Skip to content

Dependabot updating template dependencies #502

@lucasrcezimbra

Description

@lucasrcezimbra

Context

Dependabot is currently only updating the projects specified in the root pyproject.toml. To ensure all project dependencies are consistently updated, we need to extend this functionality to include dependencies located in the {{cookiecutter.project_slug}}/pyproject.toml. This will require creating a new workflow that runs in every PR and copies dependencies from the root pyproject.toml to {{cookiecutter.project_slug}}/pyproject.toml and runs poetry lock to lock the dependencies.

Acceptance Criteria

  • Add all dependencies from the root {{cookiecutter.project_slug}}/pyproject.toml to pyproject.toml in a separated group.
  • Implement a new workflow that:
    • Copies dependencies from the root pyproject.toml to {{cookiecutter.project_slug}}/pyproject.toml.
    • Executes poetry lock in the subdirectory to update the poetry.lock file.
    • It should run in every PR.
  • Verify that dependabot updates trigger for dependencies in both the root and {{cookiecutter.project_slug}}/pyproject.toml.

Out of Scope

  • Changes to dependency management tools other than Poetry.
  • Modifications to any non-Python dependency files in the repository.

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions