From 1f9ac8cce21ef01c84baabe54a11fba175df8e9e Mon Sep 17 00:00:00 2001 From: itswl Date: Mon, 2 Nov 2026 14:57:15 +0800 Subject: [PATCH] dependabot: the investigator's floors are raised like the other two, so its runtime stops going stale in silence The investigator is the only service whose pyproject declares a [project], so Dependabot's default strategy reads it as a library and only widens ranges. Its job log says widen_ranges and "No update possible" for fastapi, uvicorn and claude-agent-sdk, because a floor that already admits the newest release has nothing to widen; only the exact ruff pin was ever proposed. The pipe and the judge log bump_versions. versioning-strategy: increase gives the investigator what the other two already get. No image changes; the bumps arrive as Dependabot's own pull request and are relocked the usual way. --- .github/dependabot.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ca86c2eb..f91e5d8c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -55,6 +55,15 @@ updates: directory: "/hookprobe" schedule: interval: weekly + # The investigator is the one service whose pyproject declares a + # [project], so the default strategy reads it as a library and only + # widens ranges. A floor like `fastapi>=0.115` already admits the newest + # release, widening it changes nothing, and the job log says + # "update_not_possible" for every runtime package. The pipe and the judge + # read as applications and get their floors raised; the investigator's + # runtime, the agent SDK included, went stale with no pull request ever + # saying so. `increase` is what the other two already get. + versioning-strategy: increase groups: hookprobe-deps: patterns: ["*"]