Skip to content

Pin dependency versions and tighten dependabot scope#33

Merged
tobiascadee merged 2 commits intomainfrom
copilot/update-dependabot-flow
Feb 12, 2026
Merged

Pin dependency versions and tighten dependabot scope#33
tobiascadee merged 2 commits intomainfrom
copilot/update-dependabot-flow

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Feb 12, 2026

Lock down dependency management: pin exact versions in pyproject.toml, drop infra ecosystem updates, and restrict dependabot to only pyproject.toml dependencies.

Changes

  • pyproject.toml: Pin all dependencies to exact versions (==) instead of compatible release (~=) or minimum (>=) specifiers
  • dependabot.yml: Remove docker and github-actions ecosystems
  • dependabot.yml: Add allow list to pip ecosystem scoped to singer-sdk, fs-s3fs, pytest

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

….toml deps

Co-authored-by: tobiascadee <18661165+tobiascadee@users.noreply.github.com>
Copilot AI changed the title [WIP] Update dependabot configuration for package management Pin dependency versions and tighten dependabot scope Feb 12, 2026
Copilot AI requested a review from tobiascadee February 12, 2026 12:21
@tobiascadee tobiascadee marked this pull request as ready for review February 12, 2026 12:25
@tobiascadee tobiascadee requested a review from a team as a code owner February 12, 2026 12:25
@tobiascadee tobiascadee merged commit 91d803b into main Feb 12, 2026
8 checks passed
@tobiascadee tobiascadee deleted the copilot/update-dependabot-flow branch February 12, 2026 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants