-
Notifications
You must be signed in to change notification settings - Fork 0
ci: add dependabot and nix flake update workflows [ENG-11704] #71
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,58 @@ | ||
| # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file | ||
| version: 2 | ||
| updates: | ||
| # Python dependencies (uv/pip) | ||
| - package-ecosystem: pip | ||
| directory: / | ||
| schedule: | ||
| interval: weekly | ||
| day: monday | ||
| time: "09:00" | ||
| timezone: Europe/London | ||
| open-pull-requests-limit: 10 | ||
| commit-message: | ||
| prefix: "chore(deps)" | ||
| labels: | ||
| - dependencies | ||
| - python | ||
| groups: | ||
| dev-dependencies: | ||
| patterns: | ||
| - "pytest*" | ||
| - "ruff" | ||
| - "ty" | ||
| - "pre-commit" | ||
| update-types: | ||
| - minor | ||
| - patch | ||
| ai-frameworks: | ||
| patterns: | ||
| - "openai*" | ||
| - "langchain*" | ||
| - "crewai*" | ||
| - "mcp*" | ||
| update-types: | ||
| - minor | ||
| - patch | ||
|
|
||
| # GitHub Actions | ||
| - package-ecosystem: github-actions | ||
| directory: / | ||
| schedule: | ||
| interval: weekly | ||
| day: monday | ||
| time: "09:00" | ||
| timezone: Europe/London | ||
| open-pull-requests-limit: 5 | ||
| commit-message: | ||
| prefix: "chore(deps)" | ||
| labels: | ||
| - dependencies | ||
| - github-actions | ||
| groups: | ||
| actions: | ||
| patterns: | ||
| - "*" | ||
| update-types: | ||
| - minor | ||
| - patch | ||
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
| @@ -0,0 +1,63 @@ | ||||||
| name: "Scheduled: Nix flake update" | ||||||
|
|
||||||
| on: | ||||||
| schedule: | ||||||
| # Run every Monday at 09:00 UTC (aligns with Dependabot's 09:00 Europe/London schedule in winter; 10:00 Europe/London in summer) | ||||||
| - cron: "0 9 * * 1" | ||||||
| workflow_dispatch: # Allow manual trigger | ||||||
|
|
||||||
| permissions: | ||||||
| contents: write | ||||||
| pull-requests: write | ||||||
|
|
||||||
| jobs: | ||||||
| update-flake: | ||||||
| runs-on: ubuntu-latest | ||||||
| steps: | ||||||
| - name: Checkout repository | ||||||
| uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 | ||||||
|
||||||
| uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The pattern "pre-commit" is included in the dev-dependencies group, but pre-commit is not a Python package managed by pip in this project. It's managed via the git-hooks.nix flake module (see flake.nix). This pattern will not match any Python dependencies and should be removed from the dev-dependencies group.