Skip to content

deps: update tree-sitter-language-pack requirement from <1.7,>=0.24.0 to >=0.24.0,<1.14 - #218

Merged
cdeust merged 1 commit into
mainfrom
dependabot/pip/tree-sitter-language-pack-gte-0.24.0-and-lt-1.14
Jul 27, 2026
Merged

deps: update tree-sitter-language-pack requirement from <1.7,>=0.24.0 to >=0.24.0,<1.14#218
cdeust merged 1 commit into
mainfrom
dependabot/pip/tree-sitter-language-pack-gte-0.24.0-and-lt-1.14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on tree-sitter-language-pack to permit the latest version.

Release notes

Sourced from tree-sitter-language-pack's releases.

v1.13.5

Regenerate all language bindings on alef 0.48.4, fixing Java (Maven) publishing by lowering the maven-enforcer version floor and C# (NuGet) publishing by rendering a runtime.json template at pack time. Update grammar revisions (gnuplot, javadoc, scala, tmux) to latest upstream.

Changelog

Sourced from tree-sitter-language-pack's changelog.

[1.13.5] - 2026-07-27

Changed

  • Regenerate all language bindings on alef 0.48.4, which fixes the Java publish (lowered the Maven enforcer floor) and the C# publish (generates runtime.json.template so runtime.json can be rendered before the NuGet pack).
  • Update grammar revisions to latest upstream (gnuplot, javadoc, scala, tmux).
  • Upgrade Rust dependencies to their latest incompatible versions (base64 0.22 -> 0.23).

Fixed

  • ci: render runtime.json from its template before packing the NuGet package so C# runtime metadata is published correctly.

[1.13.4] - 2026-07-26

Changed

  • Regenerate all language bindings on alef 0.48.2.
  • Update dependencies to their latest compatible versions.

Removed

  • Remove unused Java PMD ruleset and stale linter configuration.

[1.13.3] - 2026-07-21

Fixed

  • ruby: platform-specific native gems now package one native extension per supported Ruby ABI and load the extension matching the current runtime. This keeps precompiled gems usable on Ruby 3.2, 3.3, 3.4, 3.5, and Ruby 4 while avoiding Parser#parse self-conversion TypeErrors from loading an extension compiled against a different Ruby ABI. Fixes #171.

Changed

  • grammars: refresh 22 grammar revisions to newer upstream commits (no languages added or removed).
  • deps: refresh lock files with non-breaking updates within existing constraints (Cargo.lock, pnpm-lock.yaml, uv.lock, Ruby Gemfile.lock).
  • Regenerated all bindings with alef 0.42.0.

[1.13.2] - 2026-07-20

Fixed

  • ruby: the Magnus binding now exposes the Parser instance methods (set_language/parse/parse_bytes/reset). alef previously skipped &mut self methods on

... (truncated)

Commits
  • fd95c56 chore(swift): update Package.swift with checksum for v1.13.5
  • 7155e9d ci(publish): render runtime.json before NuGet pack
  • 55cb1d8 chore(release): 1.13.5
  • 0ce8136 chore(grammars): update grammar revisions to latest
  • 4cbc270 chore(release): 1.13.4
  • 3b2e252 chore: remove unused linter cruft
  • dc68512 chore: updated deps
  • 3242bb3 chore(dependabot): stop scanning alef-generated code
  • 50172f7 chore: regenerate with ai-rulez 4.11.0
  • f22c8d4 refactor: migrate to agent-conventions shared modules
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 27, 2026
@dependabot
deps: update tree-sitter-language-pack requirement
29bf284 
Updates the requirements on [tree-sitter-language-pack](https://github.com/xberg-io/tree-sitter-language-pack) to permit the latest version.
- [Release notes](https://github.com/xberg-io/tree-sitter-language-pack/releases)
- [Changelog](https://github.com/xberg-io/tree-sitter-language-pack/blob/main/CHANGELOG.md)
- [Commits](xberg-io/tree-sitter-language-pack@v1.0.0...v1.13.5)

---
updated-dependencies:
- dependency-name: tree-sitter-language-pack
  dependency-version: 1.13.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/tree-sitter-language-pack-gte-0.24.0-and-lt-1.14 branch from c629854 to 29bf284 Compare July 27, 2026 20:04
@cdeust
cdeust merged commit 9e293ba into main Jul 27, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/tree-sitter-language-pack-gte-0.24.0-and-lt-1.14 branch July 27, 2026 20:24
@cdeust cdeust mentioned this pull request Jul 29, 2026
Merged
8 tasks
cdeust added a commit that referenced this pull request Jul 29, 2026
@cdeust @claude
ci: gate on uv.lock staleness so CI's typecheck env can't drift from …
0d6c710 
…the lockfile (#251)

uv.lock currently resolves tree-sitter-language-pack 1.13.5 (matching what
CI's typecheck job installs via the hash-pinned, uv.lock-derived
requirements/ci-typecheck.txt), so `uv sync --locked --all-extras && pyright
mcp_server/` already reports 0 diagnostics today. But nothing in CI verified
uv.lock itself stays current with pyproject.toml's declared constraints —
only that the exported requirements files agree with whatever uv.lock
currently says, stale or not.

That gap is exactly how the divergence this issue reports was introduced:
Dependabot's `deps` PR #218 widened tree-sitter-language-pack's upper bound
in pyproject.toml (`<1.7` -> `<1.14`) but touched no other file (its "pip"
ecosystem entry rewrites version specifiers only, it does not re-run `uv
lock`). uv.lock kept resolving 1.6.2 — still valid under the wider range,
and `uv lock`'s incremental resolution prefers an existing pin over the
newest compatible one — so a contributor's `uv sync --locked` and CI's
pip-resolved venv (unconstrained at the time) silently diverged on the same
commit. Reproduced by checking out pyproject.toml + uv.lock as of 9e293ba
(right after #218) and running `uv lock --check` there: it correctly reports
the lockfile needs updating. That step did not exist in CI, so nothing
caught the drift before it shipped.

Fix: add `uv lock --check` to the lint job, before the existing hash-pinned-
requirements check, so any future pyproject.toml constraint change that
isn't accompanied by a lock refresh fails the build at commit time instead
of resolving silently differently per install path.

Also corrects a stale comment on the tree-sitter-language-pack pin: it
claimed `<1.7` (no such PyPI release exists; versions jump 1.6.3 -> 1.8.0)
and an AttributeError on `parser.parse(...)` that traces to upstream issue
callers building `tree_sitter.Parser(get_language(name))` directly, not
`get_parser(name).parse(...)` (what ast_parser.py:88 calls, and upstream's
own documented safe path). Verified against the resolved 1.13.5:
tests_py/core/test_ast_parser.py 19/19 passing.

Fixes #251

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Yu6EnWspTfqHoGkExyS6u
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cdeust