Dependabot cooldown matching uv exclude-newer and fix release related checks breaking dependabot

.github/dependabot.yml

@@ -18,6 +18,10 @@ updates:
       directory: /
       schedule:
           interval: weekly
+      # Must be at least the uv exclude-newer window in pyproject.toml, or
+      # Dependabot targets releases that uv refuses to lock.
+      cooldown:
+          default-days: 14
       # Bundle every version bump for this ecosystem into one PR.
       groups:
           uv:

.pre-commit-config.yaml

@@ -20,11 +20,6 @@ repos:
         entry: uv run python scripts/insert_license_notebooks.py
         language: system
         types: [jupyter]
-      - id: commitizen
-        name: conventional commit message
-        entry: uv run cz check --commit-msg-file
-        language: system
-        stages: [commit-msg]
       - id: leak-guard-message
         name: leak guard (commit message)
         entry: uv run python scripts/leak_guard.py message

CONTRIBUTING.md

@@ -103,7 +103,7 @@ The package follows strict [Semantic Versioning](https://semver.org/spec/v2.0.0.
 
 ### Commit message format
 
-Every commit subject must follow:
+Squash merges use GitHub's default message, usually the pull request title, as the commit subject on `main`. For `cz bump` to see a change, that subject must follow:
 
 ```text
 <type>(<optional scope>): <imperative summary>
@@ -156,7 +156,7 @@ feat(adapters): rename forecast() to predict()
 BREAKING CHANGE: forecast() is gone; callers must use predict().
 ```
 
-The `commit-msg` pre-commit hook runs `cz check` and rejects malformed messages locally before the commit is created.
+Commits on a feature branch are discarded by the squash merge, so their messages are not checked against this format.
 
 ## Public API Surface
 

Taskfile.yaml

@@ -253,19 +253,7 @@ tasks:
 
   pre-commit:
     desc: Run pre-commit hooks on all files
-    cmd: |
-      set +e
-      uv run pre-commit run --all-files
-      PRE_COMMIT_STATUS=$?
-      MSG_STATUS=0
-      if [ -s .git/COMMIT_EDITMSG ]; then
-        uv run cz check --commit-msg-file .git/COMMIT_EDITMSG
-        MSG_STATUS=$?
-        uv run python scripts/leak_guard.py message .git/COMMIT_EDITMSG || MSG_STATUS=1
-      fi
-      if [ "$PRE_COMMIT_STATUS" -ne 0 ] || [ "$MSG_STATUS" -ne 0 ]; then
-        exit 1
-      fi
+    cmd: uv run pre-commit run --all-files
 
   install:ripgrep:
     desc: Install ripgrep using the available system package manager