From 931b65598611e29341fdfc6849a30df7ff5c3682 Mon Sep 17 00:00:00 2001 From: Ali Sedaghatbaf Date: Thu, 23 Jul 2026 08:44:10 +0200 Subject: [PATCH 1/6] Add renovate config --- .github/renovate.json | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/renovate.json diff --git a/.github/renovate.json b/.github/renovate.json new file mode 100644 index 000000000..5532206ae --- /dev/null +++ b/.github/renovate.json @@ -0,0 +1,21 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "config:recommended" + ], + "enabledManagers": ["github-actions"], + "schedule": ["before 9am on monday"], + "lockFileMaintenance": { + "enabled": true, + "schedule": ["before 9am on monday"] + }, + "packageRules": [ + { + "matchManagers": ["github-actions"], + "pinDigests": true, + "automerge": true, + "minimumReleaseAge": "3 days", + "labels": ["dependencies", "github-actions"] + } + ] +} From 24c4434ade23cae9570bf1e1ca77b8d594834257 Mon Sep 17 00:00:00 2001 From: Ali Sedaghatbaf Date: Thu, 23 Jul 2026 08:58:20 +0200 Subject: [PATCH 2/6] Pin workflows to SHAs --- .github/workflows/major-release.yaml | 8 ++++---- .github/workflows/minor-release.yaml | 8 ++++---- .github/workflows/patch-release.yaml | 8 ++++---- .github/workflows/pr-e2e-tests.yaml | 8 ++++---- .github/workflows/pr.yaml | 8 ++++---- .github/workflows/pre-release.yaml | 8 ++++---- .github/workflows/premajor-release.yaml | 8 ++++---- .github/workflows/publish.yaml | 10 +++++----- .github/workflows/scheduled-e2e-tests.yaml | 8 ++++---- 9 files changed, 37 insertions(+), 37 deletions(-) diff --git a/.github/workflows/major-release.yaml b/.github/workflows/major-release.yaml index 03c74fa68..6e881c8bb 100644 --- a/.github/workflows/major-release.yaml +++ b/.github/workflows/major-release.yaml @@ -9,16 +9,16 @@ jobs: version: ${{ steps.get-version.outputs.version }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: token: ${{ secrets.GIT_PUSH_PAT }} - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5 with: python-version: '3.13' - name: Set up uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3 - name: Bump version run: uv version --bump major --frozen @@ -32,7 +32,7 @@ jobs: - name: Update CHANGELOG.md (cross platform supported) run: | sed -i.bak -e 's/## Next/## Next\n\n## ${{ steps.get-version.outputs.version }}/' CHANGELOG.md && rm CHANGELOG.md.bak - - uses: EndBug/add-and-commit@v9 + - uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9 with: author_name: 'Neo4j-GraphRAG GitHub Action' author_email: 'team-gen-ai@neo4j.com' diff --git a/.github/workflows/minor-release.yaml b/.github/workflows/minor-release.yaml index 05a95a245..453dafc6e 100644 --- a/.github/workflows/minor-release.yaml +++ b/.github/workflows/minor-release.yaml @@ -9,16 +9,16 @@ jobs: version: ${{ steps.get-version.outputs.version }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: token: ${{ secrets.GIT_PUSH_PAT }} - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5 with: python-version: '3.13' - name: Set up uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3 - name: Bump version run: uv version --bump minor --frozen @@ -32,7 +32,7 @@ jobs: - name: Update CHANGELOG.md (cross platform supported) run: | sed -i.bak -e 's/## Next/## Next\n\n## ${{ steps.get-version.outputs.version }}/' CHANGELOG.md && rm CHANGELOG.md.bak - - uses: EndBug/add-and-commit@v9 + - uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9 with: author_name: 'Neo4j-GraphRAG GitHub Action' author_email: 'team-gen-ai@neo4j.com' diff --git a/.github/workflows/patch-release.yaml b/.github/workflows/patch-release.yaml index f25abb94c..69264c81d 100644 --- a/.github/workflows/patch-release.yaml +++ b/.github/workflows/patch-release.yaml @@ -9,16 +9,16 @@ jobs: version: ${{ steps.get-version.outputs.version }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: token: ${{ secrets.GIT_PUSH_PAT }} - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5 with: python-version: '3.13' - name: Set up uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3 - name: Bump version run: uv version --bump patch --frozen @@ -32,7 +32,7 @@ jobs: - name: Update CHANGELOG.md (cross platform supported) run: | sed -i.bak -e 's/## Next/## Next\n\n## ${{ steps.get-version.outputs.version }}/' CHANGELOG.md && rm CHANGELOG.md.bak - - uses: EndBug/add-and-commit@v9 + - uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9 with: author_name: 'Neo4j-GraphRAG GitHub Action' author_email: 'team-gen-ai@neo4j.com' diff --git a/.github/workflows/pr-e2e-tests.yaml b/.github/workflows/pr-e2e-tests.yaml index a1476d98f..4b9e98989 100644 --- a/.github/workflows/pr-e2e-tests.yaml +++ b/.github/workflows/pr-e2e-tests.yaml @@ -21,7 +21,7 @@ jobs: - 'latest' steps: - name: Check out repository code - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free up disk space (ubuntu-latest) run: | sudo rm -rf /usr/local/lib/android \ @@ -84,14 +84,14 @@ jobs: -p 6333:6333 \ qdrant/qdrant - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5 with: python-version: ${{ matrix.python-version }} - name: Set up uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3 - name: Load cached venv id: cached-venv - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: .venv key: ${{ runner.os }}-venv-${{ matrix.python-version }}-${{ hashFiles('**/uv.lock') }} diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index a3d0770e7..d6d3fb16b 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -17,16 +17,16 @@ jobs: sudo apt-get clean || true df -h - name: Check out repository code - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5 with: python-version: ${{ matrix.python-version }} - name: Set up uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3 - name: Load cached venv id: cached-venv - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: .venv key: venv-${{ runner.os }}-${{ matrix.python-version }}-${{ hashFiles('**/uv.lock') }} diff --git a/.github/workflows/pre-release.yaml b/.github/workflows/pre-release.yaml index 5fdc738a7..57c32c1f8 100644 --- a/.github/workflows/pre-release.yaml +++ b/.github/workflows/pre-release.yaml @@ -9,16 +9,16 @@ jobs: version: ${{ steps.get-version.outputs.version }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: token: ${{ secrets.GIT_PUSH_PAT }} - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5 with: python-version: '3.13' - name: Set up uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3 - name: Bump version run: uv version --bump alpha --frozen @@ -32,7 +32,7 @@ jobs: - name: Update CHANGELOG.md (cross platform supported) run: | sed -i.bak -e 's/## Next/## Next\n\n## ${{ steps.get-version.outputs.version }}/' CHANGELOG.md && rm CHANGELOG.md.bak - - uses: EndBug/add-and-commit@v9 + - uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9 with: author_name: 'Neo4j-GraphRAG GitHub Action' author_email: 'team-gen-ai@neo4j.com' diff --git a/.github/workflows/premajor-release.yaml b/.github/workflows/premajor-release.yaml index c148e72a6..10b067a93 100644 --- a/.github/workflows/premajor-release.yaml +++ b/.github/workflows/premajor-release.yaml @@ -9,16 +9,16 @@ jobs: version: ${{ steps.get-version.outputs.version }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: token: ${{ secrets.GIT_PUSH_PAT }} - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5 with: python-version: '3.13' - name: Set up uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3 - name: Bump version run: uv version --bump major --bump alpha --frozen @@ -32,7 +32,7 @@ jobs: - name: Update CHANGELOG.md (cross platform supported) run: | sed -i.bak -e 's/## Next/## Next\n\n## ${{ steps.get-version.outputs.version }}/' CHANGELOG.md && rm CHANGELOG.md.bak - - uses: EndBug/add-and-commit@v9 + - uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9 with: author_name: 'Neo4j-GraphRAG GitHub Action' author_email: 'team-gen-ai@neo4j.com' diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 19cfe8108..385b5349e 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -8,9 +8,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5 with: python-version: "3.10" - name: Install pypa/build @@ -22,7 +22,7 @@ jobs: - name: Build a binary wheel and a source tarball run: python3 -m build - name: Store the distribution packages - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: python-package-distributions path: dist/ @@ -40,9 +40,9 @@ jobs: id-token: write steps: - name: Download all the dists - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: python-package-distributions path: dist/ - name: Publish distribution 📦 to PyPI - uses: pypa/gh-action-pypi-publish@release/v1 + uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # release/v1 diff --git a/.github/workflows/scheduled-e2e-tests.yaml b/.github/workflows/scheduled-e2e-tests.yaml index ac2a78502..ef123910f 100644 --- a/.github/workflows/scheduled-e2e-tests.yaml +++ b/.github/workflows/scheduled-e2e-tests.yaml @@ -24,7 +24,7 @@ jobs: - 'latest' steps: - name: Check out repository code - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free up disk space (ubuntu-latest) run: | sudo rm -rf /usr/local/lib/android \ @@ -87,14 +87,14 @@ jobs: -p 6333:6333 \ qdrant/qdrant - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5 with: python-version: ${{ matrix.python-version }} - name: Set up uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3 - name: Load cached venv id: cached-venv - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: .venv key: ${{ runner.os }}-venv-${{ matrix.python-version }}-${{ hashFiles('**/uv.lock') }} From 327e69469faf8fec9b7dda5c0d6b9a4f41274e04 Mon Sep 17 00:00:00 2001 From: Ali Sedaghatbaf Date: Thu, 23 Jul 2026 09:41:17 +0200 Subject: [PATCH 3/6] Add uv --- .github/renovate.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/renovate.json b/.github/renovate.json index 5532206ae..f213edd75 100644 --- a/.github/renovate.json +++ b/.github/renovate.json @@ -3,7 +3,7 @@ "extends": [ "config:recommended" ], - "enabledManagers": ["github-actions"], + "enabledManagers": ["github-actions", "uv"], "schedule": ["before 9am on monday"], "lockFileMaintenance": { "enabled": true, @@ -16,6 +16,10 @@ "automerge": true, "minimumReleaseAge": "3 days", "labels": ["dependencies", "github-actions"] + }, + { + "matchManagers": ["uv"], + "labels": ["dependencies", "python"] } ] } From cb19734cf07d3bb02fa5353e49a7427f1e77419f Mon Sep 17 00:00:00 2001 From: Ali Sedaghatbaf Date: Thu, 23 Jul 2026 09:51:49 +0200 Subject: [PATCH 4/6] Add range strategies --- .github/renovate.json | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/renovate.json b/.github/renovate.json index f213edd75..dd9742be0 100644 --- a/.github/renovate.json +++ b/.github/renovate.json @@ -19,6 +19,15 @@ }, { "matchManagers": ["uv"], + "matchDepTypes": ["dev"], + "rangeStrategy": "bump", + "groupName": "dev dependencies", + "labels": ["dependencies", "python"] + }, + { + "matchManagers": ["uv"], + "matchDepTypes": ["runtime"], + "rangeStrategy": "bump", "labels": ["dependencies", "python"] } ] From 5d421b9c97b05f6f9227592abd016cd5453c1b36 Mon Sep 17 00:00:00 2001 From: Ali Sedaghatbaf Date: Thu, 23 Jul 2026 12:21:41 +0200 Subject: [PATCH 5/6] Make min release age rule global --- .github/renovate.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/renovate.json b/.github/renovate.json index dd9742be0..d8a11de34 100644 --- a/.github/renovate.json +++ b/.github/renovate.json @@ -5,6 +5,7 @@ ], "enabledManagers": ["github-actions", "uv"], "schedule": ["before 9am on monday"], + "minimumReleaseAge": "3 days", "lockFileMaintenance": { "enabled": true, "schedule": ["before 9am on monday"] @@ -14,7 +15,6 @@ "matchManagers": ["github-actions"], "pinDigests": true, "automerge": true, - "minimumReleaseAge": "3 days", "labels": ["dependencies", "github-actions"] }, { From b668d17ef2d4bb7405d2e3ec008033d218ace64f Mon Sep 17 00:00:00 2001 From: Ali Sedaghatbaf Date: Thu, 23 Jul 2026 12:23:26 +0200 Subject: [PATCH 6/6] Add exclude-newr to pyproject --- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pyproject.toml b/pyproject.toml index fc8d5dbfb..78e531ecb 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -86,6 +86,9 @@ dev = [ "enum-tools[sphinx]>=0.12.0,<0.13.0", ] +[tool.uv] +exclude-newer = "2026-07-23T00:00:00Z" + [build-system] requires = ["hatchling"] build-backend = "hatchling.build"