Skip to content

MAINT: upgrade lock files - #43

Merged
redeboer merged 9 commits into
mainfrom
dependabot/lock-3ce850531a
Sep 8, 2026
Merged

MAINT: upgrade lock files#43
redeboer merged 9 commits into
mainfrom
dependabot/lock-3ce850531a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

🖱️ Developer experience

  • All third-party GitHub Actions are now pinned to a commit SHA with the version as a trailing comment (ComPWA/actions/...@13f1a3b # 4.0.2, actions/checkout@3d3c42e # v7.0.1), so workflow runs are reproducible and no longer follow a moving tag.
  • Agent configuration files (.agents/, .claude/, .codex/, AGENTS.md, CLAUDE.md) are ignored, so they can live in a checkout without showing up in git status.

🔨 Maintenance

  • Ruff rules are now referenced by name instead of by code, both in the ignore and per-file-ignores lists of the top-level pyproject.toml and of every docs/<NNN>/pyproject.toml, and in the inline suppressions of .github/collect_notebooks.py, docs/conf.py, and docs/_list_technical_reports.py. This makes it possible to see what is suppressed without looking up the code.
  • Ruff ignore lists were pruned of rules that no longer trigger after the hook upgrade.

Squash commit messages

* DX: add agent configurations to .gitignore
* DX: pin GitHub Actions to commit SHAs
* MAINT: clean up Ruff ignore lists
* MAINT: refer to Ruff rules by name

@dependabot dependabot Bot added the ⬆️ Lock This PR upgrades the lock files label Sep 7, 2026
redeboer and others added 5 commits September 7, 2026 13:46
Bumps the lock group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [https://github.com/ComPWA/policy](https://github.com/ComPWA/policy) | `0.9.0` | `0.9.7` |
| [https://github.com/ComPWA/nbhooks](https://github.com/ComPWA/nbhooks) | `0.0.1` | `0.0.2` |
| [https://github.com/astral-sh/ruff-pre-commit](https://github.com/astral-sh/ruff-pre-commit) | `v0.15.21` | `0.16.6` |
| [https://github.com/tombi-toml/tombi-pre-commit](https://github.com/tombi-toml/tombi-pre-commit) | `v1.2.0` | `1.5.1` |
| [https://github.com/streetsidesoftware/cspell-cli](https://github.com/streetsidesoftware/cspell-cli) | `v10.0.1` | `10.1.0` |
| [https://github.com/editorconfig-checker/editorconfig-checker.python](https://github.com/editorconfig-checker/editorconfig-checker.python) | `3.6.1` | `3.11.1` |
| [https://github.com/astral-sh/ty-pre-commit](https://github.com/astral-sh/ty-pre-commit) | `v0.0.59` | `0.0.78` |
| [https://github.com/astral-sh/uv-pre-commit](https://github.com/astral-sh/uv-pre-commit) | `0.11.29` | `0.12.9` |

Updates `https://github.com/ComPWA/policy` from 0.9.0 to 0.9.7
- [Release notes](https://github.com/ComPWA/policy/releases)
- [Commits](ComPWA/policy@0.9.0...0.9.7)

Updates `https://github.com/ComPWA/nbhooks` from 0.0.1 to 0.0.2
- [Release notes](https://github.com/ComPWA/nbhooks/releases)
- [Commits](ComPWA/nbhooks@0.0.1...0.0.2)

Updates `https://github.com/astral-sh/ruff-pre-commit` from v0.15.21 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff-pre-commit/releases)
- [Commits](astral-sh/ruff-pre-commit@v0.15.21...v0.16.6)

Updates `https://github.com/tombi-toml/tombi-pre-commit` from v1.2.0 to 1.5.1
- [Release notes](https://github.com/tombi-toml/tombi-pre-commit/releases)
- [Commits](tombi-toml/tombi-pre-commit@v1.2.0...v1.5.1)

Updates `https://github.com/streetsidesoftware/cspell-cli` from v10.0.1 to 10.1.0
- [Release notes](https://github.com/streetsidesoftware/cspell-cli/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell-cli/blob/main/CHANGELOG.md)
- [Commits](streetsidesoftware/cspell-cli@v10.0.1...v10.1.0)

Updates `https://github.com/editorconfig-checker/editorconfig-checker.python` from 3.6.1 to 3.11.1
- [Release notes](https://github.com/editorconfig-checker/editorconfig-checker.python/releases)
- [Commits](editorconfig-checker/editorconfig-checker.python@3.6.1...3.11.1)

Updates `https://github.com/astral-sh/ty-pre-commit` from v0.0.59 to 0.0.78
- [Release notes](https://github.com/astral-sh/ty-pre-commit/releases)
- [Commits](astral-sh/ty-pre-commit@v0.0.59...v0.0.78)

Updates `https://github.com/astral-sh/uv-pre-commit` from 0.11.29 to 0.12.9
- [Release notes](https://github.com/astral-sh/uv-pre-commit/releases)
- [Commits](astral-sh/uv-pre-commit@0.11.29...0.12.9)

---
updated-dependencies:
- dependency-name: https://github.com/ComPWA/policy
  dependency-version: 0.9.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: lock
- dependency-name: https://github.com/ComPWA/nbhooks
  dependency-version: 0.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: lock
- dependency-name: https://github.com/astral-sh/ruff-pre-commit
  dependency-version: 0.16.6
  dependency-type: direct:production
  dependency-group: lock
- dependency-name: https://github.com/tombi-toml/tombi-pre-commit
  dependency-version: 1.5.1
  dependency-type: direct:production
  dependency-group: lock
- dependency-name: https://github.com/streetsidesoftware/cspell-cli
  dependency-version: 10.1.0
  dependency-type: direct:production
  dependency-group: lock
- dependency-name: https://github.com/editorconfig-checker/editorconfig-checker.python
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: lock
- dependency-name: https://github.com/astral-sh/ty-pre-commit
  dependency-version: 0.0.78
  dependency-type: direct:production
  dependency-group: lock
- dependency-name: https://github.com/astral-sh/uv-pre-commit
  dependency-version: 0.12.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: lock
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@redeboer
redeboer force-pushed the dependabot/lock-3ce850531a branch from 5919610 to fcc6a78 Compare September 7, 2026 11:48
@redeboer
redeboer self-requested a review September 7, 2026 11:48
@redeboer redeboer changed the title MAINT: bump the lock group with 8 updates MAINT: upgrade lock files Sep 7, 2026
@redeboer redeboer added 🖱️ DX Improvements to the Developer Experience 🔨 Maintenance Maintenance and upkeep improvements and removed 🔨 Maintenance Maintenance and upkeep improvements labels Sep 7, 2026
@redeboer
redeboer enabled auto-merge (squash) September 8, 2026 09:51
@redeboer
redeboer merged commit 3013bde into main Sep 8, 2026
31 of 32 checks passed
@redeboer
redeboer deleted the dependabot/lock-3ce850531a branch September 8, 2026 11:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🖱️ DX Improvements to the Developer Experience ⬆️ Lock This PR upgrades the lock files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant