Skip to content
This repository has been archived by the owner on Aug 26, 2022. It is now read-only.

Configure Dependabot or Renovate to monitor Python dependencies #6175

Closed
callahad opened this issue Dec 2, 2019 · 2 comments
Closed

Configure Dependabot or Renovate to monitor Python dependencies #6175

callahad opened this issue Dec 2, 2019 · 2 comments
Assignees
Labels
comp: workflow Component: Workflow (Developer Experience, Local Environments, Process) KR: Operational Necessity This issue is required to keep the site running properly p3 Low Priority: Some time in the future status: blocked Status: Blocked by another issue

Comments

@callahad
Copy link
Contributor

callahad commented Dec 2, 2019

Blocked by dependabot/dependabot-core#1556 or renovatebot/renovate#5051; we can move forward once either one is resolved.

Once we're on Poetry (#6174), we should configure Dependabot or Renovate to automatically send pull requests keeping our Python dependencies up to date. This would improve Kuma's security and sustainability by reducing its ongoing maintenance burden.

@callahad callahad added status: blocked Status: Blocked by another issue p3 Low Priority: Some time in the future comp: workflow Component: Workflow (Developer Experience, Local Environments, Process) labels Dec 2, 2019
@jmswisher jmswisher added the KR: Operational Necessity This issue is required to keep the site running properly label Dec 5, 2019
@ghost ghost assigned ghost and callahad and unassigned ghost Jan 8, 2020
@callahad
Copy link
Contributor Author

Blocked by dependabot/dependabot-core#1556

Dependabot does not current support Poetry >= 1.0

@callahad callahad changed the title Configure Dependabot Configure Dependabot or Renovate to monitor Python dependencies Feb 6, 2020
@callahad
Copy link
Contributor Author

callahad commented Feb 6, 2020

Renovate would also be fine, but fails on Python 3.8: renovatebot/renovate#5051.

We'll go with whichever solution gets working with Python 3.8 and Poetry 1.0 first.

@caugner caugner closed this as completed Aug 26, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
comp: workflow Component: Workflow (Developer Experience, Local Environments, Process) KR: Operational Necessity This issue is required to keep the site running properly p3 Low Priority: Some time in the future status: blocked Status: Blocked by another issue
Projects
None yet
Development

No branches or pull requests

3 participants