You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fixed
The container installed its dependencies by resolving pyproject.toml
fresh instead of from the committed, Dependabot-maintained uv.lock. pip install . reads only the floor pins, so the image could ship whatever
had been released that morning -- a dependency set no test had ever run
against. That is how google-genai 3.0 reached mcp-gemini's production
with CI green (RT #1564); this repo had the same gap. The builder now
installs from a uv export of the lock with --no-deps, so the image
carries exactly what CI tested.