ELYRAON Dependency Update Verifier

"A newer version exists" is not the same as "this repository has been verified against that newer version." ELYRAON Dependency Update Verifier exists to answer one question: does this update actually work with my repository?

Instead of just reporting the latest release, it evaluates a proposed Python dependency upgrade against the inputs you provide: your before and after requirements pins, local candidate wheels, and your own unittest suite. It returns a clear status with evidence, so you can decide whether to adopt the change.

What it does

• Pin comparison identifies the exact version changes between your current and proposed requirements.
• Dependency classification separates direct, transitive and unknown changes, so hidden transitive bumps are visible.
• Isolated verification builds a virtual environment, installs the local candidate wheels and checks installed metadata against the pins.
• Import checks confirm the modules you list import in the candidate environment.
• Test validation runs your local unittest suites against the candidate dependency set.
• Evidence output binds hashes of inputs and outputs and returns a status from REVIEW_REQUIRED to SAFE_TO_UPDATE.

Scope

Python-first and local: it works on Python requirements pins and local wheel files, and requires Python 3.11+. It reports a verification result; it does not edit your repository, open pull requests, merge, or deploy.

Verification is specific to your repository and the tests you have. A passing result is evidence, not a guarantee. See Known Limitations.