Skip to content

chore: keep the oldest-supported pins out of Dependabot's reach - #105

Merged
onyks-os merged 1 commit into
mainfrom
chore/oldest-supported-out-of-dependabot
Oct 1, 2026
Merged

onyks-os merged 1 commit into
mainfrom
chore/oldest-supported-out-of-dependabot

Conversation

@onyks-os

@onyks-os onyks-os commented Oct 1, 2026

Copy link
Copy Markdown
Owner

Dependabot treated packaging/oldest-supported.txt as a requirements file and opened #98–#101 (typer, click, rich, transitions → newest); #97 (six 1.16.0 → 1.17.0) was already merged. That file is what the oldest supported dependencies job installs, so those PRs would have turned it into a newest-versions job and left the pyproject.toml floors untested.

Dependabot has no path-exclusion option, so the file becomes packaging/oldest-supported.pins (pip -r accepts any name), six goes back to Ubuntu 24.04's 1.16.0, and tests fail if either regresses. #98–#101 are closed with a pointer here.

🤖 Generated with Claude Code

Dependabot read packaging/oldest-supported.txt as a requirements file and
opened PRs raising typer, click, rich and transitions to their newest
releases (#98-#101); one, six 1.16.0 -> 1.17.0 (#97), was merged. That
file is what the "Unit Tests (oldest supported dependencies)" job
installs: merging the rest would have made it test the newest versions,
and the floors in pyproject.toml would no longer be tested by anything.

Dependabot has no option to exclude a path, so the file is renamed to
.pins, which it does not treat as requirements; pip -r takes any name.
six is restored to Ubuntu 24.04's 1.16.0. Tests fail if the file is
renamed back or the indirect pins drift.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: onyks-os <129986281+onyks-os@users.noreply.github.com>
@onyks-os
onyks-os force-pushed the chore/oldest-supported-out-of-dependabot branch from 0a52c0f to 057cc45 Compare October 1, 2026 08:33
@onyks-os
onyks-os merged commit ee8a345 into main Oct 1, 2026
28 of 29 checks passed
@onyks-os
onyks-os deleted the chore/oldest-supported-out-of-dependabot branch October 1, 2026 08:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant