Skip to content

Fix GitHub dependency graph by adding requirements.txt and dependency configuration#3126

Closed
Copilot wants to merge 3 commits intomasterfrom
copilot/fix-d592b5f2-1946-4789-98e6-ebcc81f19214
Closed

Fix GitHub dependency graph by adding requirements.txt and dependency configuration#3126
Copilot wants to merge 3 commits intomasterfrom
copilot/fix-d592b5f2-1946-4789-98e6-ebcc81f19214

Conversation

Copy link
Contributor

Copilot AI commented Jul 21, 2025

Problem

GitHub's dependency graph is not showing PyPI dependencies or dependents for the "mineru" package, making it difficult to track dependency usage and security vulnerabilities.

Root Cause

While the project correctly uses pyproject.toml for modern Python packaging, GitHub's dependency graph has better support for requirements.txt files for dependency detection and visualization.

Solution

This PR adds the necessary configuration files to enable proper GitHub dependency graph support:

📦 Core Changes

  1. Added requirements.txt - Contains all core dependencies from pyproject.toml in a format GitHub easily parses
  2. Added requirements-dev.txt - Development and optional dependencies for better visibility
  3. Added .github/dependabot.yml - Enables automated dependency monitoring and updates
  4. Added MANIFEST.in - Improves package discovery and file inclusion
  5. Enhanced pyproject.toml - Added descriptive classifiers and metadata URLs
  6. Updated .gitignore - Excludes build artifacts from repository

🔍 Verification

  • ✅ Dependencies synchronized: 18 packages in both pyproject.toml and requirements.txt
  • ✅ Package builds successfully with new configuration
  • ✅ All dependency specifications are syntactically valid
  • ✅ Enhanced package metadata with proper PyPI classifiers

📈 Expected Benefits

After merge, the repository will have:

  • Visible dependency graph showing all PyPI dependencies
  • Automated dependency updates via Dependabot
  • Better package discoverability through enhanced metadata
  • Security vulnerability tracking for dependencies

🔧 Technical Details

# Dependencies are now detectable by GitHub
$ wc -l requirements.txt
18 requirements.txt

# Package metadata is enhanced
$ grep -c "Topic ::" pyproject.toml
3

# Dependabot will monitor dependencies weekly
$ cat .github/dependabot.yml | grep interval
      interval: "weekly"

This change maintains full backward compatibility while adding GitHub-specific optimizations for dependency tracking.


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

@myhloli myhloli marked this pull request as ready for review July 21, 2025 09:26
@dosubot dosubot bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Jul 21, 2025
Co-authored-by: myhloli <11393164+myhloli@users.noreply.github.com>
@dosubot dosubot bot added size:XXL This PR changes 1000+ lines, ignoring generated files. and removed size:XS This PR changes 0-9 lines, ignoring generated files. labels Jul 21, 2025
Co-authored-by: myhloli <11393164+myhloli@users.noreply.github.com>
@dosubot dosubot bot added size:L This PR changes 100-499 lines, ignoring generated files. and removed size:XXL This PR changes 1000+ lines, ignoring generated files. labels Jul 21, 2025
Copilot AI changed the title [WIP] 仓库的Dependency graph中看不到自己依赖其他的pypi库,也看不到别人依赖我们的包"mineru"的情况,帮我分析并解决该问题 Fix GitHub dependency graph by adding requirements.txt and dependency configuration Jul 21, 2025
Copilot AI requested a review from myhloli July 21, 2025 09:34
@myhloli myhloli closed this Jul 21, 2025
@github-actions github-actions bot locked and limited conversation to collaborators Jul 21, 2025
@myhloli myhloli deleted the copilot/fix-d592b5f2-1946-4789-98e6-ebcc81f19214 branch July 22, 2025 13:11
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

size:L This PR changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments