chore: remove uv sources defined at workspace level
What the developer wrote
Authored by Lakshya Singh
chore: remove uv sources defined at workspace level
duplicate definition isn’t required as we already defined them at
workspace level sources
What changed, and why it matters
This commit is a routine cleanup of Python project configuration files. It removes duplicate workspace dependency definitions that were already set at the workspace level. There is no security relevance: no code behavior changes, no bug fixes, and no vulnerability patches.
No security action required. Treat as normal maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit removes [tool.uv.sources] sections from six pyproject.toml files under contrib/. These sections mapped local workspace packages (e.g., pyln-proto, pyln-client) as sources. The commit message states these definitions are duplicates because they already exist at the workspace level. The change is purely declarative/build-tool configuration and does not alter runtime logic, attack surface, or dependencies.
Changed components
contrib/pyln-client/pyproject.tomlcontrib/pyln-spec/bolt1/pyproject.tomlcontrib/pyln-spec/bolt2/pyproject.tomlcontrib/pyln-spec/bolt4/pyproject.tomlcontrib/pyln-spec/bolt7/pyproject.tomlcontrib/pyln-testing/pyproject.tomlInspect captured patch +0 / −20
diff --git a/contrib/pyln-client/pyproject.toml b/contrib/pyln-client/pyproject.toml
index 9c857f0b..1639ff3c 100644
--- a/contrib/pyln-client/pyproject.toml
+++ b/contrib/pyln-client/pyproject.toml
@@ -17,7 +17,3 @@ packages = ["pyln"]
[build-system]
requires = ["hatchling>=1.0.0"]
build-backend = "hatchling.build"
-
-[tool.uv.sources]
-pyln-proto = { workspace = true }
-pyln-bolt7 = { workspace = true }
diff --git a/contrib/pyln-spec/bolt1/pyproject.toml b/contrib/pyln-spec/bolt1/pyproject.toml
index b91c31ba..0254d62f 100644
--- a/contrib/pyln-spec/bolt1/pyproject.toml
+++ b/contrib/pyln-spec/bolt1/pyproject.toml
@@ -20,6 +20,3 @@ packages = ["pyln"]
[build-system]
requires = ["hatchling>=1.0.0"]
build-backend = "hatchling.build"
-
-[tool.uv.sources]
-pyln-proto = { workspace = true }
diff --git a/contrib/pyln-spec/bolt2/pyproject.toml b/contrib/pyln-spec/bolt2/pyproject.toml
index 49b31f63..5a7c6de7 100644
--- a/contrib/pyln-spec/bolt2/pyproject.toml
+++ b/contrib/pyln-spec/bolt2/pyproject.toml
@@ -20,6 +20,3 @@ packages = ["pyln"]
[build-system]
requires = ["hatchling>=1.0.0"]
build-backend = "hatchling.build"
-
-[tool.uv.sources]
-pyln-proto = { workspace = true }
diff --git a/contrib/pyln-spec/bolt4/pyproject.toml b/contrib/pyln-spec/bolt4/pyproject.toml
index 8e91ee17..a9409fc5 100644
--- a/contrib/pyln-spec/bolt4/pyproject.toml
+++ b/contrib/pyln-spec/bolt4/pyproject.toml
@@ -20,6 +20,3 @@ packages = ["pyln"]
[build-system]
requires = ["hatchling>=1.0.0"]
build-backend = "hatchling.build"
-
-[tool.uv.sources]
-pyln-proto = { workspace = true }
diff --git a/contrib/pyln-spec/bolt7/pyproject.toml b/contrib/pyln-spec/bolt7/pyproject.toml
index c2e02d5d..655d4031 100644
--- a/contrib/pyln-spec/bolt7/pyproject.toml
+++ b/contrib/pyln-spec/bolt7/pyproject.toml
@@ -16,6 +16,3 @@ packages = ["pyln"]
[build-system]
requires = ["hatchling>=1.0.0"]
build-backend = "hatchling.build"
-
-[tool.uv.sources]
-pyln-proto = { workspace = true }
diff --git a/contrib/pyln-testing/pyproject.toml b/contrib/pyln-testing/pyproject.toml
index 7b543bb8..d402d8a3 100644
--- a/contrib/pyln-testing/pyproject.toml
+++ b/contrib/pyln-testing/pyproject.toml
@@ -31,7 +31,3 @@ packages = ["pyln"]
[build-system]
requires = ["hatchling>=1.0.0"]
build-backend = "hatchling.build"
-
-[tool.uv.sources]
-pyln-client = { workspace = true }
-pyln-grpc-proto = { workspace = true }
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.