chore(agentic-ci): declare pandas as direct dep of data-designer-engine#705
chore(agentic-ci): declare pandas as direct dep of data-designer-engine#705github-actions[bot] wants to merge 1 commit into
Conversation
github-actions
Bot
added
agentic-ci
Greptile SummaryDeclares
|
| Filename | Overview |
|---|---|
| packages/data-designer-engine/pyproject.toml | Adds pandas>=2.3.3,<3 as a direct dependency of data-designer-engine; version specifier matches data-designer-config exactly and placement is alphabetically correct. |
Flowchart
%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[data-designer-engine] -->|direct dep, declared| B[data-designer-config]
A -->|direct dep, NOW declared| C[pandas>=2.3.3,<3]
B -->|direct dep, declared| C
A -->|direct dep, declared| D[numpy>=1.23.5,<3]
B -->|direct dep, declared| D
style C fill:#90EE90,stroke:#228B22
Reviews (1): Last reviewed commit: "chore(agentic-ci): declare pandas as dir..." | Re-trigger Greptile
Summary
Declares
pandasas a direct dependency ofdata-designer-engine.Why
Per
AGENTS.mdand the dependencies-suite audit (2026-05-26):data-designer-engineimportspandasdirectly in ~30 source files(e.g.
engine/analysis/column_profilers/base.py,engine/analysis/column_statistics.py,engine/dataset_builders/dataset_builder.py,engine/analysis/utils/column_statistics_calculations.py,engine/analysis/dataset_profiler.py) but onlydata-designer-configdeclared it. The engine relied on transitive resolution through the
config package, which works for the monorepo install but is fragile if
data-designer-engineis ever installed standalone, and it bypassesthe "each package declares what it directly imports" contract.
This is the same class of fix as PR #676 (
numpyfor the samepackage).
What changed
A single line —
"pandas>=2.3.3,<3",— added to the[tool.hatch.metadata.hooks.uv-dynamic-versioning].dependencieslistin
packages/data-designer-engine/pyproject.toml, in alphabeticalposition between
numpyandpython-multipart. The specifier iscopied verbatim from
packages/data-designer-config/pyproject.tomlwhere
pandas>=2.3.3,<3is already declared, so no version-rangereconciliation is required.
Tests
make install-devresolved the lockfile cleanly (only the engine'sown version metadata changed in
uv.lock).make test-engine— 2194 passed in 42.43s.Provenance
Generated by the agentic-ci
dependenciessuite (daily run,2026-05-26). Finding id
ad8356793082, fix confidence 0.85, severityhigh (heavy import bypassing the declared-deps contract).