* [RESEND. PATCH 1/5] drm/ci: Upgrade requirements because of bothering by GitHub Dependabot
@ 2024-10-17 3:39 WangYuli
2024-10-29 10:37 ` Helen Mae Koike Fornazier
0 siblings, 1 reply; 4+ messages in thread
From: WangYuli @ 2024-10-17 3:39 UTC (permalink / raw)
To: helen.koike, maarten.lankhorst, mripard, tzimmermann, airlied,
simona, wangyuli, david.heidelberg
Cc: dri-devel, linux-kernel, guanwentao, zhanjun
GitHub Dependabot keeps bugging us about old, vulnerable Python packages.
Until we figure out a way to make it calm, we're stuck updating our
dependencies whenever it complains.
I guess it's a good thing in the long run, though, right?
Makes our CI a bit "more secure"...
Signed-off-by: WangYuli <wangyuli@uniontech.com>
--
2.45.2
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [RESEND. PATCH 1/5] drm/ci: Upgrade requirements because of bothering by GitHub Dependabot
2024-10-17 3:39 [RESEND. PATCH 1/5] drm/ci: Upgrade requirements because of bothering by GitHub Dependabot WangYuli
@ 2024-10-29 10:37 ` Helen Mae Koike Fornazier
2024-10-29 10:47 ` Vignesh Raman
0 siblings, 1 reply; 4+ messages in thread
From: Helen Mae Koike Fornazier @ 2024-10-29 10:37 UTC (permalink / raw)
To: WangYuli
Cc: maarten.lankhorst, mripard, tzimmermann, airlied, simona,
david.heidelberg, dri-devel, linux-kernel, guanwentao, zhanjun,
Vignesh Raman
---- On Thu, 17 Oct 2024 00:39:48 -0300 WangYuli wrote ---
> GitHub Dependabot keeps bugging us about old, vulnerable Python packages.
>
> Until we figure out a way to make it calm, we're stuck updating our
> dependencies whenever it complains.
>
> I guess it's a good thing in the long run, though, right?
> Makes our CI a bit "more secure"...
>
> Signed-off-by: WangYuli wangyuli@uniontech.com>
> --
> 2.45.2
>
>
Hi WangYuli,
Thanks for this.
tbh, I'm tempted in removing the python script that is in the repo, and keep it out-of-tree somewhere, since it is a tool that is only triggered manually in local environment.
I also want to hear Vignesh's thoughts about it.
Thanks
Helen
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [RESEND. PATCH 1/5] drm/ci: Upgrade requirements because of bothering by GitHub Dependabot
2024-10-29 10:37 ` Helen Mae Koike Fornazier
@ 2024-10-29 10:47 ` Vignesh Raman
2024-10-31 5:42 ` WangYuli
0 siblings, 1 reply; 4+ messages in thread
From: Vignesh Raman @ 2024-10-29 10:47 UTC (permalink / raw)
To: Helen Mae Koike Fornazier, WangYuli
Cc: maarten.lankhorst, mripard, tzimmermann, airlied, simona,
david.heidelberg, dri-devel, linux-kernel, guanwentao, zhanjun
Hi Helen,
On 29/10/24 16:07, Helen Mae Koike Fornazier wrote:
>
>
>
>
> ---- On Thu, 17 Oct 2024 00:39:48 -0300 WangYuli wrote ---
>
> > GitHub Dependabot keeps bugging us about old, vulnerable Python packages.
> >
> > Until we figure out a way to make it calm, we're stuck updating our
> > dependencies whenever it complains.
> >
> > I guess it's a good thing in the long run, though, right?
> > Makes our CI a bit "more secure"...
> >
> > Signed-off-by: WangYuli wangyuli@uniontech.com>
> > --
> > 2.45.2
> >
> >
>
>
> Hi WangYuli,
>
> Thanks for this.
>
> tbh, I'm tempted in removing the python script that is in the repo, and keep it out-of-tree somewhere, since it is a tool that is only triggered manually in local environment.
>
> I also want to hear Vignesh's thoughts about it.
We can remove xfails/update-xfails.py script since we do not use this in
CI jobs. Once ci-collate [1] is ready and tested for drm-ci, we could
use this tool directly.
[1] https://gitlab.freedesktop.org/gfx-ci/ci-collate/
Regards,
Vignesh
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [RESEND. PATCH 1/5] drm/ci: Upgrade requirements because of bothering by GitHub Dependabot
2024-10-29 10:47 ` Vignesh Raman
@ 2024-10-31 5:42 ` WangYuli
0 siblings, 0 replies; 4+ messages in thread
From: WangYuli @ 2024-10-31 5:42 UTC (permalink / raw)
To: Vignesh Raman, Helen Mae Koike Fornazier
Cc: maarten.lankhorst, mripard, tzimmermann, airlied, simona,
david.heidelberg, dri-devel, linux-kernel, guanwentao, zhanjun
[-- Attachment #1.1.1: Type: text/plain, Size: 1259 bytes --]
On 2024/10/29 18:47, Vignesh Raman wrote:
> Hi Helen,
>
> On 29/10/24 16:07, Helen Mae Koike Fornazier wrote:
>>
>>
>>
>>
>> ---- On Thu, 17 Oct 2024 00:39:48 -0300 WangYuli wrote ---
>>
>> > GitHub Dependabot keeps bugging us about old, vulnerable Python
>> packages.
>> >
>> > Until we figure out a way to make it calm, we're stuck updating our
>> > dependencies whenever it complains.
>> >
>> > I guess it's a good thing in the long run, though, right?
>> > Makes our CI a bit "more secure"...
>> >
>> > Signed-off-by: WangYuli wangyuli@uniontech.com>
>> > --
>> > 2.45.2
>> >
>> >
>>
>>
>> Hi WangYuli,
>>
>> Thanks for this.
>>
>> tbh, I'm tempted in removing the python script that is in the repo,
>> and keep it out-of-tree somewhere, since it is a tool that is only
>> triggered manually in local environment.
>>
>> I also want to hear Vignesh's thoughts about it.
>
> We can remove xfails/update-xfails.py script since we do not use this
> in CI jobs. Once ci-collate [1] is ready and tested for drm-ci, we
> could use this tool directly.
>
> [1] https://gitlab.freedesktop.org/gfx-ci/ci-collate/
>
> Regards,
> Vignesh
>
Cool!
Cheers,
--
WangYuli
[-- Attachment #1.1.2: OpenPGP public key --]
[-- Type: application/pgp-keys, Size: 645 bytes --]
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 236 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2024-10-31 5:43 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-10-17 3:39 [RESEND. PATCH 1/5] drm/ci: Upgrade requirements because of bothering by GitHub Dependabot WangYuli
2024-10-29 10:37 ` Helen Mae Koike Fornazier
2024-10-29 10:47 ` Vignesh Raman
2024-10-31 5:42 ` WangYuli
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.