Skip to content

Conversation

Copy link
Contributor

Copilot AI commented May 25, 2025

This PR implements a solution to ensure Dependabot consistently updates dependencies in both the root project and the Cookiecutter template. The changes include:

Changes

  1. Added template dependency groups to root pyproject.toml

    • Created a new [tool.poetry.group.template.dependencies] group containing all the template project dependencies
    • Created a [tool.poetry.group.template-dev.dependencies] group for template dev dependencies
    • This allows Dependabot to target these dependencies in the root file
  2. Created dependency synchronization workflow

    • Added new GitHub workflow that runs on PRs when pyproject.toml is modified
    • Implemented a Python script that extracts dependencies from root pyproject.toml and updates the template pyproject.toml
    • Added logic to run poetry lock in the template directory to update the lock file
    • The workflow automatically commits changes back to the PR
  3. Added documentation

    • Updated README with a new "Dependency Management" section explaining how dependencies are managed and synchronized

How it works

  1. When Dependabot creates a PR to update dependencies in the root project, the sync workflow runs automatically
  2. The workflow extracts the updated dependencies from the root file and updates the corresponding dependencies in the template
  3. The template's poetry.lock file is also regenerated to reflect the updates
  4. Changes are committed back to the PR

This solution ensures that both the root project and template project dependencies are kept in sync, while preserving the conditional template syntax in the template's pyproject.toml file.

Fixes #502.

Warning

Firewall rules blocked me from connecting to one or more addresses

I tried to connect to the following addresses, but was blocked by firewall rules:

  • cdn.fwupd.org
    • Triggering command: /usr/bin/fwupdmgr refresh (dns block)

If you need me to access, download, or install something from one of these locations, you can either:


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Copilot AI changed the title [WIP] Dependabot updating template dependencies Implement Dependabot template dependency synchronization May 25, 2025
Copilot AI requested a review from lucasrcezimbra May 25, 2025 21:15
Copilot finished work on behalf of lucasrcezimbra May 25, 2025 21:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dependabot updating template dependencies

2 participants