Skip to content
This repository has been archived by the owner on Sep 16, 2024. It is now read-only.

Releases: lsst-sqre/neophile

2.0.1

07 Jul 22:47
@rra rra
2.0.1
This tag was signed with the committer’s verified signature. The key has expired.
rra Russ Allbery
GPG key ID: 7D80315C5736DE75
Expired
Learn about vigilant mode.
9073788
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
2.0.1 Latest
Latest

Bug fixes

  • Pin Pydantic to version 1.x for now. neophile will require changes to work properly with Pydantic 2.x, which will be done after Safir adds support for it.

What's Changed

  • DM-39919: Pin Pydantic to 1.x versions by @rra in #241
  • DM-39919: Prepare 2.0.1 release by @rra in #242

Full Changelog: 2.0.0...2.0.1

Contributors

rra
Assets 2
Loading

2.0.0

07 Jul 22:23
@rra rra
2.0.0
This tag was signed with the committer’s verified signature. The key has expired.
rra Russ Allbery
GPG key ID: 7D80315C5736DE75
Expired
Learn about vigilant mode.
592e99a
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
2.0.0

Backwards-incompatible changes

  • The NEOPHILE_COMMIT_NAME environment variable is no longer supported. Instead, NEOPHILE_USERNAME configures the GitHub username of the running instantiation of neophile, used as both the name for Git commits and to construct the email address unless NEOPHILE_COMMIT_EMAIL is given. NEOPHILE_USERNAME defaults to neophile-square[bot], the instantiation of neophile for the lsst-sqre organization.

New features

  • Setting NEOPHILE_COMMIT_EMAIL is now optional. If not set, the UID of the GitHub user from NEOPHILE_USERNAME is retrieved from the GitHub API and used to form a standard GitHub no-replay email address.

Bug fixes

  • Use the GitHub App installation token when pushing Git changes in preparation for creating a PR rather than using the default GitHub Actions token. If the branch was pushed with the GitHub Actions token, further GitHub Actions refuse to run on that branch to avoid creating a loop, but we need GitHub Actions to run so that the dependency update PR can be automerged.

What's Changed

  • DM-39627: Improve GitHub Actions examples by @rra in #234
  • DM-39627: Fix comment in sample periodic workflow by @rra in #235
  • [neophile] Update dependencies by @sqrbot in #236
  • DM-39919: Push Git branches using the installation token by @rra in #237
  • DM-39919: Dynamically construct commit email address by @rra in #238
  • [neophile] Update dependencies by @neophile-square in #239
  • DM-39919: Prepare release 2.0.0 by @rra in #240

Full Changelog: 1.0.0...2.0.0

Contributors

rra and sqrbot
Assets 2
Loading

1.0.0

16 Jun 22:50
@rra rra
1.0.0
This tag was signed with the committer’s verified signature. The key has expired.
rra Russ Allbery
GPG key ID: 7D80315C5736DE75
Expired
Learn about vigilant mode.
dba91ab
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
1.0.0

Backwards-incompatible changes

  • neophile is now intended to be run either via GitHub Actions or on a local checkout, and never as a Kubernetes service. The neophile process command, the configuration specific to that command (work area, lists of repositories), and support for running inside a virtualenv have been removed.
  • When creating PRs, neophile now must be configured as a GitHub App with a suitable application ID and private key in environment variables.
  • neophile no longer provides Docker images and instead is now a conventional Python package installable from PyPI.
  • Support for Helm and Kustomize dependency checking and updating has been removed, along with the configuration options for Helm chart caching and version patterns in Helm charts. Mend Renovate and Dependabot support Helm and Kustomize dependency checking with more features, and we haven't used this support in several years.
  • Add a new neophile update command that updates known dependencies in the provided tree and (if the --pr flag is given) creates a GitHub pull request. This replaces the --update and --pr flags to neophile analyze.
  • When creating PRs, neophile no longer embeds the GitHub username and token in the remote URL. It instead uses the existing origin remote and assumes Git operations are already authenticated.
  • Name and email address are now used only for Git commits, so the names of the environment variables to set them have changed accordingly to NEOPHILE_COMMIT_NAME and NEOPHILE_COMMIT_EMAIL.

New features

  • Add a new neophile check command that checks to see if all dependencies are up-to-date and exits with a non-zero status and messages to standard error if they are not. This is intended for use as a GitHub Actions check.
  • The types of dependencies to analyze may now be specified as command-line arguments to neophile analyze (and the new neophile check and neophile update commands). The default continues to be to analyze all known dependencies.

