mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
Two bots bumped the one baudolo version independently. The pip pin updater rewrites the literal package_name pin in roles/svc-bkp-volume-2-local/tasks/01_install.yml and opens a PR scoped to roles/<entry>/, and dependabot bumps the same package in pyproject.toml. Each PR alone splits the pins that tests/lint/repository/dependencies/test_baudolo_pin.py holds equal; #995 merged such a split and turned main's test-lint red until #996, and the next upstream release (7.1.2 is tagged) would repeat it. The version lookup now takes an optional distribution name and returns its exact == pin from [project.dependencies]. The install task asks it for backup-docker-to-local, so pyproject.toml is the only place the version lives, dependabot is the only bot that moves it, and the pip updater no longer finds a literal to bump. The lint now forbids a literal pin in the task and requires the lookup. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>