Skip to content

build(deps-dev): bump the dev-tools group across 1 directory with 2 updates #32

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps-dev): bump the dev-tools group across 1 directory with 2 updates #32

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,8 @@ pytest = ">=8.3,<10.0"
pytest-asyncio = "^1.3.0"
pytest-cov = "^7.0.0"
pytest-mock = "^3.14.0"
ruff = "^0.15.5"
mypy = "^1.13.0"
ruff = ">=0.15.5,<0.17.0"
mypy = ">=1.13,<3.0"
Comment on lines +25 to +26

@coderabbitai coderabbitai Bot Jul 27, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Ensure every CI lane honors these bounds.

.github/workflows/ci-quality.yml currently runs pip install ruff mypy, bypassing these declarations and allowing arbitrary latest versions. Install the project’s dev extras or repeat the bounded constraints there so CI validates the versions defined by pyproject.toml.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@pyproject.toml` around lines 25 - 26, Update the dependency installation step
in ci-quality.yml to honor the bounded ruff and mypy versions declared in
pyproject.toml. Install the project’s dev extras or explicitly apply those same
constraints instead of installing unconstrained ruff and mypy packages.

🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '\n== pyproject.toml (relevant lines) ==\n'
nl -ba pyproject.toml | sed -n '1,80p'

printf '\n== CI workflow references to ruff/mypy ==\n'
rg -n "ruff|mypy|pyproject|pip install|uv|poetry" .github/workflows -S || true

printf '\n== Any explicit version pins in repo ==\n'
rg -n 'ruff = "|mypy = "|ruff[ =]|mypy[ =]' -S pyproject.toml .github/workflows README.md . 2>/dev/null || true

Repository: cryptoxdog/l9-codegraph

Length of output: 240

🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '\n== pyproject.toml (first 90 lines with numbers) ==\n'
awk 'NR<=90 { printf "%4d  %s\n", NR, $0 }' pyproject.toml

printf '\n== CI workflow references to ruff/mypy ==\n'
rg -n "ruff|mypy|pyproject|pip install|uv|poetry" .github/workflows -S || true

printf '\n== explicit version constraints in repo ==\n'
rg -n 'ruff = "|mypy = "|ruff[ =]|mypy[ =]' -S pyproject.toml .github/workflows README.md . 2>/dev/null || true

Repository: cryptoxdog/l9-codegraph

Length of output: 6184

Raise the dev-tool lower bounds to the versions this PR targets. ruff = ">=0.16.0,<0.17.0" and mypy = ">=2.3.0,<3.0" keep fresh installs aligned with the updated toolchain; ci-quality.yml also installs both tools without constraints, so it should use the same pins.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@pyproject.toml` around lines 25 - 26, Update the ruff and mypy lower bounds
in the project development dependencies to ruff >=0.16.0,<0.17.0 and mypy
>=2.3.0,<3.0. Also update the corresponding unconstrained installs in
ci-quality.yml to use these same version ranges.

Source: MCP tools


[build-system]
requires = ["poetry-core"]
Expand Down
Loading