Skip to content

Latest commit

 

History

History
79 lines (68 loc) · 6.94 KB

update-python-and-pre-commit-dependencies.md

File metadata and controls

79 lines (68 loc) · 6.94 KB
Raw

update-python-and-pre-commit-dependencies.yml

This workflow updates Python development dependencies using the Poetry package manager in-sync with pre-commit hooks when triggered as a part of Dependabot updates for the Python dependencies.

Important

When calling this reusable workflow, the permissions must be set as follows:

permissions:
  contents: write

Note

This workflow uses the following GitHub Actions:

See the Workflow file for the currently used versions of each GitHub Action.

Tip

See the Workflow file for implementation details.

Inputs

Input variable Necessity Description Default
commit-user-name required The name of the user to use when committing changes to the repository.
commit-user-email required The email of the user to use when committing changes to the repository.
dependency-dict optional Specify a valid JSON dictionary of dependency groups to update, where each key is a dependency group name, and each value is a list of dependencies to update within that group, e.g. '{"dev": ["pylint", "ruff"], "tests": ["ruff"]}'. Use an empty string, e.g. "", for dependencies located in the default group' {}
update-pre-commit optional A boolean indicating if the pre-commit hooks should be updated. false
run-pre-commit optional A boolean indicating to run the pre-commit hooks to perform auto-fixing after updating the dependencies. Setting this input to true will also set the update-pre-commit input to true. false
pre-commit-repo-update-skip-list optional A comma-separated list of pre-commit repo urls to skip updates for (only applicable when update-pre-commit=true). ""
pre-commit-hook-skip-list optional A comma-separated list of pre-commit hooks to skip (only applicable when run-pre-commit=true). ""
export-dependency-groups optional A comma-separated list of dependency groups to export to a requirements.txt file. The format is group1,group2:custom-path/to/test/folder. ""

Secrets

Secret variable Necessity Description
checkout-token required The token to use for checking out the repository, must have permissions to write back to the repository.
gpg-signing-key-private required The private GPG key to use for signing the commit.
gpg-signing-key-passphrase required The passphrase for the private GPG key.

Example

name: Update python linting dependencies in-sync with pre-commit
on:
  pull_request:
    branches: [main]
jobs:
  update-python-and-pre-commit-dependencies:
    if: ${{ github.actor == 'dependabot[bot]' && contains(github.head_ref, '/pip/') }}  # Only run the job for Dependabot PRs
    uses: tektronix/python-package-ci-cd/.github/workflows/[email protected]
    with:
      commit-user-name: 'User Name'
      commit-user-email: 'user-email'
      dependency-dict: '{"dev": ["pylint", "ruff"], "tests": ["ruff"]}'  # optional, but without it nothing will get updated by Poetry
      update-pre-commit: true  # optional
      run-pre-commit: true  # optional
      pre-commit-repo-update-skip-list: 'https://github.com/pre-commit/pre-commit-hooks'  # optional
      pre-commit-hook-skip-list: pylint,pyright,pyroma,poetry-audit  # optional, hooks that don't auto-fix things can (and probably should be) skipped
      export-dependency-groups: 'docs,tests:custom-path/to/test/folder'  # optional
    permissions:
      contents: write
    secrets:
      checkout-token: ${{ secrets.CHECKOUT_TOKEN }}
      gpg-signing-key-private: ${{ secrets.GPG_SIGNING_KEY_PRIVATE }}
      gpg-signing-key-passphrase: ${{ secrets.GPG_SIGNING_KEY_PASSPHRASE }}