Since #566 (#565), uv.lock, GitHub Workflows, Manifest.toml, and .pre-commit-config.yaml (#592) are upgraded through Dependabot. This works well for some repositories that have committed uv.lock files (e.g. RUB-EP1/lite#13), but for many repositories with larger uv.lock files, Dependabot crashes without a clear cause. See e.g.:
For public repositories, pre-commit.ci eventually triggers the lock upgrade (e.g. ComPWA/qrules#330), but this does not work in private repositories (see this crash). This is a problem, since #566 has completely replaced the upgrade trigger from private repositories by Dependabot.
Two points:
Since #566 (#565),
uv.lock, GitHub Workflows,Manifest.toml, and.pre-commit-config.yaml(#592) are upgraded through Dependabot. This works well for some repositories that have committeduv.lockfiles (e.g. RUB-EP1/lite#13), but for many repositories with largeruv.lockfiles, Dependabot crashes without a clear cause. See e.g.:For public repositories, pre-commit.ci eventually triggers the lock upgrade (e.g. ComPWA/qrules#330), but this does not work in private repositories (see this crash). This is a problem, since #566 has completely replaced the upgrade trigger from private repositories by Dependabot.
Two points: