Skip to content

Watch uv.lock with Dependabot; bump the lockfiles - #29

Merged
rdlu merged 2 commits into
mainfrom
chore/deps-uv-dependabot
Oct 24, 2026
Merged

rdlu merged 2 commits into
mainfrom
chore/deps-uv-dependabot

Conversation

@rdlu

@rdlu rdlu commented Oct 24, 2026

Copy link
Copy Markdown
Owner

Dependabot

  • New weekly uv entry for pyproject.toml / uv.lock, all updates grouped into one PR (python group), like npm's site-build.
  • Labels [dependencies, "area: tooling"]: the repo has no python label (none created), and the Python packages serve the TUI, the MCP server and the extract alike.
  • Header comment updated: the Python side is covered now; node in mise.toml still is not.

Python (uv lock --upgrade, 15 transitive bumps)

aiohttp 3.14.5, httpcore2/httpx2 2.16.0, idna 3.20, iniconfig 2.3.1, markupsafe 3.0.4, msgpack 1.2.3, multidict 7.2.0 (from 6.7.1), platformdirs 4.13.5, pluggy 1.7.0, propcache 0.5.4, pycparser 3.12, sse-starlette 3.5.1, starlette 1.9.0, yarl 1.25.1.

npm

  • svelte-check 4.7.6 -> 4.7.7, vite 8.3.4 -> 8.3.5 (exact pins in package.json).
  • Transitive: rolldown 1.2.15, @oxc-project/types 0.155.0, postcss 8.5.31.
  • TypeScript stays on 6.0.3: svelte-check's peer range is still ^5 || ^6. Node in mise.toml untouched (26 is not LTS yet).

Checks

mise run ci:local passes: 245 passed, 2 skipped (pytest-xdist); svelte-check --fail-on-warnings clean; vite build + PWA check ok; shell lint ok.

🤖 Generated with Claude Code

rdlu and others added 2 commits October 24, 2026 08:26
A weekly uv entry, grouped into one PR as most of its bumps are
transitive. There is no python label, and the packages serve the TUI,
the MCP server and the extract alike, so it takes area: tooling. Node in
mise.toml is still the one thing left to deps:outdated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
uv lock --upgrade moves 15 transitive packages (multidict 7.2,
starlette 1.9, httpx2 2.16 among them); svelte-check 4.7.7 and vite
8.3.5, with rolldown 1.2.15 under it. TypeScript stays on 6, as
svelte-check's peer range does not take 7 yet.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@rdlu rdlu added dependencies Pull requests that update a dependency file area: tooling mise tasks, dev tooling, dependency policy labels Oct 24, 2026
@rdlu
rdlu merged commit 87afb54 into main Oct 24, 2026
1 check passed
@rdlu
rdlu deleted the chore/deps-uv-dependabot branch October 24, 2026 11:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: tooling mise tasks, dev tooling, dependency policy dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant