Skip to content

Bump gojiplus/py-canon/.github/workflows/reusable-ci.yml from d5000e704aafc69a4834e606bdff81dc8a6d7804 to 6c3fbb04cf3798cae79f2e1067b6a74d8391a4ee - #15

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/gojiplus/py-canon/dot-github/workflows/reusable-ci.yml-6c3fbb04cf3798cae79f2e1067b6a74d8391a4ee
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/gojiplus/py-canon/dot-github/workflows/reusable-ci.yml-6c3fbb04cf3798cae79f2e1067b6a74d8391a4ee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps gojiplus/py-canon/.github/workflows/reusable-ci.yml from d5000e704aafc69a4834e606bdff81dc8a6d7804 to 6c3fbb04cf3798cae79f2e1067b6a74d8391a4ee.

Changelog

Sourced from gojiplus/py-canon/.github/workflows/reusable-ci.yml's changelog.

Changelog

All notable changes to this project are documented here.

The format follows Keep a Changelog. Release tags match the version committed in pyproject.toml; the fleet-facing v1 tag is a moving pointer advanced by the promote workflow after green CI, not a release of its own.

[Unreleased]

Removed

  • reusable-release's publish job and its publish-pypi / testpypi inputs. PyPI trusted publishing cannot work from a reusable workflow, so no caller used it (checked across all 56 fleet release.yml files), but its id-token: write forced every caller to grant that permission to the reusable workflow. The template's release job no longer grants it; the caller's own publish job keeps it.

Changed

  • Reusable CI runs preen 0.8.0. Its duplicate-code check runs jscpd instead of pylint's similarity checker, so it also catches copies within one module and copies with consistently renamed names; mark a deliberate copy with # jscpd:ignore-start/# jscpd:ignore-end, since # pylint: disable=duplicate-code no longer applies. Its audit check also scans optional-dependency extras. Through 0.7.2, deptree no longer counts imports inside functions or under if TYPE_CHECKING: as circular-import edges.
  • Jobs outside the test matrix (lint, wheel, docs build, release test and build) request the lowest minor version requires-python allows, intersected with dependency groups' own requires-python (for example ==3.13.*,>=3.13). They used the runner's Python (3.12) when it qualified and otherwise the newest release uv could download: in-rolls/indicate (>=3.13) got Python 3.15, for which torch has no wheels, and every one of those jobs failed. A repo's .python-version or a caller's UV_PYTHON takes precedence.
  • Reusable CI runs Preen 0.7.0, which adds two gates: duplicate-code (pylint's similarity checker, failing on 12+ lines copied between package modules) and US English in codespell. STANDARD.md describes both and no longer calls ruff the only linter. Before the bump, all 47 FLEET repositories were checked under 0.6.2 and 0.7.0: the only one that newly fails is themains/piedomains, on duplicate code.
  • Docs carry content, not just configuration. The template's home page includes the README (after a <!-- SPHINX-START --> marker), the API page is an autosummary reference with one page per public object from __all__, and a changelog page includes CHANGELOG.md. configure() ships short-title autosummary templates. STANDARD.md now says what a docs site must contain, including a tested user guide for packages with more than one workflow.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [gojiplus/py-canon/.github/workflows/reusable-ci.yml](https://github.com/gojiplus/py-canon) from d5000e704aafc69a4834e606bdff81dc8a6d7804 to 6c3fbb04cf3798cae79f2e1067b6a74d8391a4ee.
- [Release notes](https://github.com/gojiplus/py-canon/releases)
- [Changelog](https://github.com/gojiplus/py-canon/blob/main/CHANGELOG.md)
- [Commits](gojiplus/py-canon@d5000e7...6c3fbb0)

---
updated-dependencies:
- dependency-name: gojiplus/py-canon/.github/workflows/reusable-ci.yml
  dependency-version: 6c3fbb04cf3798cae79f2e1067b6a74d8391a4ee
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants