Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automatically keep dependencies up-to-date #604

Open
bkeryan opened this issue Jun 25, 2024 · 0 comments
Open

Automatically keep dependencies up-to-date #604

bkeryan opened this issue Jun 25, 2024 · 0 comments

Comments

@bkeryan
Copy link
Collaborator

bkeryan commented Jun 25, 2024

I think we should keep poetry.lock up-to-date. Currently, we only update poetry.lock when editing dependencies in pyproject.toml, and this leads to upgrading locked dependencies when making an unrelated change. For example, @WayneDroid added TDMS examples in #594, and this required new dependencies, so he updated poetry.lock. This upgraded to NumPy 2.0, which would have caused test failures if they hadn't already been addressed.

Also, I think we should keep GitHub actions up-to-date. As mentioned in #464 , older versions of upload-artifact and download-artifact will be deprecated this year. This repo's GitHub workflows may be using outdated versions of other GitHub actions as well.

This repo has Dependabot enabled, but it only upgrades dependencies when there is a security vulnerability. Also, it has a bug that causes it to promote optional dependencies to required.

We have been using Renovate for the measurement-plugin-python, measurement-plugin-labview, and ni-apis repos. I think https://github.com/ni/measurement-plugin-python/blob/main/.github/renovate.json would be a good starting point.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant