Skip to content

Bump the repo-config group with 2 updates#47

Closed
dependabot[bot] wants to merge 1 commit intov0.x.xfrom
dependabot/pip/repo-config-d273c61b51
Closed

Bump the repo-config group with 2 updates#47
dependabot[bot] wants to merge 1 commit intov0.x.xfrom
dependabot/pip/repo-config-d273c61b51

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 25, 2026 •
edited
Loading

Bumps the repo-config group with 2 updates: frequenz-repo-config[lib] and frequenz-repo-config[extra-lint-examples].

Updates frequenz-repo-config[lib] from 0.13.8 to 0.14.0

Release notes

Sourced from frequenz-repo-config[lib]'s releases.

v0.14.0

Frequenz Repository Configuration Release Notes

Summary

This release adds a new workflow for Dependabot auto-merge and updates mkdocstrings to v2.

Upgrading

Cookiecutter template

All upgrading should be done via the migration script or regenerating the templates.

curl -sSL https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.14.0/cookiecutter/migrate.py | python3

But you might still need to adapt your code, just have a look at the script output for further instructions.

New Features

  • mkdocsstrings-python v2 is now supported.

Cookiecutter template

  • Dependencies have been updated.
  • New warning ignores for protobuf gencode versions in pytest.
  • Added Dependabot auto-merge workflow using frequenz-floss/dependabot-auto-approve action.

Bug Fixes

Cookiecutter template

  • mkdocstrings: Move paths key to the right section in mkdocs.yml.
  • Fix invalid YAML syntax in Dependabot workflow template.

What's Changed

... (truncated)

Changelog

Sourced from frequenz-repo-config[lib]'s changelog.

Frequenz Repository Configuration Release Notes

Summary

This release migrates lightweight GitHub Actions workflow jobs to use the new cost-effective ubuntu-slim runner. It also updates cookiecutter pyproject license metadata to SPDX expressions to avoid setuptools deprecation warnings. The auto-dependabot workflow now uses a GitHub App installation token instead of GITHUB_TOKEN to fix merge queue and auto-merge failures.

Upgrading

Cookiecutter template

All upgrading should be done via the migration script or regenerating the templates.

curl -sSL https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.14.0/cookiecutter/migrate.py | python3

But you might still need to adapt your code:

New Features

Cookiecutter template

  • Migrated lightweight workflow jobs to use the new ubuntu-slim runner for cost savings. The following jobs now use ubuntu-slim:

    • ci.yaml: protolint, nox-all, test-installation-all, create-github-release, publish-to-pypi
    • ci-pr.yaml: protolint
    • auto-dependabot.yaml: auto-merge
    • release-notes-check.yml: check-release-notes
    • dco-merge-queue.yml: DCO
    • labeler.yml: Label

  • Added the flake8-datetimez plugin to the flake8 session. This plugin prevents accidental use of naive datetime objects by flagging calls that create or return datetimes without timezone information.

  • The CI workflow now uses a simpler matrix.

Bug Fixes

Cookiecutter template

  • Switched project.license to SPDX expressions and added project.license-files. This removes deprecated setuptools license metadata and avoids build warnings.

... (truncated)

Commits
  • a72bd53 Update mypy-protobuf requirement from <4,>=3.0.0 to >=3.0.0,<5 (#489)
  • 10341d6 template: Bump protobuf and grpcio to latest versions
  • af44767 Update mypy-protobuf requirement from <4,>=3.0.0 to >=3.0.0,<5
  • 8a4e067 Prepare for release v0.14.0 (#490)
  • 73dc4ef Prepare for release v0.14.0
  • 3d86e08 Bump actions/download-artifact from 5 to 6 (#460)
  • 5894e50 Bump pydoclint from 0.7.3 to 0.8.3 (#477)
  • 4a81cbb Bump frequenz-floss/gh-action-nox from 1.0.1 to 1.1.0 in the compatible group...
  • 41b3a2c Bump pytest from 9.0.1 to 9.0.2 in the patch group (#487)
  • c2bbc77 Bump the minor group with 7 updates (#488)
  • Additional commits viewable in compare view

Updates frequenz-repo-config[extra-lint-examples] from 0.13.8 to 0.14.0

Release notes

Sourced from frequenz-repo-config[extra-lint-examples]'s releases.

v0.14.0

Frequenz Repository Configuration Release Notes

Summary

This release adds a new workflow for Dependabot auto-merge and updates mkdocstrings to v2.

