Skip to content

Upgrade all locked dependencies - #44

Merged
woutervh merged 2 commits into
mainfrom
deps/lock-upgrade-2026-11
Nov 3, 2026
Merged

woutervh merged 2 commits into
mainfrom
deps/lock-upgrade-2026-11

Conversation

@woutervh

@woutervh woutervh commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Runs uv lock --upgrade instead of waiting for Renovate's Dec 1 lockfile maintenance, respecting the project's exclude-newer = "10 days".

Notable: ruff 0.16.8 → 0.17.2, ty 0.0.70 → 0.0.91, mutmut 3.7.0 → 3.8.0, virtualenv 21.7 → 21.14, setuptools 84.0 → 84.2, plus ~35 transitive updates.

Unchanged on purpose: docutils 0.21.2 (capped upstream), cyclopts <4 (pinned, see renovate.json).

Note on the second commit: the first lock was generated with UV_CONFIG_FILE set, which makes uv ignore [tool.uv] in pyproject.toml. That dropped exclude-newer-span from the lock, so CI re-resolved and broke on Python 3.14/3.15 (libcst 1.7.0 sdist build). Re-locked with uv 0.12.5 (CI's version) and UV_CONFIG_FILE unset.

Verified locally: pytest (43 passed) on Python 3.9, 3.14, 3.15; ruff check + format; ty check; uv lock --check with uv 0.12.5.

https://claude.ai/code/session_01X16aaEYzUw6qwf6co68x5d

Run uv lock --upgrade: ruff 0.17.3, ty 0.0.96, prek 0.5.9, pytest 9.2,
virtualenv 21.15, setuptools 84.2 and ~35 transitive updates.
docutils stays at 0.21.2 (capped upstream); cyclopts stays <4 (pinned).

Claude-Session: https://claude.ai/code/session_01X16aaEYzUw6qwf6co68x5d
The previous lock was generated with UV_CONFIG_FILE set, which makes uv
skip [tool.uv] in pyproject.toml. The lock lost its exclude-newer-span
option, so CI (uv 0.12.5) re-resolved and picked mutmut 3.3.1 /
libcst 1.7.0 on Python 3.14+, which fails to build from source.

Regenerated with uv 0.12.5 and UV_CONFIG_FILE unset: 10-day cutoff is
respected again (ruff 0.17.2, ty 0.0.91, mutmut 3.8.0).

Claude-Session: https://claude.ai/code/session_01X16aaEYzUw6qwf6co68x5d
@woutervh
woutervh merged commit dcc30d3 into main Nov 3, 2026
17 checks passed
@woutervh
woutervh deleted the deps/lock-upgrade-2026-11 branch November 3, 2026 16:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant