From e7db1e1cf19d89bc36d087e59d4ff9cb84133809 Mon Sep 17 00:00:00 2001
From: Tom Softreck <tom@sapletta.com>
Date: Sat, 5 Sep 2026 21:47:15 +0200
Subject: [PATCH] deps: schedule verified internal package updates and use Goal
 2.2.0

Co-authored-by: Koru Agent <agent@coru.dev>
---
 .github/dependabot.yml                        | 32 +++++++++++++++++
 .github/internal-dependencies.json            | 35 ++++++++++++++++++
 .../internal-dependency-freshness.yml         | 36 +++++++++++++++++++
 uv.lock                                       |  6 ++--
 4 files changed, 106 insertions(+), 3 deletions(-)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/internal-dependencies.json
 create mode 100644 .github/workflows/internal-dependency-freshness.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..80f39f7
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,32 @@
+# Internal catalog: semcod/goal integration/internal-dependencies.json
+version: 2
+updates:
+- package-ecosystem: uv
+  directory: /
+  schedule:
+    interval: cron
+    cronjob: 30 3 * * *
+    timezone: Europe/Warsaw
+  open-pull-requests-limit: 1
+  versioning-strategy: increase-if-necessary
+  allow:
+  - dependency-name: costs
+    dependency-type: all
+  - dependency-name: goal
+    dependency-type: all
+  - dependency-name: pfix
+    dependency-type: all
+  - dependency-name: clickmd
+    dependency-type: all
+  - dependency-name: code2llm
+    dependency-type: all
+  groups:
+    internal-packages:
+      patterns:
+      - costs
+      - goal
+      - pfix
+      - clickmd
+      - code2llm
+  commit-message:
+    prefix: deps
diff --git a/.github/internal-dependencies.json b/.github/internal-dependencies.json
new file mode 100644
index 0000000..ce582b0
--- /dev/null
+++ b/.github/internal-dependencies.json
@@ -0,0 +1,35 @@
+{
+  "schema": "goal.internal-dependencies/v1",
+  "packages": [
+    {
+      "name": "costs",
+      "repository": "semcod/costs",
+      "registry": "pypi",
+      "versioning": "semver"
+    },
+    {
+      "name": "goal",
+      "repository": "semcod/goal",
+      "registry": "pypi",
+      "versioning": "semver"
+    },
+    {
+      "name": "pfix",
+      "repository": "semcod/pfix",
+      "registry": "pypi",
+      "versioning": "semver"
+    },
+    {
+      "name": "clickmd",
+      "repository": "semcod/clickmd",
+      "registry": "pypi",
+      "versioning": "semver"
+    },
+    {
+      "name": "code2llm",
+      "repository": "semcod/code2llm",
+      "registry": "pypi",
+      "versioning": "semver"
+    }
+  ]
+}
diff --git a/.github/workflows/internal-dependency-freshness.yml b/.github/workflows/internal-dependency-freshness.yml
new file mode 100644
index 0000000..4cb0faf
--- /dev/null
+++ b/.github/workflows/internal-dependency-freshness.yml
@@ -0,0 +1,36 @@
+name: Internal dependency freshness
+
+on:
+  schedule:
+    - cron: "47 5 * * *"
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - pyproject.toml
+      - uv.lock
+      - .github/internal-dependencies.json
+      - .github/workflows/internal-dependency-freshness.yml
+
+permissions:
+  contents: read
+
+jobs:
+  freshness:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+      - name: Install released checker
+        run: python -m pip install "goal==2.2.0"
+      - name: Verify published stable targets
+        run: goal dependencies --catalog .github/internal-dependencies.json --project . --check > dependency-freshness.json
+      - name: Retain freshness evidence
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: dependency-freshness
+          path: dependency-freshness.json
+          if-no-files-found: ignore
diff --git a/uv.lock b/uv.lock
index 9fd53bc..04e62f3 100644
--- a/uv.lock
+++ b/uv.lock
@@ -968,7 +968,7 @@ wheels = [
 
 [[package]]
 name = "goal"
-version = "2.1.302"
+version = "2.2.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "click" },
@@ -978,9 +978,9 @@ dependencies = [
     { name = "tomlkit" },
     { name = "typer" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/fb/ef/5bef02b32cb404557fbbe89beaac80a5f9f2b432b12938d94e2049bff482/goal-2.1.302.tar.gz", hash = "sha256:4ee3bf320ac81a00380406308716d50b4aa4b19d37ffc6d24f48280252c38a94", size = 393361, upload-time = "2026-09-05T15:20:20.422Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/c7/9c/135e3f67a7324c3c49ef4246f5518b59ad90226e62c3d30ae20cba005c1d/goal-2.2.0.tar.gz", hash = "sha256:e9e2c1ac9493dae3b887b16d503f7c1f83d02ddcbdd3c5cf58d44a458bb2662f", size = 399786, upload-time = "2026-09-05T19:41:55.329Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/9e/63/5f1730cb34ed80776093854e3dc9bc91ea66ad84d6b7975133e20853db3e/goal-2.1.302-py3-none-any.whl", hash = "sha256:175b0bd89b2df1b2c046bc7ccb1be6a2495ff6bd7bb1adfb71e76a2cccb43f8f", size = 343449, upload-time = "2026-09-05T15:20:17.73Z" },
+    { url = "https://files.pythonhosted.org/packages/24/69/8a4cf5710683bb777f1f6e4cd44dd3907befe97b94c6ea6e97d4305b4e44/goal-2.2.0-py3-none-any.whl", hash = "sha256:0d8f93aa317ac92a66b64b797e210a5d66044ce8db2cb05b012b03d42aced95e", size = 349709, upload-time = "2026-09-05T19:41:53.615Z" },
 ]
 
 [[package]]