Enable Dependabot #208
Comments
Merged
vishalvijay18
added a commit
that referenced
this issue
Jan 9, 2025
*Description of changes:* Current dependabot configuration was scanning [airflow_constraints.txt](https://github.com/aws/amazon-mwaa-docker-images/blob/main/images/airflow/2.10.3/etc/airflow_constraints.txt) and [mwaa_essential_constraints.txt](https://github.com/aws/amazon-mwaa-docker-images/blob/main/images/airflow/2.10.3/etc/mwaa_essential_constraints.txt). It automatically generates pull requests (PRs) when new versions are available. We do not want to perform version upgrades on airflow dependencies as we need exact versions of Python dependencies that are compatible with a particular version of Apache Airflow. For MWAA essential dependencies, we need a thorough mechanism to ensure those upgrades don't break any functionality. I have opened this [issue-208](#208) to add dependabot once those automated testing mechanisms are in place. For now removing the configuration to reduce noise. ______ By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice. Co-authored-by: Vishal Vijayvargiya <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the bug
MWAA should enable automated version upgrades for dependencies mentioned in mwaa_essential_constraints using dependabot. In order to achieve this there is a need of more rigorous automated testing when version upgrades are performed.
MWAA should then enable dependabot scan.
Expected behavior
Dependabot automated PRs for dependency version updates.
Additional context
Old implementation: #152
The text was updated successfully, but these errors were encountered: