Skip to content

Conversation

@cobaltt7
Copy link
Collaborator

@cobaltt7 cobaltt7 commented Feb 1, 2026

Description

A small followup to #4928 with a few more things I noticed since then

Notable changes:

  • Change Fuzz to run on schedule & on push instead of on PRs, and open an issue with failures
  • Add a post release workflow that adds a new changelog, and move the update-stable job to it
  • Pinned most dev/ci depedencies to a specific version, except for bigger projects with lots of updates
  • For runtime dependencies, I changed most >= to ~= to avoid bumping major versions
    I didn't change any ranges that already included multiple major versions
    No currently-released versions that were previously allowed are now disallowed
  • Update cibuildhweel in GHA and pyproject together
  • Use default dependabot update schedule
  • Rename skip news to ci: skip news for consistency with other CI labels
    (changelog action will fail on this PR until it's updated on the GH side)

Checklist - did you ...

  • [-] Implement any code style changes under the --preview style, following the stability policy?
  • [-] Add an entry in CHANGES.md if necessary?
  • [-] Add / update tests if necessary?
  • [y] Add new / update outdated documentation?

- Most dev/ci depedencies were pinned to a specific version, except for bigger projects with lots of updates.
- For runtime dependencies, I took care not to remove any versions from the range of supported versions. Wherever I could I changed `>=` to `~=` to avoid bumping major versions.
- Update cibuildhweel in GHA and pyproject together
- Use default update schedule
- Add maintenance label to GHA PRs

Signed-off-by: cobalt <61329810+cobaltt7@users.noreply.github.com>
Signed-off-by: cobalt <61329810+cobaltt7@users.noreply.github.com>
Signed-off-by: cobalt <61329810+cobaltt7@users.noreply.github.com>
Signed-off-by: cobalt <61329810+cobaltt7@users.noreply.github.com>
…pdate-stable job to it

Signed-off-by: cobalt <61329810+cobaltt7@users.noreply.github.com>
…abels

Signed-off-by: cobalt <61329810+cobaltt7@users.noreply.github.com>
@cobaltt7 cobaltt7 added the skip news Pull requests that don't need a changelog entry. label Feb 1, 2026
Signed-off-by: cobalt <61329810+cobaltt7@users.noreply.github.com>
@github-actions
Copy link

github-actions bot commented Feb 1, 2026

diff-shades results comparing this PR (bd33bfe) to main (8889e20):

--preview style: no changes

--stable style: no changes


What is this? | Workflow run | diff-shades documentation

dependencies = [
"click>=8.0.0",
"mypy_extensions>=0.4.3",
"click~=8.0",
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm strongly against these changes. In practice, major versions aren't an especially good indicator of when something will break. And when dealing with a large Python environment, unnecessary upper version constraints are often a pain to deal with because they restrict what packages can live in the same environment. I would only use upper bounds if we know that Black is incompatible with some version of a package.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip news Pull requests that don't need a changelog entry.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants