Merge branch 'main' of https://github.com/connectrpc/connect-python into renovate/lock-file-maintenance-python-dependencies

anuraaga · anuraaga · commit dea19a3756ea · 2026-04-06T11:49:31.000+09:00
diff --git a/.github/workflows/add-to-project.yaml b/.github/workflows/add-to-project.yaml
@@ -20,5 +20,5 @@ permissions: {}
 jobs:
   call-workflow-add-to-project:
     name: Call workflow to add issue to project
-    uses: connectrpc/base-workflows/.github/workflows/add-to-project.yaml@main
+    uses: connectrpc/base-workflows/.github/workflows/add-to-project.yaml@2c9b8323e8bc69bf296e283f13fcae22f3aa6a60 # main
     secrets: inherit
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -58,7 +58,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+      - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
         with:
           python-version: ${{ matrix.python }}
 
@@ -101,7 +101,7 @@ jobs:
         env:
           BUF_TOKEN: ${{ secrets.BUF_TOKEN }}
 
-      - uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
+      - uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
         if: ${{ matrix.coverage == 'cov' }}
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
@@ -112,7 +112,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+      - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
 
       - run: uv sync --frozen
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -30,12 +30,12 @@ jobs:
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
+      uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
+      uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
@@ -31,11 +31,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
-
-      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+      - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
 
       - run: uv run --group docs --no-dev zensical build --clean
 
@@ -44,6 +40,6 @@ jobs:
         with:
           path: site
 
-      - uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
+      - uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
         if: github.event_name != 'pull_request'
         id: deployment
diff --git a/.github/workflows/pr-title.yaml b/.github/workflows/pr-title.yaml
@@ -15,4 +15,4 @@ on:
       - synchronize
 jobs:
   lint:
-    uses: bufbuild/base-workflows/.github/workflows/pr-title.yaml@main
+    uses: bufbuild/base-workflows/.github/workflows/pr-title.yaml@7be6b0f6700ab0c62145c2b4ca2efd103bfc4895 # main
diff --git a/.github/workflows/release-otel.yaml b/.github/workflows/release-otel.yaml
@@ -17,7 +17,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+      - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
 
       - run: uv sync --frozen
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -17,7 +17,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+      - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
 
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
diff --git a/conformance/test/gen/connectrpc/conformance/v1/service_connect.py b/conformance/test/gen/connectrpc/conformance/v1/service_connect.py
@@ -1,5 +1,6 @@
 # Generated by https://github.com/connectrpc/connect-python.  DO NOT EDIT!
 # source: connectrpc/conformance/v1/service.proto
+
 from __future__ import annotations
 
 from typing import TYPE_CHECKING, Protocol
diff --git a/connectrpc-otel/pyproject.toml b/connectrpc-otel/pyproject.toml
@@ -63,10 +63,6 @@ dev = [
   # a transitive dependency, so we go ahead and leave it out.
   "connectrpc>=0.8.0",
 
-  "opentelemetry-instrumentation-asgi==0.61b0",
-  "opentelemetry-instrumentation-wsgi==0.61b0",
-  "opentelemetry-sdk==1.40.0",
-
   "connect-python-example",
   "pytest",
 ]
diff --git a/example/example/eliza_connect.py b/example/example/eliza_connect.py
@@ -1,5 +1,6 @@
 # Generated by https://github.com/connectrpc/connect-python.  DO NOT EDIT!
 # source: example/eliza.proto
+
 from __future__ import annotations
 
 from typing import TYPE_CHECKING, Protocol
diff --git a/pyproject.toml b/pyproject.toml
@@ -45,26 +45,37 @@ dev = [
   "connect-python-example",
   "daphne==4.2.1",
   "granian==2.7.2",
-  "grpcio-tools==1.78.0",
-  "gunicorn==25.1.0",
+  "grpcio-tools==1.80.0",
+  "gunicorn==25.3.0",
   "hypercorn==0.18.0",
-  "just-bin==1.47.1; sys_platform != 'win32'",
+  "just-bin==1.48.1; sys_platform != 'win32'",
   "pyright[nodejs]==1.1.408",
   "pyvoy==0.3.0",
-  "ruff~=0.15.0",
-  "tombi==0.9.9",
+  "ruff==0.15.9",
+  "tombi==0.9.14",
   "typing_extensions==4.15.0",
-  "uvicorn==0.42.0",
+  "uvicorn==0.43.0",
   "zstandard==0.25.0",
 
+  # dev dependencies only used in subprojects. Optimal structure would include these
+  # in the subproject itself, but then `uv sync` does not install them from the
+  # workspace root. We strategically keep them here instead so the entire workspace
+  # is ready for editing in an IDE with a simple sync command.
+  # If the below issue is resolved, we can move them back to subprojects and configure
+  # our default sync setting as --all-packages.
+  # https://github.com/astral-sh/uv/issues/5737
+  "opentelemetry-instrumentation-asgi==0.61b0",
+  "opentelemetry-instrumentation-wsgi==0.61b0",
+  "opentelemetry-sdk==1.40.0",
+
   # Versions locked in constraint-dependencies
   "pytest",
   "pytest-asyncio",
   "pytest-cov",
   "pytest-timeout",
 ]
 
-docs = ["mkdocstrings-python==2.0.3", "zensical==0.0.28"]
+docs = ["mkdocstrings-python==2.0.3", "zensical==0.0.31"]
 
 [build-system]
 requires = ["uv_build>=0.11.0,<0.12.0"]
diff --git a/test/haberdasher_connect.py b/test/haberdasher_connect.py
@@ -1,5 +1,6 @@
 # Generated by https://github.com/connectrpc/connect-python.  DO NOT EDIT!
 # source: haberdasher.proto
+
 from __future__ import annotations
 
 from typing import TYPE_CHECKING, Protocol
diff --git a/uv.lock b/uv.lock
