From 4554f774aa11351ff5eb43f94adf587a6a848c52 Mon Sep 17 00:00:00 2001
From: Anas Khan <83116240+anxkhn@users.noreply.github.com>
Date: Sun, 5 Jul 2026 08:36:49 +0530
Subject: [PATCH] ci: use uv dependabot ecosystem instead of pip

Since the migration to hatch and uv, uv.lock is the source of truth and
requirements.txt is an autogenerated `uv export` of it. The lint job in
.github/workflows/test.yaml enforces this with `uv lock --check` followed by
`uv export >requirements.txt` and `git diff --exit-code requirements.txt`.

Dependabot's `pip` ecosystem edits requirements.txt directly and never
regenerates uv.lock, so on every dependency PR `uv export` rewrites
requirements.txt from the unchanged lockfile, reverting Dependabot's change and
failing the diff check. Switch to the natively supported `uv` ecosystem, which
updates uv.lock so the exported requirements.txt stays consistent and the lint
job passes.

Signed-off-by: Anas Khan <83116240+anxkhn@users.noreply.github.com>
---
 .github/dependabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f461b937..438202c7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,7 +4,7 @@ updates:
     directory: /
     schedule:
       interval: daily
-  - package-ecosystem: pip
+  - package-ecosystem: uv
     directory: /
     schedule:
       interval: daily