Skip to content

build(deps-dev): re-lock uv.lock against the mypy>=2.3.0 dev pins - #965

Open
justinmclean wants to merge 1 commit into
apache:mainfrom
justinmclean:update-uv-lock
Open

build(deps-dev): re-lock uv.lock against the mypy>=2.3.0 dev pins#965
justinmclean wants to merge 1 commit into
apache:mainfrom
justinmclean:update-uv-lock

Conversation

@justinmclean

Copy link
Copy Markdown
Member

Summary

  • Re-locks uv.lock so the [package.metadata.requires-dev] blocks match what the manifests already declare. Eight workspace members were bumped to mypy>=2.3.0 in their pyproject.toml but the lock still recorded >=2.1.0 for them: checker, generate-cve-json, oauth-draft, redactor, sandbox-lint, skill-and-tool-validator, skill-evals, vulnogram-api.
  • No dependency resolution changes and no manifest edits. mypy itself is already pinned at 2.3.0 in the resolved set; this only corrects the recorded specifiers, which are derived from pyproject.toml.
  • Why it matters: the prek hooks invoke uv run --project <tool> without --frozen or --locked, so every hook run re-locks and writes this pending correction into whichever branch happens to be checked out. Contributors keep picking up eight lines of unrelated uv.lock churn in feature PRs, which then reads as scope creep in review. Landing the correction on its own clears it for everyone.

Type of change

  • Skill change (.claude/skills/<name>/) — eval fixtures updated below
  • Tool / bridge contract (tools/<system>/*.md)
  • Python package (tools/*/ with pyproject.toml)
  • Groovy reference impl
  • Cross-cutting (RFC, AGENTS.md, sandbox, privacy-LLM)
  • Documentation (docs/, README.md, CONTRIBUTING.md)
  • Project template (projects/_template/)
  • CI / dev loop (prek, workflows, validators)
  • Other: dependancy update

Test plan

  • prek run --all-files passes
  • For Python packages touched: uv run pytest / ruff check / mypy passes
  • For Groovy bridges touched: command-line invocation tested end-to-end
  • For skill changes: eval suite passes for the affected skill
    (PYTHONPATH=tools/skill-evals/src python3 -m skill_evals.runner tools/skill-evals/evals/<skill>/)
  • For skill behaviour changes: a new or updated eval fixture is included in this PR
    (a regression test for the bug fixed / the behaviour added — see CONTRIBUTING.md)
  • Other:

@justinmclean justinmclean self-assigned this Jul 27, 2026
potiuk pushed a commit that referenced this pull request Jul 27, 2026
…11 (#968)

Match requires-python, ruff, and mypy to the repo-wide 3.11 floor
so type-checking cannot green-light constructs unsupported by the
declared runtime. Apply the py311 ruff UP017/B905 fixes that the
raised target-version now surfaces.

Also re-lock root uv.lock mypy requires-dev specifiers to >=2.3.0
so prek stops rewriting the lock on every README-touching commit
(same correction as #965).

Generated-by: Cursor Grok 4.5

Signed-off-by: shaurya2k06 <shaurya2k06@gmail.com>
justinmclean pushed a commit that referenced this pull request Jul 27, 2026
…vers (#970)

Correct the license-size docstring to bytes, skip the live header
integration out-of-tree instead of aborting, and catch OSError from
validate_eval_coverage directory listing the same way
collect_tool_python_files does.

Also re-lock root uv.lock mypy requires-dev specifiers to >=2.3.0 so
prek stops rewriting the lock when this tool is touched (same
correction as #965).

Signed-off-by: shaurya2k06 <shaurya2k06@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant