chore: update dependencies and improve project config#93
Conversation
|
Warning Review limit reached
Your plan includes 1 review of capacity. Refill in 51 minutes and 30 seconds. Your organization has run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After more review capacity refills, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than trial, open-source, and free plans. In all cases, review capacity refills continuously over time. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (2)
📒 Files selected for processing (7)
📝 WalkthroughWalkthroughThis PR updates project metadata and maintainer information, adds a comprehensive contributor guide for the Datakult Django application, restructures Poe task definitions with help text, and bumps multiple GitHub Actions versions in CI and Docker publish workflows. ChangesProject Setup, Documentation, and Workflow
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes Possibly related PRs
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 3
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.github/workflows/ci.yml:
- Line 21: Update the GitHub Actions usage to pin the setup action to the exact
commit SHA instead of the mutable tag: replace the tag reference
"actions/setup-node@v6.4.0" with the full commit SHA
"actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e" so the workflow
uses a fixed, immutable revision for the actions/setup-node step.
In @.github/workflows/docker-publish.yml:
- Line 33: The workflow uses tag-only action references which are mutable;
update the three actions to pinned immutable SHAs: replace
docker/login-action@v4.2.0 with
docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee,
docker/metadata-action@v6.1.0 with
docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9, and
docker/build-push-action@v7.2.0 with
docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf so the
workflow references immutable commits instead of mutable tags.
In `@pyproject.toml`:
- Line 11: The pyproject.toml currently pins requires-python = ">=3.14,<3.15"
which restricts installs to 3.14.x; either confirm that upper bound is
intentional or relax it—edit the requires-python field (symbol: requires-python)
to a wider range such as ">=3.14" or ">=3.14,<4.0" and then regenerate/update
the dependency lockfile (uv.lock) so it no longer pins to 3.14.*; ensure CI/test
matrix and any runtime checks are updated if you intentionally widen the
supported Python range.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: 8801117a-2945-47b8-95ec-1325ada06db5
⛔ Files ignored due to path filters (2)
src/theme/static_src/package-lock.jsonis excluded by!**/package-lock.jsonuv.lockis excluded by!**/*.lock
📒 Files selected for processing (4)
.github/workflows/ci.yml.github/workflows/docker-publish.ymlCLAUDE.mdpyproject.toml
Bump GitHub Actions (setup-node, docker actions), JS deps (daisyui, postcss, lru-cache, enhanced-resolve), and Python lock file. Also pin Python to 3.14, fix license identifier to AGPL-3.0-only, add authors field, and expand poe tasks with help text and new update-* shortcuts.
1 participant
Bump GitHub Actions (setup-node, docker actions), JS deps (daisyui, postcss, lru-cache, enhanced-resolve), and Python lock file. Also pin Python to 3.14, fix license identifier to AGPL-3.0-only, add authors field, and expand poe tasks with help text and new update-* shortcuts.