Skip to content

Pinning the codespell version is great, but auto-updates and follow-up releases would be needed to not keep users in the pastΒ #107

Closed

Description

@hartwork

Hi! πŸ‘‹

Commit 710c0e8 started pinning the version of codespell being installed, which is great for robustness and security πŸ‘ πŸ‘ However it keeps users in the past β€” currently missing out on improvements from codespell 2.4.3 β€” unless the pin is being follow-up by…

  • making GitHub Dependabot send pull requests for requirements.txt and
  • creating new releases of the action after merging the PyPI bump.

Thanks for your consideration! πŸ™

CC @LotemKahana @yarikoptic

Activity

  1. larsoner commented on Sep 3, 2026

    @larsoner
    Member

    Agreed, would you be up for a quick PR to make Dependabot run at least?

  2. hartwork commented on Sep 3, 2026

    @hartwork
    ContributorAuthor

    @larsoner yes, coming up…

  3. hartwork commented on Sep 3, 2026

    @hartwork
    ContributorAuthor

    Here you go: #108 🍻

  4. larsoner commented on Sep 3, 2026

    @larsoner
    Member

    Okay release cut... that'll still be manual but this is at least some progress

  5. hartwork commented on Sep 3, 2026

    @hartwork
    ContributorAuthor

    @larsoner very cool, thanks for the release and the quick reaction! PS: Maybe it doesn't need full-blown auto-release automation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions