diff --git a/.github/workflows/python-app.yml b/.github/workflows/python-app.yml index 5622c76ae..97bd0a3bc 100644 --- a/.github/workflows/python-app.yml +++ b/.github/workflows/python-app.yml @@ -29,6 +29,10 @@ jobs: - name: Install dependencies run: | python -m pip install --upgrade pip # Upgrade pip to the latest version + pip install pip-tools # run pip-compile silently to create requirements.txt in memory + pip-compile --quiet requirements.in -o requirements.txt + # command will exit with error code if there's a diff + git diff --exit-code requirements.txt if [ -f requirements.txt ]; then pip install -r requirements.txt; fi - name: Lint with flake8 run: | diff --git a/requirements.in b/requirements.in index 35f31a67b..d991da918 100644 --- a/requirements.in +++ b/requirements.in @@ -14,7 +14,7 @@ scikit-learn==1.3.0 xgboost==1.7.6 # Tooling -dvc[all] +dvc[all]==3.61.0 flake8 pytest pytest-html diff --git a/requirements.txt b/requirements.txt index a342ef412..03be0c1ad 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,35 +1,8 @@ -# requirements.txt from pip-tools -dvc==3.23.0 -dvc[all]==3.23.0 -flake8==6.1.0 -numpy==1.23.5 -pandas==2.0.3 -ydata-profiling==4.9.0 -scikit-learn==1.3.0 -xgboost==1.7.6 -pytest==7.4.0 -pytest_html==4.0.0 -requests==2.32.0 -fastapi==0.115.3 -uvicorn==0.27.0 -starlette>=0.40.0,<0.42.0 -httpx==0.25.0 -pydantic>=2 -gunicorn==23.0.0 -matplotlib==3.6.2 -seaborn==0.12.2 -scipy==1.10.1 -colorama==0.4.6 -joblib==1.3.2 -# --- for safety reasons by Snyk to avoid a vulnerability -pillow>=10.3.0 -setuptools>=78.1.1 -fonttools>=4.43.0 -zipp>=3.19.1 -======= # -# This file part is autogenerated by pip-compile with Python 3.11 via -# pip-compile requirements.in +# This file is autogenerated by pip-compile with Python 3.11 +# by the following command: +# +# pip-compile requirements.in # adlfs==2024.12.0 # via dvc-azure @@ -757,4 +730,4 @@ zipp==3.23.0 # via -r requirements.in # The following packages are considered to be unsafe in a requirements file: -# setuptools - exits because of udacity history reason +# setuptools