Skip to content

fix: prevent dev dependency downloads at runtime#41

Merged
zkoppert merged 1 commit intomainfrom
fix/dockerfile-no-dev-entrypoint
Mar 18, 2026
Merged

fix: prevent dev dependency downloads at runtime#41
zkoppert merged 1 commit intomainfrom
fix/dockerfile-no-dev-entrypoint

Conversation

@zkoppert
Copy link
Copy Markdown
Contributor

Problem

The Dockerfile ENTRYPOINT uses uv run without --no-dev, causing it to re-sync the environment and download ~15MB of CI-only tools on every action invocation:

Downloading pygments (1.2MiB)
Downloading black (1.7MiB)
Downloading mypy (13.0MiB)

The build step correctly uses uv sync --frozen --no-dev, but uv run ignores that and resolves the full dependency graph including [dependency-groups] dev.

Fix

One-line change - add --no-dev to the entrypoint:

ENTRYPOINT ["uv", "run", "--no-dev", "--project", "/action/workspace"]

Testing

  • Docker build - Image builds successfully
  • Docker run (local) - Tested against github/new-user-experience with FILTER_TEAMS and DRY_RUN=true. No dev dependency download lines in output. Action resolved teams, scanned PRs, completed successfully.
  • Before/after comparison:
    • Before: Downloading pygments (1.2MiB), Downloading black (1.7MiB), Downloading mypy (13.0MiB) on every run
    • After: No downloads at startup, action runs immediately

Closes #40

Add --no-dev to the uv run entrypoint to match the --no-dev flag
already used in uv sync at build time. Without this, uv run
re-syncs the environment and downloads ~15MB of CI-only tools
(black, mypy, pygments) on every action invocation.

Closes #40

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@zkoppert zkoppert self-assigned this Mar 18, 2026
@github-actions github-actions bot added the fix Bug fix label Mar 18, 2026
@zkoppert zkoppert added the Mark Ready When Ready Automatically mark draft PR ready when checks pass label Mar 18, 2026
@github-actions github-actions bot marked this pull request as ready for review March 18, 2026 22:57
@github-actions github-actions bot requested a review from jmeridth as a code owner March 18, 2026 22:57
@github-actions github-actions bot removed the Mark Ready When Ready Automatically mark draft PR ready when checks pass label Mar 18, 2026
@zkoppert zkoppert requested a review from Copilot March 18, 2026 22:59
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the container runtime invocation to avoid downloading dev-only dependency groups when the GitHub Action starts, aligning runtime behavior with the existing build-time uv sync --no-dev usage.

Changes:

  • Add --no-dev to the Docker ENTRYPOINT uv run invocation to prevent dev dependency resolution/downloads at container startup.

You can also share your feedback on Copilot code review. Take the survey.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

fix Bug fix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dockerfile ENTRYPOINT downloads dev dependencies at runtime

3 participants