mirror of
https://github.com/trailofbits/algo.git
synced 2026-09-13 13:17:48 +02:00
f5beb10f0e
This commit fixes the integration test failures that have been occurring since Ansible 12 was introduced. ## Root Cause Dependabot was configured to use the `pip` ecosystem, which only updates `pyproject.toml` without updating `uv.lock`. This caused the Docker build to fail because `uv sync --locked` requires an exact match between the two files. The lockfile was stuck at ansible 12.0.0 while pyproject.toml had been bumped to 12.2.0 through multiple Dependabot PRs. ## Changes 1. **Updated uv.lock**: Synced lockfile with current pyproject.toml - ansible: 12.0.0 → 12.2.0 - ansible-core: 2.19.2 → 2.19.4 2. **Changed Dependabot to use `uv` ecosystem**: This ensures future dependency updates modify both pyproject.toml AND uv.lock together, preventing this mismatch from recurring. ## References - uv Dependabot docs: https://docs.astral.sh/uv/guides/integration/dependency-bots/ 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude <noreply@anthropic.com>
17 lines
449 B
YAML
17 lines
449 B
YAML
---
|
|
version: 2
|
|
updates:
|
|
# Maintain dependencies for GitHub Actions
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "daily"
|
|
|
|
# Maintain dependencies for Python using uv
|
|
# Using "uv" ecosystem ensures both pyproject.toml AND uv.lock are updated together
|
|
# This prevents Docker build failures from lockfile mismatches
|
|
- package-ecosystem: "uv"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "daily"
|