-
-
Notifications
You must be signed in to change notification settings - Fork 2.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add workflow to run uv lock #5422
Conversation
Adding a dependency through If we commit 'uv.lock', is a workflow like this then required? |
This workflow is mainly for dependabot PRs, which AFAIK doesn't support |
c7671a6
to
785b024
Compare
Should do the job for dependabot updates
785b024
to
15556a0
Compare
Clever! |
with: | ||
token: ${{ env.GH_PAT }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is needed to make sure that CI runs again on pushes, see: https://github.com/stefanzweifel/git-auto-commit-action#commits-made-by-this-action-do-not-trigger-new-workflow-runs
- name: Checkout without token | ||
uses: actions/checkout@v4 | ||
if: ${{ env.GH_PAT == '' }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added this fallback in case the secret isn't accessible, which unfortunately the case sometimes...
Ok, let's try this |
Description
Build on top of #5356 to add a uv lock workflow
Checklist:
Rationale
At time of writing, Dependabot doesn't yet support
uv.lock
file: dependabot/dependabot-core#10478 but it does support package deps inpyproject.toml
, which means that we will get PRs to updates our template deps, but they will leave the lockfile out of sync.This workflow is a workaround for that, and will attempt to regenerate the lockfile each time the
pyproject.toml
file is changed by a pull request.