rusackas commented on PR #40186: URL: https://github.com/apache/superset/pull/40186#issuecomment-4503322500
@villebro — addressed both halves of the feedback: **This PR** (commit 95b24417 pushed directly to dependabot's branch): - Bumped lower bound: `sqlglot>=28.10.0, <31` → `sqlglot>=30.8.0, <31` in `pyproject.toml`. - Also bumped `superset-core/pyproject.toml` (was at `<29` and blocked uv resolution against the wider range). - Regenerated `requirements/base.txt` and `requirements/development.txt` via `./scripts/uv-pip-compile.sh`. Both now pin `sqlglot==30.8.0`. **For future bumps** — opened #40308 setting `versioning-strategy: increase` on the pip ecosystem in `.github/dependabot.yml`. That makes dependabot bump both bounds together going forward, instead of just widening the upper bound. (Lockfile regen on dependabot PRs is still a manual step — uv-pip-compile isn't something dependabot can run on its own, and that's a bigger problem to solve separately.) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
