Improve dependency updates #40
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The new workflow will be scheduled to run every Monday. Dependabot now only checks the Python dependencies for the development requirements (`requirements_dev.txt`), which needed to be moved to a separate folder for this to work (`/.dev`).
Add `hypercorn` as a direct dependency
Codecov Report
@@ Coverage Diff @@
## master #40 +/- ##
=======================================
Coverage 69.49% 69.49%
=======================================
Files 8 8
Lines 295 295
=======================================
Hits 205 205
Misses 90 90
Flags with carried forward coverage won't be shown. Click here to find out more. Continue to review full report at Codecov.
|
jesper-friis
approved these changes
Feb 8, 2022
Co-authored-by: Jesper Friis <jesper-friis@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Add a special workflow for updating
requirements.txt.Dependabot does not update
requirements.txtanymore then, but only the development requirements.In order to make this work, the
requirements_dev.txt(development requirements) have been moved to a separate folder (/.dev).All references to
requirements_dev.txthave been updated accordingly (only used in CI/CD workflows and thedevelopmenttarget for Dockerfile).The new workflow checks out the
ci/dependabot-updatesbranch, installs a set list of direct requirements (without versions), being eager in updating versions when installing, and then runspip freezeto check against the currentrequirements.txtfile.If there are any changes, a PR against
ci/dependabot-updatesis created - similarly to what dependabot would otherwise do.The workflow is scheduled to run every Monday morning - similarly to when dependabot runs.
Closes #38