From f957a8a5c940e9e4e6f059e4579856ac60223529 Mon Sep 17 00:00:00 2001
From: abrichr <richard.abrich@mldsai.com>
Date: Sat, 17 Oct 2026 18:29:31 -0400
Subject: [PATCH] chore(deps): let Dependabot update uv.lock by using the uv
 ecosystem

The pip ecosystem edited pyproject.toml but left uv.lock stale, so the
Tests workflow's 'uv sync --locked' rejected every Python bump (#150-#154).
The uv ecosystem updates the lockfile with the manifest. The PyGObject
>=3.51 ignore and the github-actions groups are unchanged.
---
 .github/dependabot.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5be7b94..a4b5841 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,7 +1,9 @@
 # SOC 2: automated dependency updates (OA-C-23).
 version: 2
 updates:
-  - package-ecosystem: "pip"
+  # The uv ecosystem updates uv.lock with pyproject.toml; the pip ecosystem
+  # left the lock stale, so CI's `uv sync --locked` rejected every bump.
+  - package-ecosystem: "uv"
     directory: "/"
     schedule:
       interval: "weekly"