python / python/release-tools

`dependabot` fails to update some dependencies

Open
#417 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
61
Forks
48
Avg merge
1h 22m
Merged PRs (30d)
4

Description

I noticed that dependabot only updates aiohttp for mypy-requirements and not for requirements and dev-requirements:

  • #362
  • #409
  • #413

Because of this we had to update it manually in the past for the other files:

  • #291
  • #292
  • #328
  • #416

By at the dependabot logs it seems to notice that both requirements and dev-requirements need an update but fails to create a PR, even though the job is completed successfully (despite the errors in the log).

This seems related to the following upstream issue:

The issue doesn't seem to include any workaround, so until we find one or the issue is fixed upstream we will have to keep updating aiohttp (and possibly other deps) manually.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the linked Dependabot job logs and compare how updates are handled for mypy-requirements, requirements, and dev-requirements. Review the related issues and upstream Dependabot issue #13879; done means identifying a workable fix or confirmed workaround that creates updates for the affected dependency files.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, python
Domain
ci-cd, devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.