Upgrading

Cookiecutter template

All upgrading should be done via the migration script or regenerating the templates.

curl -sSL https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.14.0/cookiecutter/migrate.py | python3

But you might still need to adapt your code, just have a look at the script output for further instructions.

New Features

  • mkdocsstrings-python v2 is now supported.

Cookiecutter template

  • Dependencies have been updated.
  • New warning ignores for protobuf gencode versions in pytest.
  • Added Dependabot auto-merge workflow using frequenz-floss/dependabot-auto-approve action.

Bug Fixes

Cookiecutter template

  • mkdocstrings: Move paths key to the right section in mkdocs.yml.
  • Fix invalid YAML syntax in Dependabot workflow template.

What's Changed

... (truncated)

Changelog

Sourced from frequenz-repo-config[extra-lint-examples]'s changelog.

Frequenz Repository Configuration Release Notes

Summary

This release migrates lightweight GitHub Actions workflow jobs to use the new cost-effective ubuntu-slim runner. It also updates cookiecutter pyproject license metadata to SPDX expressions to avoid setuptools deprecation warnings. The auto-dependabot workflow now uses a GitHub App installation token instead of GITHUB_TOKEN to fix merge queue and auto-merge failures.

Upgrading

Cookiecutter template

All upgrading should be done via the migration script or regenerating the templates.

curl -sSL https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.14.0/cookiecutter/migrate.py | python3

But you might still need to adapt your code:

New Features

Cookiecutter template

  • Migrated lightweight workflow jobs to use the new ubuntu-slim runner for cost savings. The following jobs now use ubuntu-slim:

    • ci.yaml: protolint, nox-all, test-installation-all, create-github-release, publish-to-pypi
    • ci-pr.yaml: protolint
    • auto-dependabot.yaml: auto-merge
    • release-notes-check.yml: check-release-notes
    • dco-merge-queue.yml: DCO
    • labeler.yml: Label

  • Added the flake8-datetimez plugin to the flake8 session. This plugin prevents accidental use of naive datetime objects by flagging calls that create or return datetimes without timezone information.

  • The CI workflow now uses a simpler matrix.

Bug Fixes

Cookiecutter template

  • Switched project.license to SPDX expressions and added project.license-files. This removes deprecated setuptools license metadata and avoids build warnings.

... (truncated)

Commits
  • a72bd53 Update mypy-protobuf requirement from <4,>=3.0.0 to >=3.0.0,<5 (#489)
  • 10341d6 template: Bump protobuf and grpcio to latest versions
  • af44767 Update mypy-protobuf requirement from <4,>=3.0.0 to >=3.0.0,<5
  • 8a4e067 Prepare for release v0.14.0 (#490)
  • 73dc4ef Prepare for release v0.14.0
  • 3d86e08 Bump actions/download-artifact from 5 to 6 (#460)
  • 5894e50 Bump pydoclint from 0.7.3 to 0.8.3 (#477)
  • 4a81cbb Bump frequenz-floss/gh-action-nox from 1.0.1 to 1.1.0 in the compatible group...
  • 41b3a2c Bump pytest from 9.0.1 to 9.0.2 in the patch group (#487)
  • c2bbc77 Bump the minor group with 7 updates (#488)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 25, 2026

Labels

The following labels could not be found: type:tech-debt. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
Copy link

github-actions bot commented Feb 25, 2026

Dependabot Migration

Update: 0.13.8 → 0.14.0

✅ Migration completed successfully.

Migration output 
=== v0.14.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.14.0/cookiecutter/migrate.py

========================================================================
Creating Dependabot auto-merge workflow...
Created/Updated Dependabot auto-merge workflow at .github/workflows/auto-dependabot.yaml
========================================================================
Disabling CODEOWNERS review requirement in GitHub ruleset...
Default branch: v0.x.x
Found ruleset ID: 13042225
Successfully disabled CODEOWNERS review requirement in GitHub ruleset.
========================================================================
Updating the mkdocs.yml for mkdocstrings-python v2 compatibility...
========================================================================
Migration script finished. Remember to follow any manual instructions.
========================================================================

📋 Full migration logs

@github-actions github-actions bot added the tool:repo-config:migration:done Migration script has been run label Feb 25, 2026
@frequenz-auto-dependabot frequenz-auto-dependabot bot added the tool:auto-merged PR was auto-merged by automation label Feb 25, 2026
@llucax llucax dismissed frequenz-auto-dependabot[bot]’s stale review February 25, 2026 13:44

The merge-base changed after approval.

