updated depnedabot to only check for security issues, fixed more python dependabot updates, new docker image

Author: yvess

.github/dependabot.yml

@@ -2,10 +2,18 @@ version: 2
 updates:
   - package-ecosystem: "npm"
     directory: "/vue/docker/vue/package/00"
+    allowed_updates:
+      - match:
+          update_type: "security"
+    open-pull-requests-limit: 10
     schedule:
       interval: "daily"
 
   - package-ecosystem: "pip"
-    directory: "/django/docker/django/requirements/00"
+    directory: "/django/docker/django/requirements/01"
+    allowed_updates:
+      - match:
+          update_type: "security"
+    open-pull-requests-limit: 10
     schedule:
       interval: "daily"

django/Makefile

@@ -1,5 +1,5 @@
-DJANGO_VERSION=3.1.12
-DJANGO_VERSION_PREV=3.1.4
+DJANGO_VERSION=3.1.12a
+DJANGO_VERSION_PREV=3.1.12
 NOTTY=$(shell command [ "$$DOCKER_NOTTY" = YES ] && echo "-T")
 DOCKER_EXEC=$(shell command -v docker > /dev/null && echo "docker-compose exec $(NOTTY) django")
 SHELL := /bin/bash

django/docker/django/Dockerfile

@@ -65,6 +65,11 @@ RUN apk add --no-cache \
         zlib-dev \
     && pip3 cache purge
 
+# python requirements 01 layer, depandabot updates
+COPY ./requirements/01/requirements.txt /tmp/requirements.txt
+RUN cd /opt && pip3 install -r /tmp/requirements.txt \
+    && pip3 cache purge
+
 COPY s6/etc/services.d /etc/services.d
 COPY s6/etc/cont-init.d /etc/cont-init.d
 ENTRYPOINT ["/init"]

django/docker/django/requirements/01/requirements.txt

@@ -0,0 +1,71 @@
+aniso8601==7.0.0
+appdirs==1.4.4
+APScheduler==3.6.3
+asgiref==3.4.1
+astroid==2.4.2
+attrs==20.3.0
+beautifulsoup4==4.9.3
+blessings==1.7
+bpython==0.20.1
+certifi==2020.12.5
+chardet==4.0.0
+click==8.0.1
+curtsies==0.3.4
+Django==3.1.12
+django-apscheduler==0.5.1
+django-cors-headers==3.7.0
+django-filter==2.4.0
+django-json-widget==1.0.1
+django-solo==1.1.5
+django-sortedm2m==3.0.2
+-e git+https://github.com/svleeuwen/sortedm2m-filter-horizontal-widget.git@4ce03f6b7e6022014838afb4a8aa4691fceb9e94#egg=django_sortedm2m_filter_horizontal_widget
+djangorestframework==3.12.2
+future==0.18.2
+graphene==2.1.8
+graphene-django==2.14.0
+graphql-core==2.3.2
+graphql-relay==2.0.1
+greenlet==0.4.17
+gunicorn==20.1.0
+h11==0.11.0
+httptools==0.1.1
+idna==2.10
+iniconfig==1.1.1
+isort==5.6.4
+jsonslicer==0.1.6
+lazy-object-proxy==1.4.3
+mccabe==0.6.1
+more-itertools==8.6.0
+olefile==0.46
+ordered-set==4.0.1
+packaging==20.9
+Pillow==8.2.0
+pluggy==0.13.1
+promise==2.3
+psycopg2==2.8.6
+py==1.10.0
+Pygments==2.7.4
+pylint==2.6.0
+pylint-django==2.3.0
+pylint-plugin-utils==0.6
+pyparsing==2.4.7
+pytest==6.2.1
+pytest-django==4.1.0
+pytz==2020.5
+requests==2.25.1
+Rx==1.6.1
+singledispatch==3.6.2
+six==1.15.0
+sorl-thumbnail==12.7.0
+soupsieve==2.1
+sqlparse==0.4.1
+text-unidecode==1.3
+toml==0.10.2
+tzlocal==2.1
+urllib3==1.26.5
+uvicorn==0.14.0
+uvloop==0.14.0
+wcwidth==0.2.5
+websockets==9.1
+wrapt==1.12.1
+yapf==0.30.0

docker-images.yml

@@ -10,7 +10,7 @@ services:
     hostname: vue
 
   django:
-    image: smartuse/gemeindescan-webui-django:3.1.12
+    image: smartuse/gemeindescan-webui-django:3.1.12a
     hostname: django
 
   www: