Skip to content

Preserve historical mypy pins and raise supported floor - #10

Open
dependabot[bot] wants to merge 3 commits into
masterfrom
dependabot/pip/mypy-gte-1.20.2-and-lt-2.0
Open

dependabot[bot] wants to merge 3 commits into
masterfrom
dependabot/pip/mypy-gte-1.20.2-and-lt-2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026 •

Copy link
Copy Markdown
Contributor

Raise the supported mypy minimum to 1.20.2 while retaining <2.0. Restore the dated Windows CPU snapshot's mypy 1.20.2 pin, allowing its reproduction commands to remain satisfiable.

Source readback confirms a one-line requirements.txt diff against current master and exact original bytes for both dated constraint/environment files. No installed environment or scientific acceptance is changed. Current-head CI is required before merge.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 24, 2026
@dependabot
dependabot Bot requested a review from OptimumAF as a code owner April 24, 2026 03:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 24, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Reviewed the single dependency/action change. Please refresh against current master, preserving current requirements and immutable dated experiment constraints. Existing green checks predate the five-job platform/CPU CI; refreshed checks are needed before merge.

Bumps [mypy](https://github.com/python/mypy) from 1.20.2 to 2.4.0.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.20.2...v2.4.0)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 1.20.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Update mypy requirement from <2.0,>=1.10 to >=1.20.2,<2.0 Bump mypy from 1.20.2 to 2.4.0 Oct 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/mypy-gte-1.20.2-and-lt-2.0 branch from 6f2b50a to 8e763af Compare October 6, 2026 23:53

@OptimumAF OptimumAF left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The refreshed diff rewrites recorded mypy==1.20.2 to 2.4.0 in constraints/windows-cpu-py314-2026-10-06.txt and replaces the supported <2.0 range with >=2.4.0,<3.0. That major-version change needs separate compatibility justification.

This dated snapshot records an existing experiment environment. docs/dependency-reproducibility.md explicitly requires keeping such constraints immutable, retaining original versions and provenance, and adding a separately dated snapshot for a new environment. Restore the original constraints file byte-for-byte; do not relabel historical environments. Keep this PR scoped to justified development requirements, then run current-base CI. Green checks would not cure an overwritten evidence record.

@OptimumAF OptimumAF changed the title Bump mypy from 1.20.2 to 2.4.0 Preserve historical mypy pins and raise supported floor Oct 7, 2026

@OptimumAF OptimumAF left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed exact repaired head a36b5d1 after all five current-head CI jobs and security check succeeded. This resolves my prior requested change: requirements.txt only raises the supported mypy floor to >=1.20.2,<2.0, preserving the supported major-version ceiling. Original dated constraints blob063f067f0115ff22f1f5dc5039bb35b47ee76674 and environment blob37913942414f50e97766f4ece6cf5fa816612fad are unchanged; recorded mypy1.20.2 remains reproducible. All other requirements and scientific/prospective authority gates remain unchanged. This approval does not bypass repository protection.

Retain the merged NumPy floor and Python 3.11 ceiling while preserving the mypy >=1.20.2,<2.0 repair. Keep dated environment blobs and all scientific source unchanged. Ordinary branch refresh; current-head CI and repository protection remain required.
@dependabot @github

dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of mypy exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant