Skip to content

chore: use uv dependabot ecosystem and sync uv.lock - #4846

Merged
dbrattli merged 2 commits into
mainfrom
chore/dependabot-uv-ecosystem
Jul 23, 2026
Merged

dbrattli merged 2 commits into
mainfrom
chore/dependabot-uv-ecosystem

Conversation

@dbrattli

Copy link
Copy Markdown
Collaborator

Summary

Dependabot's Python updates (e.g. #4843) edit pyproject.toml but leave uv.lock untouched, so the lock drifts behind its constraints. The cause is an ecosystem mismatch in .github/dependabot.yml: both Python projects use uv (each has a uv.lock), but they were configured as package-ecosystem: "pip", which reads pyproject.toml but cannot maintain uv.lock.

This PR:

  • Switches both Python entries in .github/dependabot.yml from pip to uv, so future updates resolve through uv and commit the matching uv.lock changes in the same PR.
  • Manually applies the pending ty bump and resyncs the lock, catching up the drift the pip-based config left behind:
    • pyproject.toml: ty>=0.0.62 → >=0.0.63
    • uv.lock: ty 0.0.58 → 0.0.63, and ruff 0.15.21 → 0.15.22 (pyproject already required ruff>=0.15.22; the lock was stale)

uv lock --check passes.

Supersedes #4843 (that PR bumps ty but does not sync the lock).

Test plan

  • uv lock --check — lock is consistent with pyproject.toml
  • CI green

dbrattli and others added 2 commits July 23, 2026 17:55
The pip ecosystem edits pyproject.toml but cannot maintain uv.lock, so
lock files drifted behind their constraints. Both Python projects use uv
(each has a uv.lock), so use the uv ecosystem to keep the lock in sync.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Manual uv lock refresh: ty 0.0.58 -> 0.0.63 (matching the >=0.0.63
constraint) and ruff 0.15.21 -> 0.15.22, catching up drift the pip-based
dependabot left in the lock.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown
Contributor

Python Type Checking Results (Pyright)

Metric Value
Total errors 34
Files with errors 4
Excluded files 4
New errors ✅ No
Excluded files with errors (4 files)

These files have known type errors and are excluded from CI. Remove from pyrightconfig.ci.json as errors are fixed.

File Errors Status
temp/tests/Python/test_hash_set.py 18 Excluded
temp/tests/Python/test_applicative.py 12 Excluded
temp/tests/Python/test_nested_and_recursive_pattern.py 2 Excluded
temp/tests/Python/fable_modules/thoth_json_python/encode.py 2 Excluded

@dbrattli
dbrattli merged commit bcc26bd into main Jul 23, 2026
42 checks passed
@dbrattli
dbrattli deleted the chore/dependabot-uv-ecosystem branch July 23, 2026 16:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant