-
Notifications
You must be signed in to change notification settings - Fork 5
add pipfile.lock so that dependabot can detect versions #148
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
Adjust action to use an up-to-date version of ubuntu
update docker compose command
|
@ldko @somexpert Sorry for all of the commits. Dependabot needs a Would we prefer a Pipfile.lock? Or a pyproject.toml / pyproject.lock instead? |
|
@ldko @somexpert Hi! This is ready for review. I’ve added a pyproject.toml to manage dependencies and environments and integrated Poetry. Poetry now handles dependency installation and uses poetry.lock for locking versions. Also it is Dependabot readable! Several redundant files have been removed and their configuration consolidated into pyproject.toml:
I’ve also updated Docker Compose to install and use Poetry inside the container. There should be no changes required to the existing workflow for installation or running tests. |
Dependabot needs a .lock file to determine dependency versions. There are other types of .lock files supported, but Pipfile.lock was the easiest to create as it supports requirements.txt. Seeing if Dependabot will the newly added files and suggestion upgrades.