Add the uv ecosystem

.github/ci-filters.yml

@@ -72,3 +72,6 @@ swift:
 terraform:
   - *shared
   - 'terraform/**'
+uv:
+  - *shared
+  - 'uv/**'

.github/issue-labeler.yml

@@ -47,7 +47,10 @@
     - '(dart|pub)'
 
 "L: python":
-    - '(python|pip|poetry)'
+    - '(python|pip|poetry|uv)'
+
+"L: python:uv":
+    - '(uv)'
 
 "L: terraform":
     - '(terraform)'

.github/labeler.yml

@@ -72,6 +72,10 @@
 - changed-files:
   - any-glob-to-any-file: python/**
 
+"L: python:uv":
+- changed-files:
+  - any-glob-to-any-file: uv/**
+
 "L: terraform":
 - changed-files:
   - any-glob-to-any-file: terraform/**

.github/smoke-filters.yml

@@ -65,3 +65,6 @@ swift:
 terraform:
   - *common
   - 'terraform/**'
+uv:
+  - *common
+  - 'uv/**'

.github/workflows/ci.yml

@@ -38,6 +38,7 @@ jobs:
           - { path: devcontainers, name: devcontainers, ecosystem: devcontainers }
           - { path: terraform, name: terraform, ecosystem: terraform }
           - { path: bun, name: bun, ecosystem: bun }
+          - { path: uv, name: uv, ecosystem: uv }
 
     steps:
       - name: Checkout code

.github/workflows/images-branch.yml

@@ -78,6 +78,7 @@ jobs:
           - { name: devcontainers, ecosystem: devcontainers }
           - { name: terraform, ecosystem: terraform }
           - { name: bun, ecosystem: bun }
+          - { name: uv, ecosystem: uv }
     permissions:
       contents: read
       id-token: write

.github/workflows/images-latest.yml

@@ -55,6 +55,7 @@ jobs:
           - { name: swift, ecosystem: swift }
           - { name: devcontainers, ecosystem: devcontainers }
           - { name: terraform, ecosystem: terraform }
+          - { name: uv, ecosystem: uv }
     env:
       COMMIT_SHA: ${{ github.sha }}
       NAME: ${{ matrix.suite.name }}

Dockerfile.updater-core

@@ -106,9 +106,10 @@ COPY --chown=dependabot:dependabot python/.bundle python/dependabot-python.gemsp
 COPY --chown=dependabot:dependabot silent/.bundle silent/dependabot-silent.gemspec silent/
 COPY --chown=dependabot:dependabot swift/.bundle swift/dependabot-swift.gemspec swift/
 COPY --chown=dependabot:dependabot terraform/.bundle terraform/dependabot-terraform.gemspec terraform/
+COPY --chown=dependabot:dependabot uv/.bundle uv/dependabot-uv.gemspec uv/
 
 # prevent having all the source in every ecosystem image
-RUN for ecosystem in git_submodules terraform github_actions hex elm docker docker_compose nuget maven gradle cargo composer go_modules python pub npm_and_yarn bundler silent swift devcontainers dotnet_sdk bun; do \
+RUN for ecosystem in git_submodules terraform github_actions hex elm docker docker_compose nuget maven gradle cargo composer go_modules python pub npm_and_yarn bundler silent swift devcontainers dotnet_sdk bun uv; do \
     mkdir -p $ecosystem/lib/dependabot; \
     touch $ecosystem/lib/dependabot/$ecosystem.rb; \
   done

Gemfile

@@ -25,6 +25,7 @@ gem "dependabot-python", path: "python"
 gem "dependabot-silent", path: "silent"
 gem "dependabot-swift", path: "swift"
 gem "dependabot-terraform", path: "terraform"
+gem "dependabot-uv", path: "uv"
 
 # Sorbet
 gem "sorbet", "0.5.11630", group: :development

Gemfile.lock

@@ -159,6 +159,12 @@ PATH
     dependabot-terraform (0.299.0)
       dependabot-common (= 0.299.0)
 
+PATH
+  remote: uv
+  specs:
+    dependabot-uv (0.299.0)
+      dependabot-common (= 0.299.0)
+
 GEM
   remote: https://rubygems.org/
   specs:
@@ -414,6 +420,7 @@ DEPENDENCIES
   dependabot-silent!
   dependabot-swift!
   dependabot-terraform!
+  dependabot-uv!
   gpgme (~> 2.0)
   rake (~> 13)
   rspec-its (~> 1.3)

Rakefile

@@ -37,6 +37,7 @@ GEMSPECS = %w(
   dotnet_sdk/dependabot-dotnet_sdk.gemspec
   bun/dependabot-bun.gemspec
   docker_compose/dependabot-docker_compose.gemspec
+  uv/dependabot-uv.gemspec
 ).freeze
 
 def run_command(command)

bin/docker-dev-shell

@@ -244,6 +244,12 @@ docker run --rm -ti \
   -v "$(pwd)/terraform/lib:$CODE_DIR/terraform/lib" \
   -v "$(pwd)/terraform/script:$CODE_DIR/terraform/script" \
   -v "$(pwd)/terraform/spec:$CODE_DIR/terraform/spec" \
+  -v "$(pwd)/uv/.rubocop.yml:$CODE_DIR/uv/.rubocop.yml" \
+  -v "$(pwd)/uv/dependabot-uv.gemspec:$CODE_DIR/uv/dependabot-uv.gemspec" \
+  -v "$(pwd)/uv/helpers:$CODE_DIR/uv/helpers" \
+  -v "$(pwd)/uv/lib:$CODE_DIR/uv/lib" \
+  -v "$(pwd)/uv/script:$CODE_DIR/uv/script" \
+  -v "$(pwd)/uv/spec:$CODE_DIR/uv/spec" \
   -v "$(pwd)/tmp:/$CODE_DIR/tmp" \
   -v "$(pwd)/updater/.rubocop.yml:$CODE_DIR/dependabot-updater/.rubocop.yml" \
   -v "$(pwd)/updater/bin:$CODE_DIR/dependabot-updater/bin" \

bin/dry-run.rb

@@ -74,6 +74,7 @@
 $LOAD_PATH << "./pub/lib"
 $LOAD_PATH << "./swift/lib"
 $LOAD_PATH << "./terraform/lib"
+$LOAD_PATH << "./uv/lib"
 
 updater_image_gemfile = File.expand_path("../dependabot-updater/Gemfile", __dir__)
 updater_repo_gemfile = File.expand_path("../updater/Gemfile", __dir__)
@@ -122,6 +123,7 @@
 require "dependabot/pub"
 require "dependabot/swift"
 require "dependabot/terraform"
+require "dependabot/uv"
 
 # GitHub credentials with write permission to the repo you want to update
 # (so that you can create a new branch, commit and pull request).

common/lib/dependabot/config/file.rb

@@ -78,7 +78,8 @@ def self.parse(config)
         "pip" => "pip",
         "pub" => "pub",
         "swift" => "swift",
-        "terraform" => "terraform"
+        "terraform" => "terraform",
+        "uv" => "uv"
       }.freeze, T::Hash[String, String])
 
       sig { params(cfg: T.nilable(T::Hash[Symbol, T.untyped])).returns(T::Array[IgnoreCondition]) }

omnibus/dependabot-omnibus.gemspec

@@ -48,6 +48,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "dependabot-python", Dependabot::VERSION
   spec.add_dependency "dependabot-swift", Dependabot::VERSION
   spec.add_dependency "dependabot-terraform", Dependabot::VERSION
+  spec.add_dependency "dependabot-uv", Dependabot::VERSION
 
   common_gemspec.development_dependencies.each do |dep|
     spec.add_development_dependency dep.name, *dep.requirement.as_list

omnibus/lib/dependabot/omnibus.rb

@@ -22,3 +22,4 @@
 require "dependabot/swift"
 require "dependabot/devcontainers"
 require "dependabot/bun"
+require "dependabot/uv"

script/dependabot

@@ -26,4 +26,5 @@ dependabot \
   -v "$(pwd)"/swift:/home/dependabot/swift \
   -v "$(pwd)"/terraform:/home/dependabot/terraform \
   -v "$(pwd)"/bun:/home/dependabot/bun \
+  -v "$(pwd)"/uv:/home/dependabot/uv \
   "$@"

sorbet/config

@@ -30,4 +30,5 @@
 --ignore=swift/spec/
 --ignore=terraform/spec/
 --ignore=updater/spec/
+--ignore=uv/spec/
 --ignore=.git

updater/Gemfile

@@ -25,6 +25,7 @@ gem "dependabot-python", path: "../python"
 gem "dependabot-silent", path: "../silent"
 gem "dependabot-swift", path: "../swift"
 gem "dependabot-terraform", path: "../terraform"
+gem "dependabot-uv", path: "../uv"
 
 gem "http", "~> 5.1"
 gem "octokit", "7.2.0"

updater/Gemfile.lock

@@ -159,6 +159,12 @@ PATH
     dependabot-terraform (0.299.0)
       dependabot-common (= 0.299.0)
 
+PATH
+  remote: ../uv
+  specs:
+    dependabot-uv (0.299.0)
+      dependabot-common (= 0.299.0)
+
 GEM
   remote: https://rubygems.org/
   specs:
@@ -448,6 +454,7 @@ DEPENDENCIES
   dependabot-silent!
   dependabot-swift!
   dependabot-terraform!
+  dependabot-uv!
   flamegraph (~> 0.9.5)
   gpgme (~> 2.0)
   http (~> 5.1)

updater/lib/dependabot/setup.rb

@@ -46,6 +46,7 @@
     pub|
     silent|
     swift|
+    uv|
     devcontainers
   )}x
 
@@ -80,3 +81,4 @@
 require "dependabot/swift"
 require "dependabot/devcontainers"
 require "dependabot/bun"
+require "dependabot/uv"

uv/.bundle/config

@@ -0,0 +1 @@
+BUNDLE_GEMFILE: "../dependabot-updater/Gemfile"

uv/.gitignore

@@ -0,0 +1,6 @@
+/.bundle/*
+!.bundle/config
+/.env
+/tmp
+/dependabot-*.gem
+helpers/install-dir

uv/.rubocop.yml

@@ -0,0 +1 @@
+inherit_from: ../.rubocop.yml