Skip to content

Group Dependabot updates and enforce a 24-hour Python release age - #4

Merged
rblaine95 merged 2 commits into
masterfrom
chore/group-dependabot-updates
Oct 3, 2026
Merged

rblaine95 merged 2 commits into
masterfrom
chore/group-dependabot-updates

Conversation

@rblaine95

@rblaine95 rblaine95 commented Oct 3, 2026 •

Copy link
Copy Markdown
Member

Summary

  • Use the requested github-actions and python wildcard groups for Dependabot version updates.
  • Preserve the weekly schedule and existing one-day Dependabot cooldowns. No explicit security-update grouping rules are added.
  • Set tool.uv.exclude-newer = "24 hours" so project dependency resolution excludes package artifacts uploaded within the last 24 hours, and regenerate lockfile options without changing dependency versions.
  • Document grouping and release-age behavior. Dependabot's cooldown applies to version updates, not security updates.

Validation

  • Parsed YAML and TOML; verified the two requested groups and preservation of other Dependabot settings.
  • uv lock --check passed.
  • uv run pytest -m "not model": 7 passed, 9 deselected.
  • Ruff 0.16: ruff check . and ruff format --check . passed.
  • Confirmed lockfile changes are limited to the generated 24-hour exclusion options.
  • Model contract tests were not run; they require the checkpoint and are also excluded by CI.

References: Dependabot groups/cooldown, uv dependency cooldowns, uv and Dependabot.

@coderabbitai

coderabbitai Bot commented Oct 3, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: ecd01dbc-08e5-44fb-87b9-d89154fdb258

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@rblaine95
rblaine95 marked this pull request as ready for review October 3, 2026 17:24
@rblaine95
rblaine95 merged commit 277894a into master Oct 3, 2026
4 checks passed
@rblaine95
rblaine95 deleted the chore/group-dependabot-updates branch October 3, 2026 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant