Skip to content

Add Dependabot config for Python dependencies#108

Merged
openshift-merge-bot[bot] merged 1 commit into
openstack-lightspeed:mainfrom
umago:dependabot
May 29, 2026
Merged

Add Dependabot config for Python dependencies#108
openshift-merge-bot[bot] merged 1 commit into
openstack-lightspeed:mainfrom
umago:dependabot

Conversation

@umago
Copy link
Copy Markdown
Contributor

@umago umago commented May 28, 2026

Introduces .github/dependabot.yml to enable weekly tracking of pip package updates and automate security vulnerability patching.

This change pinned the version of existing packages in the requirements.txt. Now Dependabot will be able to detect and propose version bumps for these.

Summary by CodeRabbit

  • Chores

    • Added repository automation to schedule weekly automated dependency updates for Python packages and pinned several backend library versions to specific releases.
  • No user-facing changes

    • This release contains no visible changes to application functionality or UI.

Review Change Stack

@umago umago requested a review from a team as a code owner May 28, 2026 09:45
@openshift-ci openshift-ci Bot requested review from Akrog and lpiwowar May 28, 2026 09:45
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 28, 2026

📝 Walkthrough

Walkthrough

Adds a Dependabot v2 config to schedule weekly pip updates at the repo root and updates requirements.txt to pin versions of defusedxml, packaging, lxml, and html2text.

Changes

Dependency updates

Layer / File(s) Summary
Dependabot pip weekly config
.github/dependabot.yml
Adds Dependabot v2 config with a weekly update job for the pip ecosystem at directory: "/".
Pin selected Python dependencies
requirements.txt
Pins versions for defusedxml, packaging, lxml, and html2text (previously unpinned).

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

Suggested labels

lgtm

Suggested reviewers

  • Akrog

Poem

I’m a rabbit with a tiny pen,
I pin the hops of package den,
Weekly scans and versions neat,
Dependencies all set and sweet,
🐰📦

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately summarizes the main change: adding Dependabot configuration for managing Python dependencies.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@umago
Copy link
Copy Markdown
Contributor Author

umago commented May 28, 2026

Failure is unrelated:

2026-05-28 09:59:40,229 - WARNING - URL not reachable: https://docs.openstack.org/trove/2025.2/contributor/testing.html (Title: "Trove Unit Tests", File path: /rag-content/openstack-docs-plaintext/trove/2025.2_docs/contributor/testing.txt)

@omkarjoshi0304
Copy link
Copy Markdown
Contributor

Thanks for the CI fix , PR LGTM!

@umago
Copy link
Copy Markdown
Contributor Author

umago commented May 28, 2026

/retest

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 28, 2026

Actionable comments posted: 0

Comment thread .github/dependabot.yml Outdated
Introduces .github/dependabot.yml to enable weekly tracking of pip
package updates and automate security vulnerability patching.

This change pinned the version of existing packages in the
requirements.txt. Now Dependabot will be able to detect and propose
version bumps for these.

Signed-off-by: Lucas Alvares Gomes <lucasagomes@gmail.com>
Copy link
Copy Markdown
Contributor

@lpiwowar lpiwowar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

LGTM, thanks!

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 28, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lpiwowar, umago

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 28, 2026

Actionable comments posted: 0

@umago
Copy link
Copy Markdown
Contributor Author

umago commented May 28, 2026

/retest

1 similar comment
@umago
Copy link
Copy Markdown
Contributor Author

umago commented May 28, 2026

/retest

@lpiwowar
Copy link
Copy Markdown
Contributor

/retest

It looks like the links were only temporarily unavailable. When I click on them now they work:

2026-05-28 19:00:13,866 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/archive/storlets_docker_gateway.html (Title: "StorletsDockerGateway", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/archive/storlets_docker_gateway.txt)
2026-05-28 19:00:13,868 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/archive/storlets_management.html (Title: "Introduction", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/archive/storlets_management.txt)
2026-05-28 19:00:13,933 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/contributing.html (Title: "Contributing", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/contributing.txt)
2026-05-28 19:00:13,934 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/engine_dev_installation.html (Title: "Installing a Development Environment", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/engine_dev_installation.txt)
2026-05-28 19:00:14,205 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/getting_started.html (Title: "Getting Started", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/getting_started.txt)
2026-05-28 19:00:14,207 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/engine_dev_tests.html (Title: "Development and Testing Guide", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/engine_dev_tests.txt)
2026-05-28 19:00:14,270 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/installation.html (Title: "Storlets Installation", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/installation.txt)
2026-05-28 19:00:14,270 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/index.html (Title: "Welcome to storlets' documentation!", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/index.txt)
2026-05-28 19:00:14,540 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/readme.html (Title: "Storlets", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/readme.txt)
2026-05-28 19:00:14,541 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/s2aio.html (Title: "s2aio", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/s2aio.txt)
2026-05-28 19:00:14,611 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/s2aio_dev_host_include.html (Title: "Make sure to have a user that can sudo without a password. With that", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/s2aio_dev_host_include.txt)
2026-05-28 19:00:14,614 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/storlet_engine_overview.html (Title: "Storlet Engine Overview", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/storlet_engine_overview.txt)
2026-05-28 19:00:14,876 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/usecases/usecase_chip_bakers.html (Title: "The Chip Bakers Use Case", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/usecases/usecase_chip_bakers.txt)
2026-05-28 19:00:14,876 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/storlets_terminology.html (Title: "Storlets Terminology", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/storlets_terminology.txt)
2026-05-28 19:00:14,956 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/usecases/usecase_secondary_storage.html (Title: "Queryable "Secondary Storage" Data", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/usecases/usecase_secondary_storage.txt)
2026-05-28 19:00:14,963 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/usecases/usecase_security.html (Title: "Data Privacy", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/usecases/usecase_security.txt)
2026-05-28 19:00:15,231 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/writing_and_deploying_java_storlets.html (Title: "Java Storlet Writing and Deploying Guide", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/writing_and_deploying_java_storlets.txt)
2026-05-28 19:00:15,234 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/writing_and_deploying_python_storlets.html (Title: "Python Storlet Writing and Deployment Guideline", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/writing_and_deploying_python_storlets.txt)
2026-05-28 19:00:15,310 - WARNING - URL not reachable: https://docs.openstack.org/storlets/2026.1/writing_and_deploying_storlets.html (Title: "Storlet writing and deploying guide", File path: /rag-content/openstack-docs-plaintext/storlets/2026.1_docs/writing_and_deploying_storlets.txt)
2026-05-28 19:00:15,317 - WARNING - URL not reachable: https://docs.openstack.org/swift/2026.1/account.html (Title: "Account", File path: /rag-content/openstack-docs-plaintext/swift/2026.1_docs/account.txt)
2026-05-28 19:00:15,585 - WARNING - URL not reachable: https://docs.openstack.org/swift/2026.1/admin/index.html (Title: "OpenStack Swift Administrator Guide", File path: /rag-content/openstack-docs-plaintext/swift/2026.1_docs/admin/index.txt)
...
...
...

@openshift-merge-bot openshift-merge-bot Bot merged commit 77c8361 into openstack-lightspeed:main May 29, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants