Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

use pip-compile and dependabot grouped updates #5329

Merged
merged 5 commits into from
Nov 9, 2023
Merged

Conversation

davidism
Copy link
Member

@davidism davidism commented Nov 9, 2023

  • Use Dependabot's grouped updates feature, and enable Python updates. This will result in only two PRs a month, one for GitHub Actions and one for Python requirements.
  • The requirements-skip directory is used for minimum and development versions that should not be updated automatically. Sometimes Dependabot will still open security PRs for these, but they can be dismissed.
  • pip-compile is used instead of pip-compile-multi, as Dependabot messes up the slightly different format that multi produces.
  • Update tests Python matrix to include 3.12 final.
  • Update the Read the Docs env to use latest OS and Python versions.

@davidism davidism merged commit 2465352 into main Nov 9, 2023
11 checks passed
@davidism davidism deleted the dependabot-groups branch November 9, 2023 17:00
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Nov 25, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant