-
Notifications
You must be signed in to change notification settings - Fork 2
Open
Labels
Description
Context
Dependabot is currently only updating the projects specified in the root pyproject.toml. To ensure all project dependencies are consistently updated, we need to extend this functionality to include dependencies located in the {{cookiecutter.project_slug}}/pyproject.toml. This will require creating a new workflow that runs in every PR and copies dependencies from the root pyproject.toml to {{cookiecutter.project_slug}}/pyproject.toml and runs poetry lock to lock the dependencies.
Acceptance Criteria
- Add all dependencies from the root
{{cookiecutter.project_slug}}/pyproject.tomltopyproject.tomlin a separated group. - Implement a new workflow that:
- Copies dependencies from the root
pyproject.tomlto{{cookiecutter.project_slug}}/pyproject.toml. - Executes
poetry lockin the subdirectory to update thepoetry.lockfile. - It should run in every PR.
- Copies dependencies from the root
- Verify that dependabot updates trigger for dependencies in both the root and
{{cookiecutter.project_slug}}/pyproject.toml.
Out of Scope
- Changes to dependency management tools other than Poetry.
- Modifications to any non-Python dependency files in the repository.
Copilot