From c6148551aba3c043dd8286b9d376c4b2d7527b96 Mon Sep 17 00:00:00 2001 From: Xinyuan Lin Date: Sun, 16 Aug 2026 22:30:58 -0700 Subject: [PATCH] ci: stop Renovate from bumping the CI Python version The config already freezes numpy/pandas/pyarrow as Arrow IPC data-path pins, but not the interpreter their wheels are selected for. Renovate raised actions/setup-python to 3.14, and since numpy 2.1.0 and pandas 2.2.3 publish cp310-cp313 only, uv fell back to a source build of numpy that fails to compile against the 3.14 headers. Freeze the python uses-with dep so the interpreter moves by hand along with those pins, and with the pyamber matrix Renovate cannot read. Closes #7720 --- .github/renovate.json5 | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/.github/renovate.json5 b/.github/renovate.json5 index c6fe7f387a8..34e2d0892ad 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -165,6 +165,23 @@ enabled: false, }, + // actions/setup-python's `python-version:` is downstream of those pins: + // a CI interpreter is only usable if numpy and pandas ship a wheel for + // it, and both are frozen above at versions that stop at cp313. Bumping + // CI to 3.14 therefore made uv build numpy from source, which fails to + // compile against the 3.14 headers (#7720). Renovate cannot see that + // coupling, so freeze the interpreter and move it by hand along with the + // pins above. The pyamber job's ["3.11", "3.12", "3.13"] matrix is a + // plain list Renovate never reads, so widen it in that same manual step. + // Match on matchDepNames, not matchPackageNames: Renovate calls this dep + // `python` but resolves it from the actions/python-versions releases, and + // matchPackageNames tests that packageName rather than the `python` name. + { + matchManagers: ['github-actions'], + matchDepNames: ['python'], + enabled: false, + }, + // Angular majors need a guided `ng update` migration and the // framework/CLI lines must move together (see #6155). The regex // also covers @angular-devkit/@angular-builders/@angular-eslint;