Skip to content

Configured dependabot updates for main pip requirements#14876

Merged
ilya-lavrenov merged 8 commits intoopenvinotoolkit:masterfrom
ilya-lavrenov:dependabot-approves
Jan 5, 2023
Merged

Configured dependabot updates for main pip requirements#14876
ilya-lavrenov merged 8 commits intoopenvinotoolkit:masterfrom
ilya-lavrenov:dependabot-approves

Conversation

@ilya-lavrenov
Copy link
Copy Markdown
Contributor

@ilya-lavrenov ilya-lavrenov commented Dec 30, 2022

Details:

  • Added dependabot version update for the following requirements groups:
    • MO: once MO dependencies are updated, ONNX and TF should be updated as well
    • Python API
    • PaddlePaddle handled separately, because MO does not contain PDPD as dependency
    • POT
  • All other groups a development requirements or don't have upper bound

@ilya-lavrenov ilya-lavrenov added the category: CI OpenVINO public CI label Dec 30, 2022
@ilya-lavrenov ilya-lavrenov added this to the 2023.0 milestone Dec 30, 2022
@ilya-lavrenov ilya-lavrenov requested a review from a team as a code owner December 30, 2022 14:00
@ilya-lavrenov ilya-lavrenov force-pushed the dependabot-approves branch 4 times, most recently from 482f716 to 8651cec Compare December 31, 2022 09:00
rkazants
rkazants reviewed Dec 31, 2022
View reviewed changes
Comment thread .github/dependabot.yml
Comment thread .github/dependabot.yml Outdated
Comment thread .github/dependabot.yml Outdated
Comment thread .github/dependabot.yml
@ilya-lavrenov ilya-lavrenov force-pushed the dependabot-approves branch 2 times, most recently from c2b533c to 6d9de49 Compare January 2, 2023 12:17
p-wysocki
p-wysocki reviewed Jan 3, 2023
View reviewed changes
Comment thread .github/dependabot.yml
@ilya-lavrenov ilya-lavrenov force-pushed the dependabot-approves branch 2 times, most recently from 2d37d22 to ca009a6 Compare January 3, 2023 22:52
ilya-lavrenov
ilya-lavrenov commented Jan 3, 2023
View reviewed changes
Comment thread .github/workflows/build_doc.yml Outdated
rkazants
rkazants reviewed Jan 4, 2023
View reviewed changes
Comment thread .github/dependabot.yml
rkazants
rkazants requested changes Jan 4, 2023
View reviewed changes
Copy link
Copy Markdown
Collaborator

@rkazants rkazants left a comment •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

let me double-check that no req file is missed please.

ilya-lavrenov and others added 2 commits January 5, 2023 15:23
@ilya-lavrenov
Merge branch 'openvinotoolkit:master' into dependabot-approves
675dbda
@dependabot
pip(deps): bump urllib3 from 1.26.5 to 1.26.13 (#62)
6298938 
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.5 to 1.26.13.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.5...1.26.13)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@github-actions github-actions Bot requested a review from a team as a code owner January 5, 2023 11:25
@github-actions github-actions Bot requested a review from a team as a code owner January 5, 2023 11:25
@github-actions github-actions Bot requested review from xu-yuan1 and removed request for a team January 5, 2023 11:25
@dependabot
pip(deps): bump six from 1.15.0 to 1.16.0 (#60)
1a6ef6f 
Bumps [six](https://github.com/benjaminp/six) from 1.15.0 to 1.16.0.
- [Release notes](https://github.com/benjaminp/six/releases)
- [Changelog](https://github.com/benjaminp/six/blob/master/CHANGES)
- [Commits](benjaminp/six@1.15.0...1.16.0)

---
updated-dependencies:
- dependency-name: six
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @ilya-lavrenov
pip(deps): bump imagesize from 1.2.0 to 1.4.1 (#70)
3e7b789 
Bumps [imagesize](https://github.com/shibukawa/imagesize_py) from 1.2.0 to 1.4.1.
- [Release notes](https://github.com/shibukawa/imagesize_py/releases)
- [Commits](shibukawa/imagesize_py@1.2.0...1.4.1)

---
updated-dependencies:
- dependency-name: imagesize
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@ilya-lavrenov ilya-lavrenov removed request for a team and xu-yuan1 January 5, 2023 11:38
@ilya-lavrenov ilya-lavrenov requested a review from rkazants January 5, 2023 19:18
@ilya-lavrenov ilya-lavrenov merged commit 08b4c9c into openvinotoolkit:master Jan 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rkazants rkazants rkazants approved these changes

@p-wysocki p-wysocki p-wysocki approved these changes

Assignees

@rkazants rkazants

@p-wysocki p-wysocki

@jiwaszki jiwaszki

Labels

category: CI OpenVINO public CI

Projects

None yet

Milestone

2023.0

Development

Successfully merging this pull request may close these issues.

4 participants

@ilya-lavrenov @rkazants @p-wysocki @jiwaszki