Repository navigation
chore: remove copier answers and install from uv.lock with --locked - #765
Merged
Merged
Conversation
The SDK is in maintenance mode and takes no updates from oe-python-template. Without .copier-answers.yml, Renovate finds no copier dependency, so renovate.json no longer turns the copier manager off. That setting broke the org rule that a repo config must not use enabled: false. Remove the update_from_template nox session, its Makefile target, the CONTRIBUTING.md section and the copier install in install.bash. They only worked with the answers file. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The org supply chain rule says that CI installs only from the committed lock file and fails if the lock file and the manifest do not match. --frozen installs from uv.lock but does not check it against pyproject.toml. --locked does both. Change every uv sync and uv run in the workflows, the nox sessions and the Read the Docs build. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
OX Security reviewed this pull request — nothing to fix.
Branch |
olivermeyer
marked this pull request as ready for review
November 6, 2026 13:44
arne-aignx
approved these changes
Nov 6, 2026
Codecov Report✅ All modified and coverable lines are covered by tests. ❌ Your project check has failed because the head coverage (64.23%) is below the target coverage (70.00%). You can increase the head coverage or adjust the target coverage. |
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why?
The supply chain checklist found two gaps in this repo.
renovate.jsonturns off the copier manager withenabled: false, and the org Renovate rule does not allow that. CI installs withuv sync --frozen, which does not fail whenuv.lockandpyproject.tomldo not match.How?
Remove
.copier-answers.yml. Then Renovate finds no copier dependency, and theenabled: falseblock goes. Theupdate_from_templatenox session, its Makefile target and the copier install ininstall.bashworked only with that file, so they go too. Replace--frozenwith--lockedin all workflows, the nox sessions and the Read the Docs build.🤖 Generated with Claude Code