mirror of
https://github.com/trailofbits/algo.git
synced 2026-08-17 21:25:50 +02:00
This commit fixes the integration test failures that have been occurring since Ansible 12 was introduced. ## Root Cause Dependabot was configured to use the `pip` ecosystem, which only updates `pyproject.toml` without updating `uv.lock`. This caused the Docker build to fail because `uv sync --locked` requires an exact match between the two files. The lockfile was stuck at ansible 12.0.0 while pyproject.toml had been bumped to 12.2.0 through multiple Dependabot PRs. ## Changes 1. **Updated uv.lock**: Synced lockfile with current pyproject.toml - ansible: 12.0.0 → 12.2.0 - ansible-core: 2.19.2 → 2.19.4 2. **Changed Dependabot to use `uv` ecosystem**: This ensures future dependency updates modify both pyproject.toml AND uv.lock together, preventing this mismatch from recurring. ## References - uv Dependabot docs: https://docs.astral.sh/uv/guides/integration/dependency-bots/ 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude <noreply@anthropic.com>