Skip to content

[draft] chore(deps): pin django-ansible-base to tag and enable Renovate - #1659

Draft
B-Whitt wants to merge 1 commit into
ansible:mainfrom
B-Whitt:chore/dab-tag-pin-renovate
Draft

[draft] chore(deps): pin django-ansible-base to tag and enable Renovate#1659
B-Whitt wants to merge 1 commit into
ansible:mainfrom
B-Whitt:chore/dab-tag-pin-renovate

Conversation

@B-Whitt

@B-Whitt B-Whitt commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

Problem

Currently, eda-server pins django-ansible-base (DAB) to branch = "devel" in pyproject.toml. Therefore, any time poetry lock is run during normal eda-server development — for example, dependency update for a CVE fix — it silently picks up whatever changes have landed on DAB's devel branch as a side effect. This couples unrelated changes together: a routine dependency bump can inadvertently pull in new DAB features, breaking changes, or migrations.

The goal of this PR is to separate these concerns. DAB updates will run independently on their own schedule, in their own PRs, with clear version visibility.

Summary

  • Pin DAB to tag = "2026.6.2" instead of branch = "devel" in pyproject.toml
  • Re-resolve poetry.lock to the tagged commit
  • Enable Renovate's Poetry manager in renovate.json with DAB-specific rules:
    • Weekly schedule (before 9am Monday)
    • loose versioning to handle DAB's CalVer format
    • run-e2e label on PRs to trigger end-to-end tests
    • No automerge — DAB bumps require human review

Changes

  • pyproject.tomlbranch = "devel"tag = "2026.6.2"
  • poetry.lock — re-resolved to DAB 2026.6.2 (commit 07acd71)
  • renovate.json — added poetry to enabledManagers, added packageRules for DAB

Prerequisites

  • Confirm the Mend Renovate GitHub App is installed on ansible/eda-server (likely already is since renovate.json is active for Tekton updates)

Notes

  • The existing daily autoupdate-poetry.yml workflow is unchanged — it continues handling lockfile drift for other dependencies
  • Rollback: revert tag = to branch = "devel" and remove poetry from enabledManagers

Test Plan

  • task test passes (unit tests confirmed, integration needs task docker:up:minimal)
  • npx renovate-config-validator renovate.json passes
  • After merge, Renovate detects next DAB tag and opens a PR

Jira

Resolves: AAP-89364

Switch DAB from branch-tracking (branch = "devel") to tag-pinned
(tag = "2026.6.2") so Renovate can detect new releases and open
version-aware PRs automatically.

Enable Renovate's Poetry manager with DAB-specific rules: weekly
schedule, loose versioning for CalVer tags, run-e2e label, and
manual review (no automerge).

Assisted by: Claude Opus 4.6
@coderabbitai

coderabbitai Bot commented Aug 25, 2026

Copy link
Copy Markdown

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

  • Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@B-Whitt B-Whitt changed the title chore(deps): pin django-ansible-base to tag and enable Renovate [draft] chore(deps): pin django-ansible-base to tag and enable Renovate Aug 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant