From c66cf1964f14761b6e86cbe2a9977eb77eebd5c3 Mon Sep 17 00:00:00 2001 From: Randolph Sapp Date: Wed, 8 Jul 2026 19:08:16 -0500 Subject: [PATCH 1/2] build: use pip-compile for requirements.txt This tools makes it clear what are implicit and explicit dependencies of this project. In addition to that, it allows for programmatic dependency checking. Signed-off-by: Randolph Sapp --- docker/requirements.txt | 79 ++++++++++++++++++++++++++++++++++++----- 1 file changed, 71 insertions(+), 8 deletions(-) diff --git a/docker/requirements.txt b/docker/requirements.txt index cc9502a82..7ca12df58 100644 --- a/docker/requirements.txt +++ b/docker/requirements.txt @@ -1,40 +1,103 @@ +# +# This file is autogenerated by pip-compile with Python 3.14 +# by the following command: +# +# pip-compile +# alabaster==1.0.0 + # via sphinx annotated-doc==0.0.4 + # via typer annotated-types==0.7.0 + # via pydantic babel==2.18.0 + # via sphinx certifi==2026.5.20 + # via requests charset-normalizer==3.4.7 + # via requests docutils==0.22.4 + # via + # rstcheck-core + # sphinx + # sphinx-rtd-theme idna==3.18 + # via requests imagesize==2.0.0 -Jinja2==3.1.6 + # via sphinx +jinja2==3.1.6 + # via + # -r requirements.in + # sphinx lxml==6.1.1 + # via -r requirements.in markdown-it-py==4.2.0 -MarkupSafe==3.0.3 + # via rich +markupsafe==3.0.3 + # via jinja2 mdurl==0.1.2 + # via markdown-it-py packaging==26.2 + # via sphinx pydantic==2.13.4 -pydantic_core==2.46.4 -Pygments==2.20.0 + # via rstcheck-core +pydantic-core==2.46.4 + # via pydantic +pygments==2.20.0 + # via + # rich + # sphinx requests==2.34.2 + # via sphinx rich==15.0.0 + # via typer roman-numerals==4.1.0 + # via sphinx rstcheck==6.2.5 + # via -r requirements.in rstcheck-core @ git+https://github.com/StaticRocket/rstcheck-core.git@d935498cfc319d62fe2dde3012d81657510f0a90 + # via + # -r requirements.in + # rstcheck shellingham==1.5.4 + # via typer snowballstemmer==3.1.1 -Sphinx==9.1.0 + # via sphinx +sphinx==9.1.0 + # via + # -r requirements.in + # sphinx-copybutton + # sphinx-design + # sphinx-rtd-theme + # sphinxcontrib-jquery sphinx-copybutton==0.5.2 -sphinx_design==0.7.0 -sphinx_rtd_theme==3.1.0 + # via -r requirements.in +sphinx-design==0.7.0 + # via -r requirements.in +sphinx-rtd-theme==3.1.0 + # via -r requirements.in sphinxcontrib-applehelp==2.0.0 + # via sphinx sphinxcontrib-devhelp==2.0.0 + # via sphinx sphinxcontrib-htmlhelp==2.1.0 + # via sphinx sphinxcontrib-jquery==4.1 + # via sphinx-rtd-theme sphinxcontrib-jsmath==1.0.1 + # via sphinx sphinxcontrib-qthelp==2.0.0 + # via sphinx sphinxcontrib-serializinghtml==2.0.0 + # via sphinx typer==0.26.7 + # via rstcheck +typing-extensions==4.15.0 + # via + # pydantic + # pydantic-core + # typing-inspection typing-inspection==0.4.2 -typing_extensions==4.15.0 + # via pydantic urllib3==2.7.0 + # via requests From 08ee726cd479bede958462cb5cdb0fe0ab0d58b3 Mon Sep 17 00:00:00 2001 From: Randolph Sapp Date: Wed, 8 Jul 2026 16:30:43 -0500 Subject: [PATCH 2/2] ci: add dependabot configuration Add a dependabot configuration to automatically manage dependency updates. Should shift this from me to something I can review and unblock more consistently. Signed-off-by: Randolph Sapp --- .github/dependabot.yml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..f48aaf99c --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,26 @@ +--- +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: ".github/workflows" + schedule: + interval: "monthly" + commit-message: + prefix: "ci" + groups: + ci: + patterns: + - "*" + + - package-ecosystem: "pip" + directory: "docker" + allow: + - dependency-type: "all" + schedule: + interval: "monthly" + commit-message: + prefix: "build" + groups: + pip: + patterns: + - "*"