Skip to content

fix(ci): automate manifest synchronisation and lockfile regeneration for Dependabot and local builds - #55

Merged
arena-ai-coding-agent[bot] merged 1 commit into
mainfrom
arena/01a0604d-oyster360
Sep 2, 2026
Merged

arena-ai-coding-agent[bot] merged 1 commit into
mainfrom
arena/01a0604d-oyster360

Conversation

@arena-ai-coding-agent

Copy link
Copy Markdown
Contributor

Summary

  • Fixes the CI Lockfile reproducibility failure caused by unsynchronised dependency manifests and missing lockfile compilation on Dependabot branches.
  • Adds scripts/sync_dependencies.py to automatically merge runtime and dev dependencies across pyproject.toml, backend/pyproject.toml, setup.cfg, backend/setup.cfg, and requirements-*.txt, and recompile backend/requirements.lock, uv.lock, and backend/uv.lock.
  • Adds --fix flag support to scripts/check_dependency_sync.py and make deps-sync target in Makefile.
  • Updates CI lockfiles job in .github/workflows/ci.yml to run sync tooling and commit updated manifests/locks on Dependabot PRs before verification.
  • Deduplicates pip ecosystem configuration in .github/dependabot.yml.
  • Adds unit tests in backend/tests/test_dependency_sync.py.

…for Dependabot and local builds

Co-authored-by: arena-agent <297053741+arena-agent@users.noreply.github.com>
@arena-ai-coding-agent
arena-ai-coding-agent Bot merged commit eca8ba0 into main Sep 2, 2026
10 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant