GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — chore: remove Dependabot version updates and bump ruff to 0.16.10 by xxg1413 · Pull Request #104 · flypythoncom/python

Conversation

@xxg1413

@xxg1413 xxg1413 commented Oct 11, 2026

Copy link
Copy Markdown
Member

Summary

The maintainer no longer wants Dependabot opening version-update PRs. This removes .github/dependabot.yml, so the monthly grouped PRs for pip and GitHub Actions stop.

It also carries the ruff 0.16.9 → 0.16.10 bump from #103 (cherry-picked with Dependabot authorship kept). Removing the config can make Dependabot auto-close #103, and carrying the commit here means the upgrade lands either way. If #103 is merged first, this branch still merges cleanly because the two changes are identical.

After this, dependencies are bumped by hand with make lock and checked with make lock-check. SHA-pinned actions in .github/workflows/ are also updated by hand. Dependabot security alerts and security-update PRs are repository settings (Settings → Code security), and this file doesn't control them.

Change type

  • Catalog resource or classification
  • Bilingual editorial content
  • Catalog export or consumer contract
  • Tests, tooling, or workflow
  • Governance or documentation

Evidence and scope

  • Related issue: none; supersedes chore(deps-dev): bump ruff from 0.16.9 to 0.16.10 in the python-dependencies group #103
  • Source or maintenance evidence: n/a
  • Website consumer impact: none (no catalog, radar, or manifest changes)
  • Intentionally out of scope: the Dependabot security-update repository settings; the pyproject.toml ruff floor stays at Dependabot's >=0.16.10

Validation

Run locally on this branch with ruff 0.16.10 installed from the dev lock:

  • make check passes: ruff, pytest, validate_catalog.py, export_catalog.py --check --target both, render_readmes.py --check, build_content_manifest.py --check, verify_examples.py (5), verify_courses.py (12), verify_paths.py (2)
  • make lock-check passes (locks match pyproject.toml)
  • English and Chinese output remain consistent (no content changes)
  • No secrets, generated reports, local build output, or analytics IDs were committed

Permissions and review

  • I have the right to submit this contribution.
  • I retained third-party notices and did not relicense third-party material.
  • Human reviewers wrote or verified all resource descriptions and classifications.
  • I read CONTRIBUTING.md and docs/CURATION_POLICY.md.
Open in Web Open in Cursor 

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
dependabot Bot and others added 2 commits October 11, 2026 12:39
@dependabot @cursoragent
chore(deps-dev): bump ruff
e3e98bd
Bumps the python-dependencies group with 1 update: [ruff](https://github.com/astral-sh/ruff).

Updates `ruff` from 0.16.9 to 0.16.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.9...0.16.10)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
(cherry picked from commit 2972431)
@cursoragent @xxg1413
chore: remove Dependabot version-update config
4dce1d6
Dependency and action bumps are now done by hand with make lock and
verified by make lock-check. Security alerts and security-update PRs
are repository settings and are not controlled by this file.

Co-authored-by: P小二 <[email protected]>
@xxg1413 xxg1413 mentioned this pull request Oct 11, 2026
release: 0.1.2 — llms.txt fix, /from-github CTAs, FP-414 evaluation #106
Merged
11 of 13 tasks
@cursor
cursor Bot merged commit 14565ec into master Oct 11, 2026
2 checks passed

Uh oh!

There was an error while loading. Please reload this page.

@cursor
cursor Bot deleted the cursor/remove-dependabot-21e9 branch October 11, 2026 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

2 participants

@xxg1413 @cursoragent
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.