dependencies: compute and check release dates via GitHub API.#13582
dependencies: compute and check release dates via GitHub API.#13582htuch merged 5 commits intoenvoyproxy:masterfrom
Conversation
The use of last_updated was ambiguous (is it when an Envoy contributor creates a PR, merges a commit, or when the dependency is released?). We really are after the release date as a measure of how stale the dependency is. This patch introduces a tool, tools/dependency/release_dates.py, that uses the GitHub API to compute release date. Co-authored-by: Michael Payne <michael@sooper.org> Signed-off-by: Harvey Tuch <htuch@google.com>
|
CC @PiotrSikora @envoyproxy/dependency-shepherds |
|
@PiotrSikora @danzh2010 @dio can you update on whether the |
|
@htuch V8's release date should be 2020-08-17 (for 8.5.210.20), BoringSSL's release date is correct. |
Signed-off-by: Harvey Tuch <htuch@google.com>
|
@lizan this is ready for review; it's stuck on not having GH_ACCESS_TOKEN set, since we need to populate Azure with an access token for "public repo read-only" access to the API. |
|
This PR now passes the new CI "precheck dependencies" :) |
Signed-off-by: Harvey Tuch <htuch@google.com>
|
MacOS failures looks RBE related, https://dev.azure.com/cncf/envoy/_build/results?buildId=54800&view=logs&j=b4895c6e-031d-5a9e-a507-86b9350b5c70&t=b4ab6edc-d679-5a1d-980f-d72dcbda6eb1. Will force merge. |
* master: (22 commits) ci: various improvements (envoyproxy#13660) dns: fix defunct fd bug in apple resolver (envoyproxy#13641) build: support ppc64le with wasm (envoyproxy#13657) [fuzz] Added random load balancer fuzz (envoyproxy#13400) dependencies: compute and check release dates via GitHub API. (envoyproxy#13582) mac ci: try ignoring update failure (envoyproxy#13658) watchdog: Optimize WatchdogImpl::touch in preparation to more frequent petting of the watchdog. (envoyproxy#13103) typos: fix a couple 'enovy' mispellings (envoyproxy#13645) lua: Expose stream info downstreamLocalAddress and downstreamDirectRemoteAddress for Lua filter (envoyproxy#13536) tap: fix upstream streamed transport socket taps (envoyproxy#13638) Revert "delay health checks until transport socket secrets are ready. (envoyproxy#13516)" (envoyproxy#13639) Watchdog: use abort action as a default if killing is enabled. (envoyproxy#13523) [fuzz] Fixed divide by zero bug (envoyproxy#13545) wasm: flip the meaning of the "repository" in envoy_wasm_cc_binary(). (envoyproxy#13621) fix: record recovered local address (envoyproxy#13581) docs: fix incorrect compressor filter doc (envoyproxy#13611) docs: clean up docs for azp migration (envoyproxy#13558) wasm: fix building Wasm example. (envoyproxy#13619) test: Refactor flood tests into a separate test file (envoyproxy#13556) wasm: re-enable tests with precompiled modules. (envoyproxy#13583) ... Signed-off-by: Michael Puncel <mpuncel@squareup.com>
The use of last_updated was ambiguous (is it when an Envoy contributor
creates a PR, merges a commit, or when the dependency is released?).
We really are after the release date as a measure of how stale the
dependency is.
This patch introduces a tool, tools/dependency/release_dates.py, that
uses the GitHub API to compute release date. If a mismatch is detected, an
error is raised.
This patch also introduces a dependency validation CI job that gathers existing
scripts and the release_dates.py script into a single job.
Co-authored-by: Michael Payne michael@sooper.org
Signed-off-by: Harvey Tuch htuch@google.com