OvertureMaps / OvertureMaps/schema
[CHORE](devops) Remove uv-lock-refresh.yml workaround once dependabot-core#14073 is fixed
Open
@lowlydba is already working on this.
Since Aug 19, 2026.
chore
- Dominant language
- Python
- Stars
- 213
- Forks
- 22
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 31
Description
.github/workflows/uv-lock-refresh.yml exists only because Dependabot's uv lockfile-only strategy does not refresh transitive-only entries in uv.lock (dependabot/dependabot-core#14073). The scheduled uv lock --upgrade job fills that gap.
When dependabot/dependabot-core#14073 is fixed and Dependabot refreshes transitive deps under lockfile-only, remove the workaround:
- Delete
.github/workflows/uv-lock-refresh.yml. - Confirm Dependabot's uv PRs then bump transitive-only entries in uv.lock, still without touching any pyproject.toml.
The workaround and the lockfile-only setting were introduced in #613.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.