fix: unbreak CI (requirements, redis 8, workflow cleanup)

.dockerignore

@@ -14,6 +14,7 @@ htmlcov
 
 # Virtual environments
 .venv
+.venv-ci
 env/
 venv/
 

.github/dependabot.yml

@@ -4,4 +4,14 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 5
+    # Only track the direct deps listed in requirements.txt /
+    # requirements-dev.txt, not the whole transitive tree.
+    allow:
+      - dependency-type: "direct"
+    # Bundle minor/patch bumps into one PR to reduce noise.
+    groups:
+      minor-patch:
+        update-types:
+          - "minor"
+          - "patch"

.github/workflows/ci.yml

@@ -38,17 +38,6 @@ jobs:
   test:
     runs-on: ubuntu-latest
 
-    services:
-      redis:
-        image: redis:7-alpine
-        ports:
-          - 6379:6379
-        options: >-
-          --health-cmd "redis-cli ping"
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -63,11 +52,8 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           if [ -f requirements-dev.txt ]; then pip install -r requirements-dev.txt; fi
-          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
 
       - name: Run tests with Pytest
-        env:
-          REDIS_URL: redis://localhost:6379
         run: |
           pytest
 

.gitignore

@@ -1,6 +1,7 @@
 __pycache__/
 *.py[cod]
 .venv/
+.venv-ci/
 venv/
 .env
 .pytest_cache/

app/storage.py

@@ -44,4 +44,4 @@ async def read_secret(r: Redis, key: str) -> bytes | None:
             except redis_exceptions.WatchError:
                 continue
             finally:
-                pipe.reset()
+                await pipe.reset()

requirements.txt

@@ -1,34 +1,5 @@
-annotated-doc==0.0.5
-annotated-types==0.8.0
-anyio==4.14.2
-certifi==2026.7.22
-cffi==2.1.1
-click==8.4.2
-cryptography==50.0.0
-fakeredis==2.37.0
-fastapi==0.141.1
-h11==0.16.0
-httpcore==1.0.9
-httptools==0.8.0
-httpx==0.28.1
-idna==3.18
-iniconfig==2.3.0
-packaging==26.3
-pluggy==1.6.0
-pycparser==3.0
-pydantic==2.13.4
-pydantic-settings==2.14.2
-pydantic_core==2.47.0
-pytest==9.1.1
-pytest-asyncio==1.4.0
-python-dotenv==1.2.2
-PyYAML==6.0.3
-redis==8.1.0
-sortedcontainers==2.4.0
-starlette==1.4.1
-typing-inspection==0.4.2
-typing_extensions==4.16.0
-uvicorn==0.52.1
-uvloop==0.22.1
-watchfiles==1.2.0
-websockets==17.0.1
+fastapi~=0.141.1
+uvicorn[standard]~=0.52.1
+pydantic-settings~=2.14.2
+redis~=8.1.0
+cryptography~=50.0.0