Pin dependencies, setup dependabot #179
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The purpose is to make it less likely that the test suite action breaks suddenly. Also upgrade all the dependencies to current versions (except protobufs which apparently breaks the suite with newest version). Signed-off-by: Jussi Kukkonen <[email protected]>
* monthly updates * python updates are not grouped: if we only update monthly they may actually sometimes break and in that case grouping is annoying Signed-off-by: Jussi Kukkonen <[email protected]>
This was referenced Jan 13, 2025
|
Not high priority, but can we add |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Purpose here is to make the test suite reproducible for action users (test suite dependency updates should not break workflows). At the moment I believe the action is broken for everyone except sigstore-python and the selftest here...
Fixes #178, but I will file another issue about installing sigstore-python in a virtual env of its own