtime-slim-arm64
ghcr.io/openhands/agent-server:f755196-golang
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-golang
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-golang
ghcr.io/openhands/agent-server:f755196-golang_tag_1.21-bookworm
ghcr.io/openhands/agent-server:f755196-java
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-java
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-java
ghcr.io/openhands/agent-server:f755196-eclipse-temurin_tag_17-jdk
ghcr.io/openhands/agent-server:f755196-python-minimal
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-python-minimal
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-python-minimal
ghcr.io/openhands/agent-server:f755196-python-node-runtime-minimal
ghcr.io/openhands/agent-server:f755196-python-slim
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-python-slim
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-python-slim
ghcr.io/openhands/agent-server:f755196-python-node-runtime-slim
ghcr.io/openhands/agent-server:f755196-python
ghcr.io/openhands/agent-server:f75519678e7821daa4f106bdbbfde26034323b77-python
ghcr.io/openhands/agent-server:dependabot-uv-pyinstaller-6.22.2-python
ghcr.io/openhands/agent-server:f755196-python-node-runtime

About Multi-Architecture Support

  • Each variant tag (e.g., f755196-python) is a multi-arch manifest supporting both amd64 and arm64
  • Docker automatically pulls the correct architecture for your platform
  • Individual architecture tags (e.g., f755196-python-amd64) are also available if needed

Bumps [pyinstaller](https://github.com/pyinstaller/pyinstaller) from 6.16.0 to 6.22.2.
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](pyinstaller/pyinstaller@v6.16.0...v6.22.2)

---
updated-dependencies:
- dependency-name: pyinstaller
  dependency-version: 6.22.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 17, 2026
@github-actions

Copy link
Copy Markdown
Contributor

REST API breakage checks (OpenAPI) — ✅ PASSED

Result: ✅ PASSED

Action log

@github-actions

Copy link
Copy Markdown
Contributor

Coverage

Coverage Report •
FileStmtsMissCoverMissing
TOTAL44748820182% 
report-only-changed-files is enabled. No changed files were found in the coverage report :)

@all-hands-bot

Copy link
Copy Markdown
Collaborator

👋 This PR needs a couple of things fixed before OpenHands can review it:

  • the PR description's HUMAN: section needs at least 20 characters describing what you tested, not just the template placeholder

Push an update once this is addressed and this check re-runs automatically.

This is an automated check - no AI was used to generate this comment.

@neubig neubig left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: checks are green. This review was created by an AI agent (OpenHands) on behalf of the user.

@neubig
neubig merged commit 83f85b4 into main Sep 22, 2026
107 checks passed
@neubig
neubig deleted the dependabot/uv/pyinstaller-6.22.2 branch September 22, 2026 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants