Skip to content

ci: stop dependabot updates targeting support/v2 - #4136

Merged
d-v-b merged 15 commits into
zarr-developers:mainfrom
d-v-b:claude/hungry-almeida-0b59ea
Jul 9, 2026
Merged

ci: stop dependabot updates targeting support/v2#4136
d-v-b merged 15 commits into
zarr-developers:mainfrom
d-v-b:claude/hungry-almeida-0b59ea

Conversation

@d-v-b

@d-v-bd-v-b commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

🤖 AI text below 🤖

Removes the target-branch: support/v2 entry from .github/dependabot.yml, so dependabot stops opening weekly github-actions bump PRs against support/v2 (most recently #4134).

Those PRs can never go green: support/v2 CI fails for reasons unrelated to the actions bumps — the identical job set failed on the previous bump PR #4098 two weeks earlier. Specifically:

  • test_encode_decode_array_datetime_timedelta fails under numpy 2.5.1, which escalates the new "'generic' unit for NumPy timedelta is deprecated" DeprecationWarning to an error (fails minimum_build, latest-deps, and all Linux build jobs; the numpy==1.24.* job is only canceled by fail-fast).
  • Windows jobs fail all TestArrayWithABSStore tests with ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] against the Azure Blob emulator.
  • The Read the Docs build fails independently.

Since support/v2 is in maintenance and nobody is going to fix its CI for the sake of actions bumps, the dependabot PRs are pure noise. Dependabot reads its config from the default branch only, so this change on main is sufficient; #4134 should be closed manually (it won't be recreated once this lands).

🤖 Generated with Claude Code

dependabotBotand others added 14 commits May 31, 2026 19:28
…#176)
Bumps the actions group with 8 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi) | `0.9.5` | `0.9.6` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `6.0.0` | `6.0.1` |
| [github/issue-metrics](https://github.com/github/issue-metrics) | `4.2.2` | `4.2.7` |
| [j178/prek-action](https://github.com/j178/prek-action) | `2.0.3` | `2.0.4` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `7.0.0` | `8.0.1` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.13.0` | `1.14.0` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.3` | `0.5.6` |
Updates `prefix-dev/setup-pixi` from 0.9.5 to 0.9.6
- [Release notes](https://github.com/prefix-dev/setup-pixi/releases)
- [Commits](prefix-dev/setup-pixi@1b2de7f...5185adf)
Updates `codecov/codecov-action` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@57e3a13...e79a696)
Updates `github/issue-metrics` from 4.2.2 to 4.2.7
- [Release notes](https://github.com/github/issue-metrics/releases)
- [Commits](github-community-projects/issue-metrics@c9e9838...1e38d5e)
Updates `j178/prek-action` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/j178/prek-action/releases)
- [Commits](j178/prek-action@6ad8027...bdca6f1)
Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v7...043fb46)
Updates `actions/download-artifact` from 7.0.0 to 8.0.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v7...3e5f45b)
Updates `pypa/gh-action-pypi-publish` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.13.0...cef2210)
Updates `zizmorcore/zizmor-action` from 0.5.3 to 0.5.6
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@b1d7e1f...5f14fd0)
---
updated-dependencies:
- dependency-name: prefix-dev/setup-pixi
dependency-version: 0.9.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: codecov/codecov-action
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: github/issue-metrics
dependency-version: 4.2.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: j178/prek-action
dependency-version: 2.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/download-artifact
dependency-version: 8.0.1
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: pypa/gh-action-pypi-publish
dependency-version: 1.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.5.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The support/v2 branch's CI is failing for reasons unrelated to actions
bumps (numpy 2.5 deprecation, Windows azurite SSL errors, RTD build),
so the weekly dependabot PRs against it are pure noise. Remove the
target-branch entry so dependabot only tracks main.
Assisted-by: ClaudeCode:claude-fable-5
@github-actionsgithub-actionsBot added the needs release notes Automatically applied to PRs which haven't added release notes label Jul 9, 2026
@d-v-b

d-v-b commented Jul 9, 2026

Copy link
Copy Markdown
ContributorAuthor

internal cleanup, going to self-merge

@d-v-b
d-v-b merged commit 434c7fb into zarr-developers:mainJul 9, 2026
29 checks passed
@d-v-b
d-v-b deleted the claude/hungry-almeida-0b59ea branch July 9, 2026 06:48
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs release notesAutomatically applied to PRs which haven't added release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@d-v-b