Skip to content

ci(dependabot): freeze hypothesis to keep the Python 3.9 dev lockfile installable - #380

Merged
kingchenc merged 1 commit into
mainfrom
fix/dependabot-ignore-hypothesis
Jul 26, 2026
Merged

ci(dependabot): freeze hypothesis to keep the Python 3.9 dev lockfile installable#380
kingchenc merged 1 commit into
mainfrom
fix/dependabot-ignore-hypothesis

Conversation

@kingchenc

Copy link
Copy Markdown
Collaborator

hypothesis >=6.142 requires Python >=3.10, but .github/requirements/ci-dev-py39.txt targets the 3.9 matrix rows. The ci-pip group bump (#377) pushed hypothesis to 6.157.0, which pip refused to install on every Python 3.9 job. Freeze hypothesis minor/major in the CI requirements ecosystem, mirroring the existing numpy pin. (#377 also dropped the Windows-conditional colorama from the hash lockfile, breaking --require-hashes on Windows — a separate dependabot lockfile-gen quirk; #377 is being closed as a broken bump and will re-propose cleanly next cycle.)

… installable

hypothesis >=6.142 requires Python >=3.10, but .github/requirements/ci-dev-py39.txt
targets the 3.9 matrix rows. A ci-pip group bump to hypothesis 6.157.0 made pip
reject it on every 3.9 job ("Ignored the following versions that require a
different python version"). Ignore hypothesis minor/major bumps in the CI
requirements ecosystem, mirroring the existing numpy pin — the dev tooling only
needs a working hypothesis, not the newest.
@kingchenc
kingchenc merged commit 6d5cc53 into main Jul 26, 2026
@kingchenc
kingchenc deleted the fix/dependabot-ignore-hypothesis branch July 26, 2026 19:20
@codecov

codecov Bot commented Jul 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant