From 593568139616cffba586417bcd164c55e05217ee Mon Sep 17 00:00:00 2001 From: Ashley Childress <6563688+anchildress1@users.noreply.github.com> Date: Mon, 23 Feb 2026 18:47:00 -0500 Subject: [PATCH 1/5] fix(deps): use chore type for uv dependency commits Replace non-standard deps/deps-dev prefixes with chore so dependabot produces valid conventional commits: chore(deps): and chore(deps-dev): Co-Authored-By: Claude Sonnet 4.6 --- .github/dependabot.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b6d940e..e77acbc 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -12,8 +12,7 @@ updates: assignees: - "anchildress1" commit-message: - prefix: "deps" - prefix-development: "deps-dev" + prefix: "chore" include: "scope" # Enable version updates for GitHub Actions From 87ad95627f63576c2f0b7626095013aa43407bb3 Mon Sep 17 00:00:00 2001 From: Ashley Childress <6563688+anchildress1@users.noreply.github.com> Date: Mon, 23 Feb 2026 18:47:24 -0500 Subject: [PATCH 2/5] fix(ci): regenerate lock before install to handle stale lockfile Run uv lock before make install so the lockfile is always consistent with pyproject.toml, preventing --locked failures on dependabot PRs. Also removes the redundant direct uv sync that duplicated make install. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/security-ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security-ci.yml b/.github/workflows/security-ci.yml index 228fdfe..216b43e 100644 --- a/.github/workflows/security-ci.yml +++ b/.github/workflows/security-ci.yml @@ -32,7 +32,7 @@ jobs: - name: Install dependencies run: | echo "## 🔧 Installing dependencies" >> "$GITHUB_STEP_SUMMARY" - uv sync --locked --group dev + uv lock make install echo "✅ Dependencies installed" >> "$GITHUB_STEP_SUMMARY" From ee1aff160f254a1136a5871bf3e7321bf4b3492b Mon Sep 17 00:00:00 2001 From: Ashley Childress <6563688+anchildress1@users.noreply.github.com> Date: Mon, 23 Feb 2026 18:47:52 -0500 Subject: [PATCH 3/5] fix(release): switch to simple mode to remove component naming MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The packages/manifest setup forces monorepo component semantics even for a single package. Switch to simple (non-manifest) mode — version tracking continues from the existing v1.0.0 tag. The manifest file is no longer referenced and can be ignored. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/release-please.yml | 1 - release-please-config.json | 16 +++++----------- 2 files changed, 5 insertions(+), 12 deletions(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 92613d0..411efa6 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -26,4 +26,3 @@ jobs: with: token: ${{ secrets.MY_RELEASE_PLEASE_TOKEN }} config-file: release-please-config.json - manifest-file: .release-please-manifest.json diff --git a/release-please-config.json b/release-please-config.json index e8c853e..83a8615 100644 --- a/release-please-config.json +++ b/release-please-config.json @@ -1,14 +1,8 @@ { "release-type": "python", - "include-component-in-tag": false, - "packages": { - ".": { - "release-type": "python", - "package-name": "devto-mirror", - "extra-files": [ - "pyproject.toml", - "src/devto_mirror/__init__.py" - ] - } - } + "package-name": "devto-mirror", + "extra-files": [ + "pyproject.toml", + "src/devto_mirror/__init__.py" + ] } From 70befbdc0779590723ce55af1903333dbb22c899 Mon Sep 17 00:00:00 2001 From: Ashley Childress <6563688+anchildress1@users.noreply.github.com> Date: Mon, 23 Feb 2026 19:33:23 -0500 Subject: [PATCH 4/5] fix(specify): use return instead of exit in shell functions Replace exit with return in cleanup() and main() so all functions have explicit return statements, satisfying Sonar rule S6596. Co-Authored-By: Claude Sonnet 4.6 --- .specify/scripts/bash/update-agent-context.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.specify/scripts/bash/update-agent-context.sh b/.specify/scripts/bash/update-agent-context.sh index f4df776..aed6882 100755 --- a/.specify/scripts/bash/update-agent-context.sh +++ b/.specify/scripts/bash/update-agent-context.sh @@ -117,7 +117,7 @@ cleanup() { local exit_code=$? rm -f /tmp/agent_update_*_$$ rm -f /tmp/manual_additions_$$ - exit $exit_code + return $exit_code } # Set up cleanup trap @@ -745,10 +745,10 @@ main() { if [[ "$success" == true ]]; then log_success "Agent context update completed successfully" - exit 0 + return 0 else log_error "Agent context update completed with errors" - exit 1 + return 1 fi } From b1483bb3ee24ab46afb60f47be7ae7e4b9bdc928 Mon Sep 17 00:00:00 2001 From: Ashley Childress <6563688+anchildress1@users.noreply.github.com> Date: Mon, 23 Feb 2026 19:37:05 -0500 Subject: [PATCH 5/5] fix(release): move include-component-in-tag into package config The setting was at the top level but only takes effect per-package in manifest mode. Keep manifest-file explicit and packages structure intact. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/release-please.yml | 1 + release-please-config.json | 17 +++++++++++------ 2 files changed, 12 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 411efa6..92613d0 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -26,3 +26,4 @@ jobs: with: token: ${{ secrets.MY_RELEASE_PLEASE_TOKEN }} config-file: release-please-config.json + manifest-file: .release-please-manifest.json diff --git a/release-please-config.json b/release-please-config.json index 83a8615..7eab1f8 100644 --- a/release-please-config.json +++ b/release-please-config.json @@ -1,8 +1,13 @@ { - "release-type": "python", - "package-name": "devto-mirror", - "extra-files": [ - "pyproject.toml", - "src/devto_mirror/__init__.py" - ] + "packages": { + ".": { + "release-type": "python", + "package-name": "devto-mirror", + "include-component-in-tag": false, + "extra-files": [ + "pyproject.toml", + "src/devto_mirror/__init__.py" + ] + } + } }