Switch to pip-tools for managing dependencies #281
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This is in preparation for using pip-tools -- pip-compile will try to use the versions in this file if possible. We want to start with the same versions that are installed on the staging server.
Add package requirements to requirements.in using base.txt and stripping versions. Then compile requirements.txt using pip-compile. Because requirements.txt already had all the staging server package versions pinnned, this step should not have changed any versions - just added packages required by pip-tools or removed packages that were not in the base requirements.
Add a test-requirements.in and companion test-requirements.txt file. For test-requirements.txt, start with the pip freeze versions that I have in my current dev setup.
Add both the dev-requirements.in and compiled dev-requirements.txt files. For dev-requirements.txt, start with the pinned versions that were installed in my dev environment; this way, it's the closest to what I've been developing with.
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #281 +/- ##
=======================================
Coverage 98.26% 98.26%
=======================================
Files 231 231
Lines 17786 17786
=======================================
Hits 17478 17478
Misses 308 308 ☔ View full report in Codecov by Sentry. |
Closed
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This will pin the exact versions of the packages we are using, which will let us identify updates to packages that are not directly specified in the requirements file but are dependencies.
requirements.in: base requirements, used for productiontest-requirements.in: additional requirements for testing on top of base/rpoddev-requirements.in: additional requirements on top of base/prod and test for local developmentNote: to create the initial requirements files:
pip freezeon the staging server torequirements.txtpip freezeon my dev machine totest-requirements.txtanddev-requirements.txtpip-compile requirements.inpip-compile test-requirements.inpip-compile dev-requirements.inThese steps preserve the package versions that we have installed on the staging server as much as possible, so that we can address any package updates via dependabot after this branch is merged.