diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 49ce021..3eac6d1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -15,7 +15,7 @@ updates: - "minor" - "patch" # The `all` extra must remain jointly resolvable. These candidates violate - # upstream constraints: TrustMark still requires NumPy 1.x, OpenCV 4.13+ + # upstream constraints: TrustMark still requires NumPy 1.x, OpenCV 4.12+ # requires NumPy 2 on newer Python versions, and this project keeps tokenizers # below 0.23 for the stable Transformers path. Keep Dependabot on the # compatible lines until those constraints move. @@ -25,7 +25,7 @@ updates: - ">=2" - dependency-name: "opencv-python-headless" versions: - - ">=4.13" + - ">=4.12" - dependency-name: "tokenizers" versions: - ">=0.23" diff --git a/tests/test_dependabot.py b/tests/test_dependabot.py index 3524f03..041da9a 100644 --- a/tests/test_dependabot.py +++ b/tests/test_dependabot.py @@ -7,5 +7,5 @@ def test_dependabot_blocks_opencv_releases_that_require_numpy_2() -> None: config = Path(".github/dependabot.yml").read_text() opencv_ignore = config.split('dependency-name: "opencv-python-headless"', maxsplit=1)[1] - assert '"<4.13"' not in opencv_ignore - assert '- ">=4.13"' in opencv_ignore + assert '"<4.12"' not in opencv_ignore + assert '- ">=4.12"' in opencv_ignore