deps: lockfile refresh (fastapi 0.141.1 and transitives) - #102
Merged
Conversation
…ers) Transitive and dev-tooling movement from uv lock --upgrade. Synced with --all-extras --all-groups throughout, never bare, so the venv keeps its extras and dependency groups. Gates: ruff check, ruff format --check, ty check, pytest (1841 passed, 4 skipped) and vulture all clean. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Dependency movement only; no public API, signature, or wire format change, so this is a patch bump. Release notes belong in the GitHub Release body at tag time. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
uv.lock embeds the project's OWN version, so a pyproject.toml bump leaves the lock disagreeing with the manifest about what this package is. Nothing errors and no gate notices, exactly like the bun equivalent where `bun update` leaves the lock's embedded ranges stale. Run `uv lock` after any version bump, before committing. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Picks up the SDK released from this same sweep. The declared constraint is >=2.6.0, which 2.6.1 already satisfied, so the lock had to be moved explicitly with --upgrade-package; a resolution that still satisfies its constraint never re-resolves on its own. Constraint left at >=2.6.0 deliberately: nothing here requires the newer patch, and raising a published library's floor forces work on every consumer for no gain. Gates: ruff check, ruff format --check, ty check, pytest (1841 passed, 4 skipped) and vulture all clean. Synced with --all-extras --all-groups. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Stated rather than incidental: the constraint now names the version the lock resolves, so a fresh install cannot quietly land on an older SDK. Gates: ruff check, ruff format --check, ty check and pytest (1841 passed, 4 skipped) all clean. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Lockfile refresh from the workspace-wide maintenance sweep. Ten packages moved, all transitive or dev tooling, the most notable being
fastapi0.140.0 to 0.141.1. No source changes and no direct-dependency range edits.Type of change
Public API
None.
fastapiis a peer the middleware integrates against rather than something re-exported, and its declared range is unchanged, so an installing consumer resolves exactly as before. No exported type, signature, or wire format changes.Test plan
Ran the repo's full Python gate set with exit codes read directly:
ruff checkclean,ruff format --checkclean at 215 files,ty checkclean,pytest1841 passed with 4 skipped, andvulture --min-confidence 80clean over the package. Every sync used--all-extras --all-groupsrather than a bareuv sync, which would resolve base deps only and quietly strip the venv's extras and dependency groups, breaking test collection.Checklist