@llucax
Copy link
Owner

llucax commented Feb 25, 2026

@dependabot recreate

@llucax llucax added tool:repo-config:migration:done Migration script has been run and removed tool:auto-merged PR was auto-merged by automation tool:repo-config:migration:done Migration script has been run labels Feb 25, 2026
@dependabot dependabot bot force-pushed the dependabot/pip/repo-config-d273c61b51 branch from d2db0a6 to 551d2cf Compare February 25, 2026 13:46
@github-actions
Copy link

github-actions bot commented Feb 25, 2026

Dependabot Migration

Update: 0.13.8 → 0.14.0

✅ Migration completed successfully.

Migration output 
=== v0.14.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.14.0/cookiecutter/migrate.py

========================================================================
Creating Dependabot auto-merge workflow...
Created/Updated Dependabot auto-merge workflow at .github/workflows/auto-dependabot.yaml
========================================================================
Disabling CODEOWNERS review requirement in GitHub ruleset...
Default branch: v0.x.x
Found ruleset ID: 13042225
Successfully disabled CODEOWNERS review requirement in GitHub ruleset.
========================================================================
Updating the mkdocs.yml for mkdocstrings-python v2 compatibility...
========================================================================
Migration script finished. Remember to follow any manual instructions.
========================================================================

📋 Full migration logs

@github-actions github-actions bot added the tool:repo-config:migration:executed Migration script has been run label Feb 25, 2026
@frequenz-auto-dependabot frequenz-auto-dependabot bot added the tool:auto-merged PR was auto-merged by automation label Feb 25, 2026
@llucax llucax removed tool:auto-merged PR was auto-merged by automation tool:repo-config:migration:done Migration script has been run tool:repo-config:migration:executed Migration script has been run labels Feb 25, 2026
@llucax llucax dismissed frequenz-auto-dependabot[bot]’s stale review February 25, 2026 13:48

The merge-base changed after approval.

@llucax
Copy link
Owner

llucax commented Feb 25, 2026

@dependabot rebase

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 25, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@llucax
Copy link
Owner

llucax commented Feb 25, 2026

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot/pip/repo-config-d273c61b51 branch from abd3409 to 27c7851 Compare February 25, 2026 13:51
@github-actions
Copy link

github-actions bot commented Feb 25, 2026

Dependabot Migration

Update: 0.13.8 → 0.14.0

✅ Migration completed successfully.

Migration output 
=== v0.14.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.14.0/cookiecutter/migrate.py

========================================================================
Creating Dependabot auto-merge workflow...
Created/Updated Dependabot auto-merge workflow at .github/workflows/auto-dependabot.yaml
========================================================================
Disabling CODEOWNERS review requirement in GitHub ruleset...
Default branch: v0.x.x
Found ruleset ID: 13042225
CODEOWNERS review requirement already disabled.
========================================================================
Updating the mkdocs.yml for mkdocstrings-python v2 compatibility...
========================================================================
Migration script finished. Remember to follow any manual instructions.
========================================================================

📋 Full migration logs

@github-actions github-actions bot added the tool:repo-config:migration:executed Migration script has been run label Feb 25, 2026
@github-actions github-actions bot added the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label Feb 26, 2026
@github-actions
Copy link

github-actions bot commented Feb 26, 2026

Repo Config Migration

Manual intervention has been marked as completed.

Because this PR required manual intervention, this action will not auto-approve or auto-merge it. Please review, approve, and merge this PR manually.

Note: auto-merge-on-changes is enabled, but it only applies to clean migrations that did not require manual intervention.

@llucax llucax removed the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label Feb 26, 2026
@github-actions
Copy link

github-actions bot commented Feb 26, 2026

Repo Config Migration

The tool:repo-config:migration:intervention-done label was removed.

Marking manual intervention as not yet done again (adding tool:repo-config:migration:intervention-pending). Please remove the tool:repo-config:migration:intervention-pending or add the tool:repo-config:migration:intervention-done label again when manual resolution is done.

@llucax llucax removed the tool:repo-config:migration:intervention-pending Migration requires manual intervention label Feb 26, 2026
@github-actions github-actions bot added the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label Feb 26, 2026
@github-actions
Copy link

github-actions bot commented Feb 26, 2026

Repo Config Migration

Manual intervention has been marked as completed.

Because this PR required manual intervention, this action will not auto-approve or auto-merge it. Please review, approve, and merge this PR manually.

Note: auto-merge-on-changes is enabled, but it only applies to clean migrations that did not require manual intervention.

@llucax llucax added the tool:repo-config:migration:intervention-pending Migration requires manual intervention label Feb 26, 2026
@github-actions github-actions bot removed the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label Feb 26, 2026
@github-actions
Copy link

github-actions bot commented Feb 26, 2026

Repo Config Migration

Manual intervention has been marked as needed again. The tool:repo-config:migration:intervention-done label has been removed. Please complete the manual steps and then remove the tool:repo-config:migration:intervention-pending label or add the tool:repo-config:migration:intervention-done label again.

@llucax llucax added the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label Feb 26, 2026
@github-actions github-actions bot removed the tool:repo-config:migration:intervention-pending Migration requires manual intervention label Feb 26, 2026
@github-actions
Copy link

github-actions bot commented Feb 26, 2026

Repo Config Migration

Manual intervention has been marked as completed.

Because this PR required manual intervention, this action will not auto-approve or auto-merge it. Please review, approve, and merge this PR manually.

Note: auto-merge-on-changes is enabled, but it only applies to clean migrations that did not require manual intervention.

@llucax llucax added the tool:repo-config:migration:intervention-pending Migration requires manual intervention label Feb 26, 2026
@github-actions github-actions bot removed the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label Feb 26, 2026
@github-actions
Copy link

github-actions bot commented Feb 26, 2026

Repo Config Migration

Manual intervention has been marked as needed again. The tool:repo-config:migration:intervention-done label has been removed. Please complete the manual steps and then remove the tool:repo-config:migration:intervention-pending label or add the tool:repo-config:migration:intervention-done label again.

@llucax llucax added the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label Feb 26, 2026
@github-actions github-actions bot removed the tool:repo-config:migration:intervention-pending Migration requires manual intervention label Feb 26, 2026
@github-actions
Copy link

github-actions bot commented Feb 26, 2026

Repo Config Migration

Manual intervention has been marked as completed.

Because this PR required manual intervention, this action will not auto-approve or auto-merge it. Please review, approve, and merge this PR manually.

Note: auto-merge-on-changes is enabled, but it only applies to clean migrations that did not require manual intervention.

@llucax llucax added the tool:repo-config:migration:intervention-pending Migration requires manual intervention label Feb 26, 2026
@github-actions github-actions bot removed the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label Feb 26, 2026
@github-actions
Copy link

github-actions bot commented Feb 26, 2026

Repo Config Migration

Manual intervention has been marked as needed again. The tool:repo-config:migration:intervention-done label has been removed. Please complete the manual steps and then remove the tool:repo-config:migration:intervention-pending label or add the tool:repo-config:migration:intervention-done label again.

@llucax llucax removed the tool:repo-config:migration:intervention-pending Migration requires manual intervention label Feb 26, 2026
@github-actions github-actions bot added the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label Feb 26, 2026
@github-actions
Copy link

github-actions bot commented Feb 26, 2026

Repo Config Migration

Manual intervention has been marked as completed.

Because this PR required manual intervention, this action will not auto-approve or auto-merge it. Please review, approve, and merge this PR manually.

Note: auto-merge-on-changes is enabled, but it only applies to clean migrations that did not require manual intervention.

@llucax llucax mentioned this pull request Feb 26, 2026
Merged
@llucax llucax closed this Feb 27, 2026
auto-merge was automatically disabled February 27, 2026 12:33

Pull request was closed

@llucax llucax deleted the dependabot/pip/repo-config-d273c61b51 branch February 27, 2026 12:33
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 27, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@frequenz-auto-dependabot frequenz-auto-dependabot[bot] frequenz-auto-dependabot[bot] left review comments

Assignees

No one assigned

Labels

part:tooling tool:repo-config:migration:executed Migration script has been run tool:repo-config:migration:intervention-done Manual migration intervention has been completed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@llucax