Bug fixes

  • neophile analyze now prints nothing if no pending updates were found, and omits dependency types with no pending updates from its output.

Other changes

  • neophile now uses the Ruff linter instead of flake8 and isort.
  • The neophile change log is now maintained using scriv.
  • neophile no longer creates a separate remote for pusing PRs and instead uses the origin remote directly.

What's Changed

  • [neophile] Update dependencies by @sqrbot in #192
  • [neophile] Update dependencies by @sqrbot in #193
  • [neophile] Update dependencies by @sqrbot in #194
  • Bump requests from 2.30.0 to 2.31.0 in /requirements by @dependabot in #195
  • [neophile] Update dependencies by @sqrbot in #196
  • DM-39519: Convert to pyproject.toml and current mypy by @rra in #197
  • DM-39519: Add blacken-docs to pre-commit by @rra in #198
  • DM-39519: Update GitHub CI configuration by @rra in #199
  • [neophile] Update dependencies by @sqrbot in #200
  • DM-39519: Switch to the Ruff linter by @rra in #201
  • DM-39519: Switch to scriv for change log management by @rra in #202
  • DM-39519: Convert neophile manual to new user guide format by @rra in #203
  • DM-39519: Fix documentation warnings about resolving Path by @rra in #204
  • DM-39519: Use relative imports and no TYPE_CHECKING by @rra in #205
  • DM-39519: Switch to Self types by @rra in #206
  • DM-39519: Convert to new docstring format by @rra in #207
  • DM-39519: Switch to backtracking resolver for pip-compile by @rra in #208
  • DM-39519: Fix documentation layout by @rra in #209
  • DM-39519: Refactor factory and underlying objects by @rra in #210
  • DM-39594: Remove Kustomize and Helm support by @rra in #211
  • DM-39594: Switch from aiohttp to httpx by @rra in #212
  • [neophile] Update dependencies by @sqrbot in #214
  • DM-39627: Allow specifying types of dependencies to analyze by @rra in #213
  • DM-39627: Change analyze output and exit status by @rra in #215
  • DM-39627: Add a GitHub Actions check for dependencies by @rra in #217
  • DM-39627: Redo how GitHub tokens are used by @rra in #218
  • DM-39627: Revert NEOPHILE_GITHUB_TOKEN change by @rra in #219
  • DM-39627: Fix typo in dependencies GitHub Action by @rra in #220
  • DM-39627: Redo GitHub actor handling for PRs by @rra in #221
  • DM-39627: Add test helper function for GitHub tag mocking by @rra in #223
  • DM-39627: Remove neophile process by @rra in #224
  • DM-39627: Convert to a regular Python package by @rra in #225
  • DM-39627: Authenticate as a GitHub app by @rra in #226
  • [neophile] Update dependencies by @neophile-square in #227
  • DM-39627: Add periodic CI run by @rra in #228
  • DM-39627: Add Slack notifications for periodic workflows by @rra in #229
  • DM-39627: Update documentation by @rra in #230
  • Bump ravsamhq/notify-slack-action from 1 to 2 by @dependabot in #231
  • DM-39627: Update development documentation by @rra in #232
  • DM-39627: Prepare 1.0.0 release by @rra in #233

New Contributors

  • @neophile-square made their first contribution in #227

Full Changelog: 0.4.0...1.0.0

Contributors

rra, sqrbot, and dependabot
Assets 2
Loading

0.4.0

03 May 18:39
@rra rra
0.4.0
This tag was signed with the committer’s verified signature. The key has expired.
rra Russ Allbery
GPG key ID: 7D80315C5736DE75
Expired
Learn about vigilant mode.
c2b3f1b
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
0.4.0
  • packaging.version has dropped support for arbitrary legacy version numbers, so neophile also no longer supports them.
  • Drop support for Python 3.10.

What's Changed

Full Changelog: 0.3.3...0.4.0

Contributors

rra, sqrbot, and dependabot
Assets 2
Loading

0.3.3

28 Feb 21:56
@rra rra
0.3.3
This tag was signed with the committer’s verified signature. The key has expired.
rra Russ Allbery
GPG key ID: 7D80315C5736DE75
Expired
Learn about vigilant mode.
b89c8f9
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
0.3.3
  • Fix type of pullRequestId when enabling auto-merge.
  • Drop support for Python 3.9.
  • Update pinned dependencies.

