Conversation
There was a problem hiding this comment.
Pull request overview
This PR updates the project's dependency management configuration and CI workflows to use modern best practices with uv. The changes remove outdated PyPI index configuration, relocate permissions declarations, remove redundant CLI flags, and enhance Dependabot to manage both Python and GitHub Actions dependencies with grouped updates.
Key changes:
- Removed explicit PyPI index configuration from pyproject.toml
- Updated CI workflows to use astral-sh/setup-uv action and removed redundant uv CLI flags
- Enhanced Dependabot configuration with grouped updates and GitHub Actions ecosystem support
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| pyproject.toml | Removed redundant PyPI index configuration |
| .github/workflows/tests.yml | Relocated permissions block and removed --no-project flags from uv commands |
| .github/workflows/publish.yml | Replaced manual Python setup with astral-sh/setup-uv action and removed --build flag |
| .github/dependabot.yml | Added GitHub Actions ecosystem, grouped updates by severity, and removed open-pull-requests-limit |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| branches: ["master"] | ||
|
|
||
| permissions: | ||
| contents: read |
There was a problem hiding this comment.
Inconsistent indentation: the 'permissions' key uses 4 spaces of indentation while other top-level keys in the file use 0 spaces. This should be aligned with the file's indentation style (no indentation for top-level keys).
| contents: read | |
| contents: read |
No description provided.