chore(action): Update reproducible requirements in automated dependency update workflows #8611
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Which issue(s) does this change fix?
N/A - Internal workflow improvement
Why is this change necessary?
When automated dependency update PRs (for app templates hash, aws-sam-translator, and aws_lambda_builders) are created, they only update the dependency in
requirements/base.txtbut don't update the reproducible requirements files (requirements/reproducible-*.txt). This causes theupdate-reproducibles.ymlworkflow to trigger separately, which can lead to race conditions and inconsistent build states.In a worse scenario, this workflow runs on schedule (every 4 hours), compares its changes against what
update-reproducibles.ymlalready committed, and detects a diff. It then force pushes its changes, overwriting whatupdate-reproducibles.ymlmade. This triggersupdate-reproducibles.ymlto kick in again, causing an infinite loop.How does it address the issue?
This PR adds Python 3.11 and uv setup to each automated update job, then runs
make update-reproducible-reqs-uvbefore checking for changes. This ensures:Changes to each job:
actions/setup-python@v6with Python 3.11astral-sh/setup-uv@v7to install uvmake update-reproducible-reqs-uvbeforegit diffWhat side effects does this change have?
Mandatory Checklist
PRs will only be reviewed after checklist is complete
make prpassesmake update-reproducible-reqsif dependencies were changedBy submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.