Dependabot cleanup: pyarrow 25, setup-uv v7, lockfile-only updates

.github/dependabot.yml

@@ -4,6 +4,8 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    # Keep uv.lock fresh without raising pyproject version floors
+    versioning-strategy: lockfile-only
     groups:
       minor-and-patch:
         update-types: [minor, patch]
@@ -15,3 +17,8 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    ignore:
+      # The runtime stays on CI-tested Python versions (see pyproject
+      # classifiers); bump deliberately, not via bot
+      - dependency-name: python
+        update-types: ["version-update:semver-major"]

.github/workflows/ci.yml

@@ -18,10 +18,12 @@ jobs:
         python-version: ["3.11", "3.12"]
     steps:
       - uses: actions/checkout@v7
-      - uses: astral-sh/setup-uv@v5
+      - uses: astral-sh/setup-uv@v7
         with:
           python-version: ${{ matrix.python-version }}
           enable-cache: true
+          # setup-uv v6+ no longer auto-creates a venv; uv pip install needs one
+          activate-environment: true
       - name: Install
         run: uv pip install -e ".[dev]"
       - name: Lint
@@ -41,7 +43,7 @@ jobs:
       - uses: actions/checkout@v7
         with:
           fetch-depth: 0
-      - uses: astral-sh/setup-uv@v5
+      - uses: astral-sh/setup-uv@v7
         with:
           python-version: "3.12"
       - name: pip-audit (locked dependencies, all extras)

src/agentic_rag/retrieval/dense.py

@@ -111,7 +111,7 @@ def build(
         }
         id_map_table = pa.table(id_map_dict)
         id_map_path = index_dir / "id_map.parquet"
-        pq.write_table(id_map_table, str(id_map_path))  # type: ignore[no-untyped-call]
+        pq.write_table(id_map_table, str(id_map_path))
 
         # Write manifest
         manifest = DenseManifest(
@@ -157,7 +157,7 @@ def load(cls, index_dir: Path) -> DenseIndex:
         faiss_index = cast(faiss.IndexFlatIP, faiss.read_index(str(faiss_path)))
 
         # Load id_map
-        id_map = pq.read_table(str(id_map_path))  # type: ignore[no-untyped-call]
+        id_map = pq.read_table(str(id_map_path))
 
         # Load manifest
         with manifest_path.open(encoding="utf-8") as f: