ci(pip): externalize dependences

Author: thomasleplus

.github/dependabot.yml

@@ -7,6 +7,14 @@ updates:
       interval: "daily"
     commit-message:
       prefix: build(deps)
+  - package-ecosystem: "pip"
+    directory: "/csv"
+    schedule:
+      interval: "daily"
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: build(deps)
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

csv/Dockerfile

@@ -30,10 +30,11 @@ RUN apk upgrade --no-cache \
     && apk cache --no-cache clean \
     && rm -rf /var/cache/apk/*
 
+COPY requirements.txt requirements.txt
+
 RUN pipx ensurepath --global \
-    && pipx install --global \
-    csvkit==2.1.0 \
-    remarshal==1.2.0
+    && xargs -a requirements.txt -n 1 pipx install --global \
+    && rm -f requirements.txt
 
 RUN adduser \
   --home "${USER_HOME}" \

csv/requirements.txt

@@ -0,0 +1,2 @@
+csvkit==2.1.0
+remarshal==1.2.0