From 26303a8ee84a7bcac641954d9a27bf0921dd4dac Mon Sep 17 00:00:00 2001 From: km Date: Fri, 2 Oct 2026 15:39:41 +0900 Subject: [PATCH 1/2] ci(dependabot): update the Python projects as uv projects and cover every manifest The Python projects pin their dependencies in uv.lock and keep open ranges in pyproject.toml. Dependabot's "pip" ecosystem reads requirements.txt and pyproject.toml pins but not uv.lock, so the weekly Python update has had nothing to bump since the configuration landed; only security updates, which come from the dependency graph, have been opened. Switching the entry to "uv" lets Dependabot update pyproject.toml and uv.lock together. The directory list also drifted: the Databricks converter moved its Python project under python/ and gained a Java module, and six converters were added after the configuration was written. Each directory with a pyproject.toml and a committed uv.lock is listed, and the Java module joins the Maven group. The wisdom converter has no committed uv.lock yet and is left out until it does. Generated-by: Claude Code --- .github/dependabot.yml | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 2dbdfec3..415e8d38 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -37,18 +37,24 @@ updates: patterns: - "*" - # Python projects (PEP 621 / hatchling) - - package-ecosystem: "pip" + # Python projects (PEP 621 / hatchling). They pin in uv.lock, which the + # "pip" ecosystem does not read, so they are updated as "uv" projects. + - package-ecosystem: "uv" directories: - "/python" + - "/converters/cube" + - "/converters/databricks/python" - "/converters/dbt" - - "/converters/databricks" - "/converters/gooddata" - "/converters/honeydew" + - "/converters/microsoft" + - "/converters/nvidia" - "/converters/omni" + - "/converters/ontology" - "/converters/orionbelt" + - "/converters/sigma" - "/converters/snowflake" - - "/converters/wisdom" + - "/converters/thoughtspot" schedule: interval: "weekly" groups: @@ -59,6 +65,7 @@ updates: # Maven / Java converters - package-ecosystem: "maven" directories: + - "/converters/databricks/java" - "/converters/polaris" - "/converters/salesforce" schedule: From 714333a5513d7929f4d6ef2a2de848599edd5edf Mon Sep 17 00:00:00 2001 From: km Date: Sat, 3 Oct 2026 11:30:48 +0900 Subject: [PATCH 2/2] ci(dependabot): keep the wisdom converter in the uv list wisdom has no committed uv.lock, but Dependabot's uv fetcher only needs a pyproject.toml, so it can be updated with the other Python projects instead of being dropped from the configuration. Generated-by: Claude Code --- .github/dependabot.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 415e8d38..225dd8b4 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -55,6 +55,7 @@ updates: - "/converters/sigma" - "/converters/snowflake" - "/converters/thoughtspot" + - "/converters/wisdom" schedule: interval: "weekly" groups: