diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..772f29e --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,31 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + open-pull-requests-limit: 5 + labels: + - "dependencies" + groups: + python-deps: + patterns: + - "*" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + labels: + - "dependencies" + groups: + actions: + patterns: + - "*" diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml index 12fd66d..682e21b 100644 --- a/.github/workflows/unit-tests.yml +++ b/.github/workflows/unit-tests.yml @@ -1,7 +1,6 @@ name: Unit tests on: - push: pull_request: jobs: @@ -46,9 +45,11 @@ jobs: with: python-version: ${{ matrix.python-version }} cache: pip - + - name: Install pinned dependencies + run: pip install -r requirements-dev.txt + - name: Install package - run: python -m pip install -e . + run: python -m pip install -e . --no-deps - name: Run unit tests - run: python -m unittest discover -s tests \ No newline at end of file + run: python -m unittest discover -s tests diff --git a/requirements-dev.txt b/requirements-dev.txt new file mode 100644 index 0000000..8792607 --- /dev/null +++ b/requirements-dev.txt @@ -0,0 +1,38 @@ +# This file was autogenerated by uv via the following command: +# uv pip compile --universal -o requirements-dev.txt pyproject.toml +anyio==4.14.2 ; sys_platform != 'emscripten' + # via httpx2 +cffi==2.1.1 ; platform_python_implementation != 'PyPy' + # via cryptography +cryptography==50.0.0 + # via + # httpx2-kerberos (pyproject.toml) + # pyspnego +decorator==5.3.1 ; sys_platform != 'win32' + # via gssapi +gssapi==1.11.1 ; sys_platform != 'win32' + # via pyspnego +h11==0.16.0 ; sys_platform != 'emscripten' + # via httpcore2 +httpcore2==2.12.0 ; sys_platform != 'emscripten' + # via httpx2 +httpx2==2.12.0 + # via httpx2-kerberos (pyproject.toml) +httpx2-jsfetch==1.0 ; sys_platform == 'emscripten' + # via httpx2 +idna==3.19 + # via + # anyio + # httpx2 +krb5==0.10.0 ; sys_platform != 'win32' + # via pyspnego +pycparser==3.0 ; implementation_name != 'PyPy' and platform_python_implementation != 'PyPy' + # via cffi +pyspnego==0.12.1 + # via httpx2-kerberos (pyproject.toml) +sspilib==0.6.0 ; sys_platform == 'win32' + # via pyspnego +truststore==0.10.4 ; sys_platform != 'emscripten' + # via + # httpcore2 + # httpx2