Skip to content

ci: stop dependabot from bumping the deliberately-floating deps - #270

Open
d-v-b wants to merge 1 commit into
mainfrom
ci/dependabot-skip-floating-deps
Open

ci: stop dependabot from bumping the deliberately-floating deps#270
d-v-b wants to merge 1 commit into
mainfrom
ci/dependabot-skip-floating-deps

Conversation

@d-v-b

@d-v-b d-v-b commented Jul 31, 2026

Copy link
Copy Markdown
Owner

🤖 AI text below 🤖

The weekly Dependabot uv update job on main fails (Update #1496822367): recreating the python-dependencies group PR makes Dependabot attempt a botocore bump to 1.43.55, which is unsatisfiable against s3fs/aiobotocore's tight interlocking caps in the python_full_version >= '3.15' resolution split.

pyproject.toml already documents that botocore, s3fs, fsspec, obstore, numcodecs, and universal-pathlib are deliberately left floating — the optional matrix exercises their latest releases, and min_deps/upstream cover the floor and bleeding edge. This adds a matching ignore list to the uv update group so Dependabot stops trying to pin them and the update job stops failing.

🤖 Generated with Claude Code

The uv update job fails resolving a botocore bump against s3fs and
aiobotocore's tight caps (unsatisfiable in the python>=3.15 resolution
split). pyproject.toml intentionally leaves botocore, s3fs, fsspec,
obstore, numcodecs, and universal-pathlib floating; the optional test
matrix and the min_deps/upstream envs cover their range. Ignore them in
the python-dependencies group so the weekly update job stops failing.

Assisted-by: ClaudeCode:claude-fable-5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant