mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
Two bots bumped the one baudolo version independently. The pip pin updater rewrites the literal package_name pin in roles/svc-bkp-volume-2-local/tasks/01_install.yml and opens a PR scoped to roles/<entry>/, and dependabot bumps the same package in pyproject.toml. Each PR alone splits the pins that tests/lint/repository/dependencies/test_baudolo_pin.py holds equal; #995 merged such a split and turned main's test-lint red until #996, and the next upstream release (7.1.2 is tagged) would repeat it. The version lookup now takes an optional distribution name and returns its exact == pin from [project.dependencies]. The install task asks it for backup-docker-to-local, so pyproject.toml is the only place the version lives, dependabot is the only bot that moves it, and the pip updater no longer finds a literal to bump. The lint now forbids a literal pin in the task and requires the lookup. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Dependencies Lint 📦
Python packaging and dependency-reference rules: pyproject.toml requirement coverage, ban on stale requirements/NNN-… numbers in code, the deprecated-pkgmgr warning, and Galaxy/git parity of the Ansible collection requirements (suppression rule key galaxy-git-parity).
Tests in this directory MUST only cover dependency declarations and requirement cross-references. Other Python source patterns MUST live under python/.
For framework and make test-lint usage see lint.md.