What's Changed

New Contributors

Full Changelog: 0.3.2...0.3.3

Contributors

rra, jonathansick, and 2 other contributors
Assets 2
Loading

0.3.2

28 Feb 21:55
@rra rra
0.3.2
This tag was signed with the committer’s verified signature. The key has expired.
rra Russ Allbery
GPG key ID: 7D80315C5736DE75
Expired
Learn about vigilant mode.
982f6ab
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
0.3.2
  • Fix enabling of auto-merge after creating a new PR.
  • Update pinned dependencies.

What's Changed

  • [neophile] Update dependencies by @sqrbot in #93
  • [DM-32423] Fix enabling of auto-merge for new PR by @rra in #94

Full Changelog: 0.3.1...0.3.2

Contributors

rra and sqrbot
Assets 2
Loading

0.3.1

28 Feb 21:55
@rra rra
0.3.1
This tag was signed with the committer’s verified signature. The key has expired.
rra Russ Allbery
GPG key ID: 7D80315C5736DE75
Expired
Learn about vigilant mode.
7f1ecf8
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
0.3.1
  • Warn of errors if auto-merge could not be enabled but do not fail.
  • Update pinned dependencies.

What's Changed

  • [DM-32423] Catch errors if PRs cannot be auto-merged by @rra in #92

Full Changelog: 0.3.0...0.3.1

Contributors

rra
Assets 2
Loading

0.3.0

26 Oct 01:12
@rra rra
0.3.0
This tag was signed with the committer’s verified signature. The key has expired.
rra Russ Allbery
GPG key ID: 7D80315C5736DE75
Expired
Learn about vigilant mode.
0923bd5
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
0.3.0
  • Attempt to set auto-merge on pull requests after they're created. Failure to do so is silently ignored.
  • Support updating pull requests for the main branch instead of``master` if it is present.
  • Catch BadRequest errors from a GitHub repository inventory request.
  • Update pinned dependencies.

What's Changed

  • [neophile] Update dependencies by @sqrbot in #52
  • [neophile] Update dependencies by @sqrbot in #53
  • Bump pre-commit/action from v2.0.0 to v2.0.2 by @dependabot in #56
  • Bump python from 3.9.2-slim-buster to 3.9.4-slim-buster by @dependabot in #57
  • [neophile] Update dependencies by @sqrbot in #58
  • [neophile] Update dependencies by @sqrbot in #59
  • [neophile] Update dependencies by @sqrbot in #60
  • Bump pre-commit/action from v2.0.2 to v2.0.3 by @dependabot in #61
  • [neophile] Update dependencies by @sqrbot in #62
  • [neophile] Update dependencies by @sqrbot in #63
  • Bump python from 3.9.4-slim-buster to 3.9.5-slim-buster by @dependabot in #64
  • [neophile] Update dependencies by @sqrbot in #66
  • Unpin Sphinx to allow upgrades by @rra in #67
  • [neophile] Update dependencies by @sqrbot in #68
  • [neophile] Update dependencies by @sqrbot in #70
  • [neophile] Update dependencies by @sqrbot in #71
  • [neophile] Update dependencies by @sqrbot in #72
  • [neophile] Update dependencies by @sqrbot in #73
  • Bump python from 3.9.5-slim-buster to 3.9.6-slim-buster by @dependabot in #74
  • [neophile] Update dependencies by @sqrbot in #75
  • [neophile] Update dependencies by @sqrbot in #76
  • [neophile] Update dependencies by @sqrbot in #77
  • [neophile] Update dependencies by @sqrbot in #78
  • [neophile] Update dependencies by @sqrbot in #79
  • [neophile] Update dependencies by @sqrbot in #80
  • [neophile] Update dependencies by @sqrbot in #81
  • [neophile] Update dependencies by @sqrbot in #82
  • [neophile] Update dependencies by @sqrbot in #83
  • Bump python from 3.9.6-slim-buster to 3.9.7-slim-buster by @dependabot in #84
  • [neophile] Update dependencies by @sqrbot in #85
  • [neophile] Update dependencies by @sqrbot in #86
  • [neophile] Update dependencies by @sqrbot in #87
  • [neophile] Update dependencies by @sqrbot in #89
  • [neophile] Update dependencies by @sqrbot in #91
  • [DM-31656] Attempt to set auto-merge on PRs by @rra in #90

Full Changelog: 0.2.2...0.3.0

Contributors

rra, sqrbot, and dependabot
Assets 2
Loading