Mathieu Benoit
a59948238f
Each aiobotocore release accepts only a narrow botocore range, and boto3 pins botocore. Proposed one by one, a botocore bump against an unchanged aiobotocore fails the resolution. The aws group brings the three version updates in one pull request; security fixes still arrive on their own. Dependabot does not solve constraints in a requirements file, so the grouped versions may still need aligning by hand. Checked: the YAML parses. --- FR --- [UPD] dependabot : grouper aiobotocore, botocore et boto3 Chaque version d'aiobotocore n'accepte qu'une plage étroite de botocore, et boto3 épingle botocore. Proposées une à une, une montée de botocore face à un aiobotocore inchangé fait échouer la résolution. Le groupe aws réunit les trois mises à jour de version dans une seule demande de fusion ; les correctifs de sécurité arrivent toujours seuls. Dependabot ne résout pas les contraintes d'un requirements : les versions groupées peuvent encore demander un alignement à la main. Vérifié : le YAML se lit. Assisted-by: Claude Opus 5.5
30 lines
1.1 KiB
YAML
30 lines
1.1 KiB
YAML
version: 2
|
|
updates:
|
|
# Security updates reuse this entry only when its directory matches the
|
|
# manifest's own; they scan requirement/ as "/requirement", so both are listed.
|
|
- package-ecosystem: "pip"
|
|
directories:
|
|
- "/"
|
|
- "/requirement"
|
|
schedule:
|
|
interval: "daily"
|
|
# Odoo versions kept only as migration sources: their pins stay frozen.
|
|
# Globs cover requirements, ignore_requirements, pyproject and poetry.lock.
|
|
exclude-paths:
|
|
- "**/*odoo12.0_*"
|
|
- "**/*odoo13.0_*"
|
|
- "**/*odoo14.0_*"
|
|
- "**/*odoo15.0_*"
|
|
- "**/*odoo16.0_*"
|
|
- "**/*odoo17.0_*"
|
|
ignore:
|
|
# meteostat 2.x caps pytz below 2024, which would freeze the timezone
|
|
# data of every Odoo instance; 1.x leaves pytz free.
|
|
- dependency-name: "meteostat"
|
|
update-types: ["version-update:semver-major"]
|
|
groups:
|
|
# Each aiobotocore accepts only a narrow botocore range, and boto3 pins
|
|
# botocore: bumped one by one, each pull request breaks the resolution.
|
|
# Version updates only; a security fix still arrives on its own.
|
|
aws:
|
|
patterns: ["aiobotocore", "botocore", "boto3"]
|