From d81282b8497492bdcaf600433e293805ae3c843b Mon Sep 17 00:00:00 2001 From: Denis Drobyshev Date: Thu, 27 Aug 2026 15:24:40 +0300 Subject: [PATCH] Make the numpy and gymnasium ignores actually work, and add pytest My own change in #23 left these two on update-types: ["version-update: semver-major"], which does not do what it looks like it does. #29 raised numpy from >=1.21 to >=2.2.6 and walked straight past it, because for a `>=` constraint Dependabot files a "requirement update" rather than a version update - the behaviour already written into lemma's configuration and which I copied only half of. pytest joins mypy for the other reason: pytest 9 requires Python >=3.10 and mypy 2.3 requires >=3.11, so both fail the 3.9 leg at install. Ignoring them is a holding action, not an answer - #30 is about the support matrix that is actually causing this. --- .github/dependabot.yml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9dd050f..258a8f1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -32,11 +32,12 @@ updates: # The published results are measured on specific versions and re-verified # by examples/verify_applied_claims.py. These move when someone re-runs # that script, not because a scheduled PR was green. + # Unconditional, not update-types. For a `>=` constraint Dependabot files + # a "requirement update", which that filter does not match - numpy went + # from >=1.21 to >=2.2.6 in #29 straight past a semver-major ignore. - dependency-name: torch - dependency-name: numpy - update-types: ["version-update:semver-major"] - dependency-name: gymnasium - update-types: ["version-update:semver-major"] # Dev tools that have dropped the oldest Python this project supports. # mypy 2.3.1 requires >=3.11; CI tests 3.9, so raising the floor to it @@ -47,6 +48,10 @@ updates: # `update-types` does not help here: for a `>=` constraint Dependabot # files a "requirement update", which that filter does not match. - dependency-name: mypy + # pytest 9 requires >=3.10, mypy 2.3 requires >=3.11. Both fail the 3.9 + # leg at install. Ignored until the support matrix decides otherwise - + # see #30, which is about that decision rather than about these packages. + - dependency-name: pytest # Lower bounds on these describe what a user may already have installed, # not what CI resolves - pip takes the newest match either way. Raising