Skip to content

build: refresh uv lock annotations for Bazel check#22

Merged
haasonsaas merged 2 commits into
mainfrom
codex/agent-pm-refresh-bazel-lock-20260516
May 16, 2026
Merged

build: refresh uv lock annotations for Bazel check#22
haasonsaas merged 2 commits into
mainfrom
codex/agent-pm-refresh-bazel-lock-20260516

Conversation

@haasonsaas
Copy link
Copy Markdown
Contributor

Summary

Verification

  • git diff --check
  • uvx --from uv==0.11.14 uv export --all-extras --no-emit-project --no-hashes --format requirements-txt --output-file requirements_lock.txt

Notes

  • Local bazelisk is not installed in this Codex environment, so I am waiting for the GitHub Bazel smoke result before merging this PR.

@cursor
Copy link
Copy Markdown

cursor Bot commented May 16, 2026

PR Summary

Medium Risk
Touches Bazel remote-execution configuration and regenerates the Python lockfile annotations; while largely mechanical, it can change CI/build behavior and dependency resolution expectations.

Overview
Updates Bazel’s remote-gcp-dev config to run the CopyFile action locally (instead of remotely) to avoid remote-exec issues.

Regenerates requirements_lock.txt with newer uv export output, expanding/refreshing the # via annotations and dependency listing to match the version used in CI.

Reviewed by Cursor Bugbot for commit c85b9bc. Bugbot is set up for automated code reviews on this repo. Configure here.

@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 16, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedpytest@​9.0.387100100100100
Addedsqlalchemy@​2.0.4497100100100100
Addeduvicorn@​0.37.098100100100100
Addedrich@​14.2.098100100100100
Addedredis@​5.3.199100100100100
Addedpython-dotenv@​1.2.299100100100100
Addedrequests@​2.33.099100100100100
Addedrq@​2.6.099100100100100
Addedruff@​0.14.0100100100100100
Addedpydantic-settings@​2.11.0100100100100100
Addedpytest-cov@​7.0.0100100100100100
Addedpyyaml@​6.0.3100100100100100
Addedpytest-asyncio@​1.3.0100100100100100

View full report

@haasonsaas haasonsaas merged commit 779b20f into main May 16, 2026
8 checks passed
@haasonsaas haasonsaas deleted the codex/agent-pm-refresh-bazel-lock-20260516 branch May 16, 2026 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant