Skip to content

Consolidate and update dependency and CI packages#5260

Open
nllong wants to merge 2 commits into
developfrom
consolidate-deps-ci-prs
Open

Consolidate and update dependency and CI packages#5260
nllong wants to merge 2 commits into
developfrom
consolidate-deps-ci-prs

Conversation

@nllong

@nllong nllong commented Jul 7, 2026

Copy link
Copy Markdown
Member

Any background context you want to provide?

Combine multiple PRs with deps and CI updates.

@nllong nllong added Maintenance Tag as maintenance if the issue relates to general cleanup, maintenance, etc. Do not delete label. dependencies Pull requests that update a dependency file labels Jul 7, 2026
@nllong nllong changed the title deps: consolidate dependency and CI updates Consolidate and update dependency and CI packages Jul 7, 2026
@nllong nllong requested a review from Copilot July 7, 2026 13:21

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR consolidates routine dependency and CI maintenance by updating pinned Python packages (and regenerating uv.lock), refreshing GitHub Actions versions used in CI/publish workflows, and adjusting the ECS Docker build’s Node install behavior.

Changes:

  • Bump multiple Python dependencies and dev tools (e.g., boto3/botocore, pytest, coverage, sentry-sdk, django-debug-toolbar) and update uv.lock accordingly.
  • Update GitHub Actions used in CI/publish workflows (checkout and cache major versions).
  • Change the ECS Docker image build to run pnpm install with --ignore-scripts during the Angular build phase.

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
uv.lock Updates the locked Python dependency set to the newly bumped versions.
pyproject.toml Updates pinned Python dependency versions to match the lockfile refresh.
Dockerfile.ecs Changes pnpm install flags used before building the Angular submodule during image build.
.github/workflows/publish.yml Updates actions/checkout and actions/cache versions for publish workflow steps.
.github/workflows/ci.yml Updates actions/checkout and actions/cache versions for CI jobs and includes a minor formatting-only change.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread Dockerfile.ecs
Comment on lines +78 to 80
RUN pnpm install --frozen-lockfile --ignore-scripts && \
pnpm -C /seed/ng_seed/seed-angular build && \
pnpm install --prod --frozen-lockfile --ignore-scripts && \
@nllong nllong requested a review from kflemin July 7, 2026 17:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file Maintenance Tag as maintenance if the issue relates to general cleanup, maintenance, etc. Do not delete label.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants