Latest Results
chore(deps): update all dependencies and run the image on Python 3.15 (#436)
* chore(deps): update all dependencies
- uv.lock: ruff 0.17.0, pre-commit 4.7.0, hypothesis, faker,
mkdocstrings, pymdown-extensions and transitive packages
- GitHub Actions: setup-uv v10.3.0, setup-gitsign v1.6.41,
scorecard-action v2.5.0, re-pinned by commit SHA
- pre-commit: ruff-pre-commit v0.17.0, pinned by commit SHA
* chore(dependabot): ignore typos library crate tags
The typos repo also tags its library crates (varcon-core-v5.0.7 and
others). For a SHA-pinned hook Dependabot does not always filter tags
by prefix, so it proposed "v1.51.1 -> 5.0.7" pointing at a non-CLI
release (#435). Ignore typos >= 2.0.0 so only real 1.x CLI releases
are offered.
* chore(docker): run the image on Python 3.15
astral-sh/uv publishes no python3.15 image yet, so the builder runs on
python:3.15-slim-trixie and copies uv from the distroless uv:0.13.0
image. Both stages stay digest-pinned and visible to Dependabot.
* chore(dependabot): shorten the typos ignore comment Latest Branches
0%
chore/update-dependencies 0%
dependabot/pre_commit/main/https-/github.com/crate-ci/typos-5.0.7 0%
dependabot/docker/main/base-images-3beb370967 © 2026 CodSpeed Technology