potiuk opened a new pull request, #71378: URL: https://github.com/apache/airflow/pull/71378
Adds a `check-dependency-lower-bounds` prek hook that fails when a dependency in any `pyproject.toml` has no lower bound. It covers the four tables where the unbounded requirements fixed by hand in #71324 were hiding: `project.dependencies`, `project.optional-dependencies`, `dependency-groups` and `build-system.requires`. Two kinds of requirement are exempt: uv workspace members, which resolve from the checkout rather than PyPI, and direct URL requirements, where the URL already names the artifact. Without the workspace exemption the hook would report 922 false positives. Six violations survived those exemptions across all 139 tracked `pyproject.toml` files and are fixed here — `python-dateutil` in the Python client, and the five `pydantic-ai-slim` extras in `common.ai`, bounded at the `>=2.0.0` that #71324 already gave the same package in that provider's dev group. `uv.lock` and `providers/common/ai/docs/index.rst` are the regenerated consequences; the lock also picks up four metadata lines from #71324 itself, which merged without a relock. --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Code (Opus 5) Generated-by: Claude Code (Opus 5) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
