[UPD] dependabot: group aiobotocore, botocore and boto3 updates
Each aiobotocore release accepts only a narrow botocore range, and boto3 pins botocore. Proposed one by one, a botocore bump against an unchanged aiobotocore fails the resolution. The aws group brings the three version updates in one pull request; security fixes still arrive on their own. Dependabot does not solve constraints in a requirements file, so the grouped versions may still need aligning by hand. Checked: the YAML parses. --- FR --- [UPD] dependabot : grouper aiobotocore, botocore et boto3 Chaque version d'aiobotocore n'accepte qu'une plage étroite de botocore, et boto3 épingle botocore. Proposées une à une, une montée de botocore face à un aiobotocore inchangé fait échouer la résolution. Le groupe aws réunit les trois mises à jour de version dans une seule demande de fusion ; les correctifs de sécurité arrivent toujours seuls. Dependabot ne résout pas les contraintes d'un requirements : les versions groupées peuvent encore demander un alignement à la main. Vérifié : le YAML se lit. Assisted-by: Claude Opus 5.5
This commit is contained in:
parent
9d7f0b6a31
commit
a59948238f
1 changed files with 6 additions and 0 deletions
6
.github/dependabot.yml
vendored
6
.github/dependabot.yml
vendored
|
|
@ -22,3 +22,9 @@ updates:
|
|||
# data of every Odoo instance; 1.x leaves pytz free.
|
||||
- dependency-name: "meteostat"
|
||||
update-types: ["version-update:semver-major"]
|
||||
groups:
|
||||
# Each aiobotocore accepts only a narrow botocore range, and boto3 pins
|
||||
# botocore: bumped one by one, each pull request breaks the resolution.
|
||||
# Version updates only; a security fix still arrives on its own.
|
||||
aws:
|
||||
patterns: ["aiobotocore", "botocore", "boto3"]
|
||||
|
|
|
|||
Loading…
Reference in a new issue