Skip to content

Dependabot cleanup: pyarrow 25, setup-uv v7, lockfile-only updates - #23

Merged
uehlingeric merged 1 commit into
mainfrom
dependabot-cleanup
Jul 12, 2026
Merged

Dependabot cleanup: pyarrow 25, setup-uv v7, lockfile-only updates#23
uehlingeric merged 1 commit into
mainfrom
dependabot-cleanup

Conversation

@uehlingeric

Copy link
Copy Markdown
Owner

Evaluates and supersedes the open Dependabot PRs; see commit message for per-item rationale.

🤖 Generated with Claude Code

Supersedes the remaining bot PRs after evaluating each:
- pyarrow 24->25 lock bump (bot PR failed CI only because pyarrow 25
  ships stubs that make two type-ignores in retrieval/dense.py stale;
  ignores removed, mypy clean)
- setup-uv v5->v7 (bot PR failed CI because v6+ stopped auto-creating a
  venv; activate-environment: true added for the uv pip install path)
- dependabot uv ecosystem now lockfile-only: floor-raising pyproject
  bumps (anthropic >=0.116, pydantic-settings >=2.14.2) add churn, not
  safety, while uv.lock already pins real versions
- docker ecosystem ignores python major bumps: the image runtime stays
  on CI-tested versions (3.11/3.12) and moves deliberately

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@uehlingeric
uehlingeric merged commit 06747f1 into main Jul 12, 2026
8 checks passed
@uehlingeric
uehlingeric deleted the dependabot-cleanup branch July 12, 2026 04:29
uehlingeric added a commit that referenced this pull request Jul 12, 2026
Dependabot cleanup: pyarrow 25, setup-uv v7, lockfile-only updates
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant