github-actions/pnl-install: Check if a newly bumped dependency is rol…

…led back during installation

Signed-off-by: Jan Vesely <[email protected]>

.github/actions/install-pnl/action.yml

@@ -48,6 +48,16 @@ runs:
           [[ ${{ runner.os }} = Windows* ]] && pip install "pywinpty<1" "terminado<0.10"
         fi
 
+    - name: Install updated package
+      if: ${{ startsWith(github.head_ref, 'dependabot/pip') }}
+      shell: bash
+      id: new_package
+      run: |
+        export NEW_PACKAGE=`echo '${{ github.head_ref }}' | cut -f 4 -d/ | sed 's/-gt.*//' | sed 's/-lt.*//'`
+        echo "::set-output name=new_package::$NEW_PACKAGE"
+        pip install "`grep $NEW_PACKAGE requirements*.txt | head -n1`"
+        pip show "$NEW_PACKAGE" | grep 'Version' | tee new_version.deps
+
     - name: Python dependencies
       shell: bash
       run: |
@@ -66,3 +76,10 @@ runs:
             pip cache remove -v $P || true
           fi
         done
+
+    - name: Check updated package
+      if: ${{ startsWith(github.head_ref, 'dependabot/pip') }}
+      shell: bash
+      run: |
+        pip show ${{ steps.new_package.outputs.new_package }} | grep 'Version' | tee installed_version.deps
+        diff new_version.deps installed_version.deps || echo "::error Package version restricted by dependencies: ${{ steps.new_package.outputs.new_package }}"