Repository navigation
Conversation
The dependabot.yml comment and its CHANGELOG entry both said every action in the repository is pinned by commit SHA. Only release.yml is. ci.yml pins checkout, setup-python and codecov by tag, which float inside a major version but never cross one. The distinction survives because it explains the thing it was written to explain: neither kind of pin crosses a major on its own, which is how six actions ended up still targeting the Node 20 runtime at 1.0.0. The wrong version of that sentence happened to reach the same conclusion, which is the sort of error that stays invisible until something makes the difference visible — here, Dependabot's first pull request, which rewrote the two kinds differently in the same diff. Nothing functional changes. The configuration itself is confirmed working: it produced PR #21, one grouped pull request with the ci prefix, as specified.
The types job installed requirements.txt, so it picked up GitPython 3.2.0 the day it shipped. 3.2.0 widened Repo.delete_remote to accept a name, the arg-type ignore in set_remote became unused, and warn_unused_ignores turned that into a red main. Install the hashed lock instead, as the image does, so new upstream releases reach the check only through a Dependabot bump. Mark the ignore unused-ignore as well so it holds on both sides of 3.2.
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
dev to main