erplibre/.github/dependabot.yml
Mathieu Benoit 409c8a57bd [UPD] dependabot: ignore meteostat major updates
Every meteostat 2.x release, 2.0.0 to 2.1.5, requires pytz <2024.0.
Odoo leaves pytz unpinned, so the resolution takes the current release
and meteostat 2.x makes it fail; forcing pytz down instead would freeze
the timezone data of every Odoo instance. meteostat 1.x leaves pytz
free, so only its minor and patch updates are proposed.
Checked: requires_dist of each 2.x release on PyPI; the YAML parses.

--- FR ---

[UPD] dependabot : ignorer les versions majeures de meteostat

Chaque version 2.x de meteostat, de 2.0.0 à 2.1.5, exige pytz <2024.0.
Odoo laisse pytz libre, la résolution prend donc la version courante et
meteostat 2.x la fait échouer ; forcer pytz vers le bas figerait les
données de fuseaux horaires de toute instance Odoo. meteostat 1.x laisse
pytz libre : seules ses versions mineures et correctives sont proposées.
Vérifié : requires_dist de chaque version 2.x sur PyPI ; le YAML se lit.

Assisted-by: Claude Opus 5.5
2026-09-25 02:54:44 -04:00

24 lines
858 B
YAML

version: 2
updates:
# Security updates reuse this entry only when its directory matches the
# manifest's own; they scan requirement/ as "/requirement", so both are listed.
- package-ecosystem: "pip"
directories:
- "/"
- "/requirement"
schedule:
interval: "daily"
# Odoo versions kept only as migration sources: their pins stay frozen.
# Globs cover requirements, ignore_requirements, pyproject and poetry.lock.
exclude-paths:
- "**/*odoo12.0_*"
- "**/*odoo13.0_*"
- "**/*odoo14.0_*"
- "**/*odoo15.0_*"
- "**/*odoo16.0_*"
- "**/*odoo17.0_*"
ignore:
# meteostat 2.x caps pytz below 2024, which would freeze the timezone
# data of every Odoo instance; 1.x leaves pytz free.
- dependency-name: "meteostat"
update-types: ["version-update:semver-major"]