Skip to content

fix: dependabot(uv) update issues - #1474

Merged
moe-ad merged 2 commits into
mainfrom
fix/ci_cd_dependabot
Aug 11, 2026
Merged

fix: dependabot(uv) update issues#1474
moe-ad merged 2 commits into
mainfrom
fix/ci_cd_dependabot

Conversation

@moe-ad

@moe-ad moe-ad commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Closes #1473.

The root cause was not adding --no-dev flag as I have done (uv automatically includes the dev group in every export unless explictly disabled), and the reason the issue is just revealing itself now (and not in the past) is because the dev dependency group was recently just added (in #1427).

@moe-ad
moe-ad requested a review from a team as a code owner August 10, 2026 12:40
@moe-ad moe-ad self-assigned this Aug 10, 2026
@github-actions github-actions Bot added ci Pipelines maintenance related fix Pull requests related to resolving problems or errors labels Aug 10, 2026
@moe-ad

moe-ad commented Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Tested locally btw. If the reviewer also wants to test locally:

  • Checkout main branch

  • Update uv.lock as dependabot proposed in build(uv): bump fastcore from 2.1.0 to 2.1.16 #1461.

  • Run the following shell script:

     echo "Directories containing requirements files:"
     echo "==========================================="
     
     # Process standard requirements.txt files
     find . -maxdepth 2 -type f -name "requirements.txt" -exec dirname {} \; | sort -u | while read dir; do
         # Remove leading ./
         dir_cleaned="${dir#./}"
         # Get the directory name without leading underscore for the group name
         group_name="${dir_cleaned#_}"
     
         echo "  Processing: $dir_cleaned/requirements.txt (group: $group_name)"
     
         # Run uv export command
         uv export --format requirements.txt --group "$group_name" --output-file "$dir_cleaned/requirements.txt" --no-hashes --no-dev
     done
     
     # Process requirements-<suffix>.txt files (e.g., code-style/requirements-prek.txt)
     find . -maxdepth 2 -type f -name "requirements-*.txt" | sort | while read file; do
         # Remove leading ./
         file_cleaned="${file#./}"
         dir_cleaned="$(dirname "$file_cleaned")"
         # Extract suffix from filename (e.g., "prek" from "requirements-prek.txt")
         basename_file="$(basename "$file_cleaned")"
         suffix="${basename_file#requirements-}"
         suffix="${suffix%.txt}"
         # Group name is dir (without underscore) + "-" + suffix
         group_name="${dir_cleaned#_}-${suffix}"
     
         echo "  Processing: $file_cleaned (group: $group_name)"
     
         # Run uv export command
         uv export --format requirements.txt --group "$group_name" --output-file "$file_cleaned" --no-hashes
     done

    Notice the changes to the requirement files are like in build(uv): bump fastcore from 2.1.0 to 2.1.16 #1461.

  • Discard the changes to the requirements files, add --no-dev to the script as I have done here, and run again.

  • Things should be fine and dandy afterwards.

@ecoussoux-ansys ecoussoux-ansys left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch !
Thanks for providing the detailed instructions to test locally - I performed the test as you described and everything looks good now 👍

@RobPasMue RobPasMue left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Well that explains it!

@moe-ad
moe-ad merged commit d67dd84 into main Aug 11, 2026
91 of 103 checks passed
@moe-ad
moe-ad deleted the fix/ci_cd_dependabot branch August 11, 2026 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci Pipelines maintenance related fix Pull requests related to resolving problems or errors

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Investigate what caused a change in the behavior of dependabot update scripts for uv

4 participants