Skip to content

chore: bulk-refresh uv locks and bump common for Dependabot cleanup - #643

Merged
osaeedi merged 1 commit into
mainfrom
chore/bulk-dep-security-refresh
Oct 27, 2026
Merged

osaeedi merged 1 commit into
mainfrom
chore/bulk-dep-security-refresh

Conversation

@osaeedi

@osaeedi osaeedi commented Oct 27, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Pin all active ETL jobs to refreshed common@2877e38 (lock upgrade + pandas/numpy major caps in common).
  • Regenerate ~95 active uv.lock files with uv lock --upgrade, keeping pandas<3 / numpy<3 except jobs already on pandas 3 (fgi_stac, dcc_verzeichnis_personendaten).
  • Bump pdf-converter pin and raise huwise-utils-py floor on ods_check_urls; remove broken stdlib-shadowing deps from unibas_semesterdaten (logging/datetime/uuid).
  • Strengthen Renovate grouping/schedule for uv updates. Left archived_etl_jobs/ untouched.

Test plan

  • Wait for docker_build CI on this PR (large matrix — many job images).
  • Spot uv sync --frozen on ods_publish, tba_abfuhrtermine, unibas_semesterdaten, parlamentsdienst_grosserrat_datasette.
  • Import check OK for tba_abfuhrtermine and unibas_semesterdaten.
  • After merge, confirm Dependabot open alerts drop (was ~919 on push).
  • Coordinate rollout: merging rebuilds many :latest GHCR images.

Made with Cursor

Pin all active jobs to common@2877e38, upgrade lockfiles with pandas/numpy major caps, bump pdf-converter/huwise, and group Renovate uv updates so security alerts stop multiplying across ~95 lockfiles.

Co-authored-by: Cursor <cursoragent@cursor.com>
@osaeedi
osaeedi merged commit 4f8b2eb into main Oct 27, 2026
90 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant