Skip to content

Upgrade dependencies (singer-sdk 0.54.9) and GitHub Actions - #95

Merged
tobiascadee merged 2 commits into
mainfrom
tobias/update-dependencies
Oct 23, 2026
Merged

tobiascadee merged 2 commits into
mainfrom
tobias/update-dependencies

Conversation

@tobiascadee

Copy link
Copy Markdown
Contributor

What

Upgrades every Python dependency to its latest release (singer-sdk 0.48.1/0.49.1 -> 0.54.9), regenerates uv.lock, drops Python 3.9 and bumps the GitHub Actions to their latest SHA-pinned releases.

Why

Periodic dependency refresh so data-transformations can pin a fresh tag in meltano.yml.

Changes

  • singer-sdk 0.48.1/0.49.1 -> 0.54.9: no tap code changes needed (removed APIs are unused, overridden hooks and paginator internals unchanged); discovery now also emits replication-key metadata for conversations and contacts (sdk#3407)
  • requests 2.32.5 -> 2.34.2, boto3 1.40.18 -> 1.43.106 (capped by s3fs 2026.9.0's aiobotocore 3.9.2, botocore < 1.43.107), s3fs extra 2025.9.0 -> 2026.9.0
  • dev: pytest 8.4.2 -> 9.1.1, pytest-github-actions-annotate-failures 0.3.0 -> 0.4.2, ruff 0.13.1 -> 0.17.2, mypy 1.18.2 -> 2.4.0, types-requests -> 2.33.0.20261006
  • requires-python >=3.9 -> >=3.10 (singer-sdk dropped 3.9), classifiers and tox env list follow
  • ruff 0.17: ignore CPY001 (license lives in LICENSE), import datetime as dt in the test (ICN001)
  • actions/checkout v5.0.0 -> v7.0.1, actions/setup-python v6.0.0 -> v7.1.0, astral-sh/setup-uv v6.7.0 -> v10.3.2, all SHA-pinned
  • Verified locally on Python 3.11: --about/--version, --discover, ruff check, and the full singer-sdk test suite against the real Intercom API (tox -e py311: 117 passed, 8 skipped by ignore_no_records)

LLM Transparency

Note

LLM usage: 100 %

To be notified

Links

🤖 Generated with Claude Code

tobiascadee and others added 2 commits October 23, 2026 11:33
Periodic refresh so data-transformations can pin a fresh tag in
meltano.yml instead of running on a lockfile from September 2025.

singer-sdk goes from 0.48.1/0.49.1 to 0.54.9. None of the removals
between those versions (config_from_cli_args,
reset_state_progress_markers, batch/SQL shims) are used here, and the
overridden hooks (signpost, compare_start_date, http_headers, the
JSONPath/HATEOAS paginators) keep the same internals, so no tap code
changes are needed. Discovery now also writes the replication-key
metadata for conversations and contacts (sdk#3407).

singer-sdk dropped Python 3.9, so requires-python, the classifiers and
the tox env list move to >=3.10. Production runs on 3.11.

boto3 is floored at 1.43.106 rather than the newest 1.43.118 because
the s3 extra's s3fs 2026.9.0 pins aiobotocore 3.9.2, which caps botocore
below 1.43.107.

Ruff 0.17 enables CPY001 (copyright header) and ICN001 under ALL: the
license lives in LICENSE so CPY001 is ignored, and the test imports
datetime as dt.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Moves actions/checkout v5.0.0 -> v7.0.1, actions/setup-python
v6.0.0 -> v7.1.0 and astral-sh/setup-uv v6.7.0 -> v10.3.2, all pinned
to full commit SHAs as the org requires. All three are node24 actions
without nested uses, and the breaking changes in these majors (node24,
removed inputs we do not set, cache defaults for pull_request_target)
do not affect this workflow.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@tobiascadee
tobiascadee marked this pull request as ready for review October 23, 2026 09:35
@tobiascadee
tobiascadee requested a review from a team as a code owner October 23, 2026 09:35
@tobiascadee
tobiascadee merged commit a7a76f1 into main Oct 23, 2026
8 checks passed
@tobiascadee
tobiascadee deleted the tobias/update-dependencies branch October 23, 2026 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants