Skip to content

chore(deps): refresh uv minor/patch lock and ignore filelock 4.x - #2108

Merged
FabioLeitao merged 2 commits into
mainfrom
epic/boar-deps-2026-10-20
Oct 20, 2026
Merged

FabioLeitao merged 2 commits into
mainfrom
epic/boar-deps-2026-10-20

Conversation

@FabioLeitao

Copy link
Copy Markdown
Collaborator

Summary

  • Regenerates uv.lock, requirements.txt, and pylock.toml together for the current compatible minor/patch set (numpy 2.5.4, pydantic 2.14.1, pymssql 2.4.5, py7zr 1.1.4, pillow-heif 1.8.1, hypothesis 6.170.5, jsonpointer 3.4, narwhals 2.27.1, platformdirs 4.13.5, python-discovery 1.6.4, virtualenv 21.14.11, plus pydantic-core 2.50.1).
  • SQLAlchemy 2.1.4 and pyarrow 26.0.0 were already on main (9fdd2434) and are unchanged. filelock stays at 3.32.7.
  • Dependabot now ignores filelock semver-major updates. The stable snowflake connector still requires filelock<4; forcing 4.x pulls a release candidate.

Refs #2069
Refs #2021

Dependabot PRs #2104, #2083, and #2084 are left open. They close only when these versions are on main.

Test plan

  • ./scripts/check-all.sh exit 0 in the deps worktree (3319 passed, 83 skipped, 2 xfailed, 248 subtests). The first run failed four licensing tests because a canonical license.jwt was already present in the user config dir; the re-run used an empty XDG_CONFIG_HOME and passed pre-commit, pytest, and the security scans.
  • CI on this PR
  • Bugbot inline findings

Regenerate uv.lock, requirements.txt, and pylock.toml together so the
export gate matches the current compatible minor/patch set. SQLAlchemy
2.1.4 and pyarrow 26.0.0 were already on main and are unchanged here.

Refs #2069
snowflake-connector-python stable still requires filelock<4, so a 4.x
bump is not a clean lock. Stop the major-update PRs until a stable
connector accepts filelock>=4.

Refs #2021
@FabioLeitao
FabioLeitao merged commit 5fd7328 into main Oct 20, 2026
33 checks passed
@FabioLeitao
FabioLeitao deleted the epic/boar-deps-2026-10-20 branch October 20, 2026 13:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant