build(deps): lock down minor versions and update lockfile
Metadata
Current evaluation
Merged as 0975d7b: pinned key library minor versions and regenerated the lockfile to stabilize hotfix-branch updates; 7b5d85b added a Vale ignore for “PRs.”
Resolution: closed resolved
Reason: PR #461 was approved by two reviewers and merged as 0975d7b with all listed CI checks passing. It pins library minor versions and updates uv.lock; commit 7b5d85b adds the targeted Vale ignore for PRs.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This locks down the minor versions of important libraries so that a
lockfile update won't update them. This should allow us to do lockfile
updates on hotfix branches without an issue.
Signed-off-by: Alex M. Lowe <alex.lowe@canonical.com>
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged as 0975d7b: pinned key library minor versions and regenerated the lockfile to stabilize hotfix-branch updates; 7b5d85b added a Vale ignore for “PRs.” | |
| qwen/qwen3.8-27b | — | closed resolved | Merged into main: pins minor versions of craft libraries in pyproject.toml and regenerates uv.lock so hotfix-branch lockfile updates won't pull new minors; adds a vale-ignore for 'PRs' in docs (7b5d85b). All CI green, approved by 2 reviewers. | |
| qwen/qwen3.8-27b |
Impact:
45
Quick Win:
23
Complexity:
40
Confidence:
85
Actionability:
85
|
needs review | Tightens minor version pins for craft libraries in pyproject.toml and updates uv.lock so hotfix-branch lockfile updates won't pull new minors; adds a vale-ignore for 'PRs' in docs. Approved, all CI green, last comment addressed in 7b5d85b. | |
| qwen/qwen3.8-27b |
Impact:
45
Quick Win:
23
Complexity:
30
Confidence:
82
Actionability:
72
|
needs review | Pins minor versions of core craft libraries in pyproject.toml and regenerates uv.lock so lockfile maintenance won't bump them; adds a Vale spelling ignore in docs. Approved, CI passing, 3 build checks pending. | |
| qwen/qwen3.8-27b |
Impact:
45
Quick Win:
19
Complexity:
35
Confidence:
80
Actionability:
65
|
needs review | Pins minor versions of core craft libraries in pyproject.toml and regenerates the lockfile so Renovate lockfile maintenance won't bump minors, enabling safe lockfile updates on hotfix branches. Adds a vale-ignore for 'PRs' in docs. Approved; one review thread addressed, CI pending. | |
| qwen/qwen3.8-27b |
Impact:
45
Quick Win:
27
Complexity:
30
Confidence:
80
Actionability:
85
|
needs review | Pins minor versions of core craft dependencies in pyproject.toml, regenerates uv.lock, and adds a vale-ignore for 'PRs' in docs. Approved by a reviewer; fast CI green, build/snap-builds jobs pending. | |
| qwen/qwen3.8-27b |
Impact:
40
Quick Win:
22
Complexity:
35
Confidence:
85
Actionability:
85
|
needs review | Pins minor versions of key dependencies in pyproject.toml and regenerates uv.lock so lockfile maintenance won't bump minor versions, enabling safe lockfile updates on hotfix branches. Approved, CI green except pending build check. | |
| qwen/qwen3.8-27b |
Impact:
45
Quick Win:
22
Complexity:
35
Confidence:
80
Actionability:
75
|
needs review | Locks minor versions of core craft libraries in pyproject.toml and regenerates uv.lock so lockfile maintenance won't bump minors, enabling safe hotfix-branch updates. Approved, CI green except two pending spread jobs; Vale spelling fix landed in 7b5d85b. | |
| qwen/qwen3.8-27b |
Impact:
45
Quick Win:
21
Complexity:
40
Confidence:
80
Actionability:
78
|
needs review | Pins minor versions of core craft libraries in pyproject.toml and regenerates uv.lock so lockfile updates won't bump them, enabling safe lockfile updates on hotfix branches; adds a Vale ignore for 'PRs' in docs. Approved, CI green, 3 spread jobs pending. | |
| qwen/qwen3.8-27b |
Impact:
40
Quick Win:
22
Complexity:
30
Confidence:
75
Actionability:
80
|
needs review | Pins minor versions of key craft libraries in pyproject.toml and regenerates uv.lock (+1194/-949, mostly lockfile churn) so lockfile maintenance won't bump minors on hotfix branches. CI green after Vale fix; awaiting review. | |
| qwen/qwen3.8-27b |
Impact:
45
Quick Win:
14
Complexity:
40
Confidence:
70
Actionability:
50
|
keep open | Pins minor versions of key dependencies in pyproject.toml and regenerates the uv lockfile (2 files, +1191/-946) to enable safe lockfile updates on hotfix branches. Most CI green; 3 spread boot tests and docs lint (vale 'PRs') failing; author actively fixing. | |
| qwen/qwen3.8-27b |
Impact:
25
Quick Win:
7
Complexity:
30
Confidence:
70
Actionability:
40
|
keep open | Tightens pyproject.toml specifiers to lock minor versions of craft libraries and regenerates uv.lock, so lockfile maintenance on hotfix branches won't bump them. All test jobs pass, but the lint/files CI check is failing and snap builds are pending. |
Update history
| Date | Change |
|---|---|
| merged | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #5699 build(deps): lock file maintenance (hotfix/8.11) | snapcraft | merged | Renovate refreshed all dependency locks for hotfix/8.11; PR #5699 merged as 8361c262d after two approvals and fully passing CI. | |
| #203 build(deps): lock file maintenance (main) | craft-platforms | merged | Merged PR #203 refreshed all lock files to their latest dependency versions in commit f8b0d75. | |
| #257 build(deps): lock file maintenance | craft-store | merged | Merged PR #257 into main as commit 2958c8c, refreshing all lock files to the latest dependency versions. | |
| #501 build(deps): lock file maintenance (main) | craft-cli | merged | Merged lock file maintenance PR generated by Renovate to update dependency versions. | |
| #452 build(deps): lock file maintenance | starbase | merged | Renovate lock file maintenance PR merged into main via squash commit 7f4485e; all lock files refreshed with 2 approvals and all CI checks (lint, fast/slow/minimum-deps tests, security scans) passing. | |
| #145 build(deps): lock file maintenance | imagecraft | merged | Renovate lock-file maintenance merged in PR #145 as commit 0d51327, refreshing one lock file with 9 additions and 9 deletions. | |
| #2079 build(deps): update dependencies in lock files | charmcraft | merged | Merged PR #2079 by lengau refreshed pinned dependency versions in three lock files (+42/-36, 3 files) via commit b164b99a; approved by two reviewers with no code changes. | |
| #123 build(deps): lock file maintenance (main) | starflow | merged | Renovate PR #123 was merged, refreshing all dependency lock files in commit 7927b84 after two approvals and with all CI checks passing. | |
| #860 build(deps): lock file maintenance (hotfix/5.7) | craft-application | closed | Closed unmerged after prolonged inactivity; the hotfix/5.7 lock refresh was not integrated. | |
| #780 build(deps): lock file maintenance (hotfix/5.2) | craft-application | closed | Renovate lock-file maintenance PR for hotfix/5.2 was closed unmerged; maintainer mr-cal directed it be brought into main via the 5.2.1 merge #781 (b309794f), and an equivalent refresh landed on main in #788 (1a6e59f3). |