Skip to content

chore: add documentation around adding new dependencies#19427

Merged
mergify[bot] merged 6 commits intoaws:masterfrom
corymhall:corymhall/docs-deps
Mar 18, 2022
Merged

chore: add documentation around adding new dependencies#19427
mergify[bot] merged 6 commits intoaws:masterfrom
corymhall:corymhall/docs-deps

Conversation

@corymhall
Copy link
Copy Markdown
Contributor

This adds a new section to the contributing guide that details how to
introduce an "unconventional" dependency. It also adds a new section to
the PR template that asks the submitter to verify whether their PR adds
any dependencies.


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

This adds a new section to the contributing guide that details how to
introduce an "unconventional" dependency. It also adds a new section to
the PR template that asks the submitter to verify whether their PR adds
any dependencies.
@corymhall corymhall requested a review from a team March 16, 2022 18:41
@mergify mergify bot added the contribution/core This is a PR that came from AWS. label Mar 16, 2022
@gitpod-io
Copy link
Copy Markdown

gitpod-io bot commented Mar 16, 2022

Copy link
Copy Markdown
Contributor

@kaizencc kaizencc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have to admit I still don't really get what an "unconventional" dependency is and how often it comes into play. Especially during community contributions -- does this amount warrant reminding all PR submissions to look out for it?

Is it possible to lint for this or add a workflow that runs on pull requests?

CONTRIBUTING.md Outdated
* Make sure to update the PR title/description if things change. The PR title/description are going to be used as the
commit title/message and will appear in the CHANGELOG, so maintain them all the way throughout the process.

#### Adding new dependencies
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this section about adding (all) new dependencies or just "unconventional" ones?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just "unconventional" ones. Updated the title to reflect this.

@corymhall
Copy link
Copy Markdown
Contributor Author

I have to admit I still don't really get what an "unconventional" dependency is and how often it comes into play. Especially during community contributions -- does this amount warrant reminding all PR submissions to look out for it?

yeah "unconventional" dependency is kind of ambiguous, but I think that is the point. It's hard to spell out because if we could then we would already have a way to handle it and wouldn't need to call it out. It really is just any dependency that you don't just npm install as part of the package. I can try adding some more examples if that might help.

I also think the PR checklist is for the contributor and for the reviewer. We should treat the PR checklist as things to look for as a reviewer

Is it possible to lint for this or add a workflow that runs on pull requests?

We might be able to add some checks, like if your PR is adding a dep file (i.e. requirements.txt) then it needs to be added to dependabot. But I don't think it's possible to catch the type of scenario that triggered the need for this PR (see #18800).

Copy link
Copy Markdown
Contributor

@kaizencc kaizencc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I really like the idea of having a PR checklist for both contributor and reviewer, and we should continue to build this out with more helpful information (that can't be built into a PR check).

@kaizencc kaizencc added the pr/do-not-merge This PR should not be merged at this time. label Mar 17, 2022
Co-authored-by: Kaizen Conroy <36202692+kaizen3031593@users.noreply.github.com>
@corymhall corymhall removed the pr/do-not-merge This PR should not be merged at this time. label Mar 17, 2022
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Mar 17, 2022

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Mar 18, 2022

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation
Copy link
Copy Markdown
Collaborator

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildProject89A8053A-LhjRyN9kxr8o
  • Commit ID: 27f38f0
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

@mergify mergify bot merged commit 2f01bf0 into aws:master Mar 18, 2022
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Mar 18, 2022

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

iliapolo pushed a commit that referenced this pull request Mar 20, 2022
This adds a new section to the contributing guide that details how to
introduce an "unconventional" dependency. It also adds a new section to
the PR template that asks the submitter to verify whether their PR adds
any dependencies.


----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

contribution/core This is a PR that came from AWS.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants