ci(pip): externalize dependencies

Author: thomasleplus

.github/dependabot.yml

@@ -7,6 +7,14 @@ updates:
       interval: "daily"
     commit-message:
       prefix: build(deps)
+  - package-ecosystem: "pip"
+    directory: "/json"
+    schedule:
+      interval: "daily"
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: build(deps)
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

json/Dockerfile

@@ -33,11 +33,11 @@ RUN apk upgrade --no-cache \
     && apk cache --no-cache clean \
     && rm -rf /var/cache/apk/*
 
+COPY requirements.txt /tmp/requirements.txt
+
 RUN pipx ensurepath --global \
-    && pipx install --global \
-    csvkit==2.1.0 \
-    jsonfmt==0.2.7 \
-    remarshal==1.2.0
+    && xargs -a /tmp/requirements.txt -n 1 pipx install --global \
+    && rm -f /tmp/requirements.txt
 
 RUN npm install -g \
     [email protected] \

json/requirements.txt

@@ -0,0 +1,3 @@
+csvkit==2.1.0
+jsonfmt==0.2.7
+remarshal==1.2.0