ci: weekly check to notify when vendored datadogpy is behind PyPI by vlad-scherbich · Pull Request #18420 · DataDog/dd-trace-py

vlad-scherbich · 2026-06-02T20:14:16Z

Description

Vendored copies of third-party code can drift silently, which is not ideal. This PR adds a scheduled workflow to notify maintainers when datadogpy has a new release, without any manual tracking.

Specifically motivated by the cgroup v2 origin detection work (#18388, #18416) where we also sent fixes upstream (datadogpy#950). When those land in a new release we'll want to re-vendor and drop the local patch notes.

Changes

.github/workflows/check-vendor-datadogpy.yml: scheduled workflow (every Monday 09:00 UTC + workflow_dispatch) that:
- compares the version in ddtrace/vendor/__init__.py against the latest datadog release on PyPI using a proper semver tuple comparison (handles PEP 440 pre-release suffixes like 0.44.1.dev0)
- opens (or updates) a single GitHub issue labelled vendor-bump when PyPI is strictly ahead, with @DataDog/python-guild mentioned in the body so the team gets notified
- skips scheduled runs on forks; action SHAs are pinned; checkout runs with persist-credentials: false
.github/scripts/check_datadogpy_vendor.py: the version-check logic

Testing

CI

Adds a scheduled GitHub Actions workflow (runs every Monday + on demand) that compares the vendored datadogpy version in ddtrace/vendor/__init__.py against the latest release on PyPI. When the two differ the workflow opens (or updates) a GitHub issue labelled `vendor-bump` describing the gap and linking to the changelog, so the team knows to evaluate whether a vendor bump is warranted. Also adds .github/scripts/check_datadogpy_vendor.py which can be run locally for the same check without needing GitHub Actions.

cit-pr-commenter-54b7da · 2026-06-02T20:15:26Z

Codeowners resolved as

.github/workflows/check-vendor-datadogpy.yml                            @DataDog/python-guild @DataDog/apm-core-python

Copilot

Pull request overview

Adds a scheduled GitHub Actions workflow to detect when the repository’s vendored datadogpy (dogstatsd) copy is behind the latest datadog release on PyPI, and opens/updates a tracking issue to prompt a vendor bump.

Changes:

Introduces a weekly + manual workflow to compare vendored vs PyPI version and manage a single vendor-bump issue.
Adds a Python helper script that fetches the latest PyPI version and parses the vendored version from ddtrace/vendor/__init__.py.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 5 comments.

File	Description
`.github/workflows/check-vendor-datadogpy.yml`	New scheduled workflow that runs the check and creates/updates a tracking issue.
`.github/scripts/check_datadogpy_vendor.py`	New script that fetches PyPI version + parses vendored version and emits step outputs.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

…o dogstatsd section

vlad-scherbich · 2026-06-02T20:27:07Z

@codex please review

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4da6b97d70

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

…edential persistence on checkout

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0b058f2b2b

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

… pin Python 3.12

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

KowalskiThomas · 2026-06-03T06:31:41Z

@@ -0,0 +1,87 @@
+name: Check vendored datadogpy version
+
+# Runs weekly and on demand.  Opens (or updates) a GitHub issue when the


So the job won't fail but an issue will be filed, correct?

Do we check those issues regularly?

So the job won't fail but an issue will be filed, correct?

That's the idea, yes.

Do we check those issues regularly?

I don't believe so, but could be a good addition to the weekly guild agenda. @emmettbutler @brettlangdon for your thoughts on this.

KowalskiThomas · 2026-06-03T06:32:16Z

+            const title = `chore(vendor): bump vendored datadogpy to ${process.env.LATEST_VERSION}`;
+            const body = [
+              `The \`datadog\` package on PyPI has a new release: **${process.env.LATEST_VERSION}**`,
+              `The version currently vendored in \`ddtrace/vendor/\` is **${process.env.VENDORED_VERSION}**.`,
+              ``,
+              `cc @DataDog/python-guild`,
+              ``,
+              `## Next steps`,
+              `1. Review the [datadogpy changelog](https://github.com/DataDog/datadogpy/blob/master/CHANGELOG.md) for changes in \`datadog/dogstatsd/container.py\` and related files.`,


FWIW any file change within dogstatsd would warrant an update, there could be bug fixes etc.

brettlangdon

we should probably have a more structured file to report vendored versions, and then we can systematically check for all vendored dependencies, not just dogstatsd

vlad-scherbich · 2026-06-03T15:03:37Z

we should probably have a more structured file to report vendored versions, and then we can systematically check for all vendored dependencies, not just dogstatsd

@brettlangdon 100%, I was thinking along these lines looking forward, as well. Should we let this PR land and see how it works while also developing a generalized solution for everything?

…tainer.py

github-actions · 2026-07-05T00:26:56Z

This pull request has been automatically closed after a period of inactivity.
After this much time, it will likely be easier to open a new pull request with the
same changes than to update this one from the base branch. Please comment or reopen
if you think this pull request was closed in error.

This comment has been minimized.

Sign in to view

vlad-scherbich added the changelog/no-changelog A changelog entry is not required for this PR. label Jun 2, 2026

vlad-scherbich requested review from a team, Copilot and gyuheon0h June 2, 2026 20:17

Copilot started reviewing on behalf of vlad-scherbich June 2, 2026 20:17 View session

Copilot AI reviewed Jun 2, 2026

View reviewed changes

vlad-scherbich added 2 commits June 2, 2026 16:22

chore: fix docstring, type-annotate local vars, scope version regex t…

1a01b67

…o dogstatsd section

ci: address bot review — semver comparison, fork guard, pin action SHAs

4da6b97

vlad-scherbich requested a review from Copilot June 2, 2026 20:26

Copilot started reviewing on behalf of vlad-scherbich June 2, 2026 20:27 View session

Copilot AI reviewed Jun 2, 2026

View reviewed changes

Comment thread .github/scripts/check_datadogpy_vendor.py Outdated

Comment thread .github/workflows/check-vendor-datadogpy.yml

chatgpt-codex-connector Bot reviewed Jun 2, 2026

View reviewed changes

Comment thread .github/scripts/check_datadogpy_vendor.py Outdated

vlad-scherbich added 2 commits June 2, 2026 16:30

ci: handle PEP 440 pre-release versions in _version_tuple, disable cr…

b06c7ed

…edential persistence on checkout

ci: cc @DataDog/python-guild in vendor-bump issue body

0b058f2

vlad-scherbich marked this pull request as ready for review June 2, 2026 20:44

vlad-scherbich requested review from a team as code owners June 2, 2026 20:44

vlad-scherbich requested review from brettlangdon and florentinl June 2, 2026 20:44

chatgpt-codex-connector Bot reviewed Jun 2, 2026

View reviewed changes

Comment thread .github/scripts/check_datadogpy_vendor.py Outdated

ci: use packaging.version.Version for correct PEP 440 ordering

26a8be8

vlad-scherbich requested a review from Copilot June 2, 2026 20:50

Copilot started reviewing on behalf of vlad-scherbich June 2, 2026 20:50 View session

Copilot AI reviewed Jun 2, 2026

View reviewed changes

Comment thread .github/scripts/check_datadogpy_vendor.py Outdated

Comment thread .github/scripts/check_datadogpy_vendor.py Outdated

Comment thread .github/workflows/check-vendor-datadogpy.yml

ci: use vendored packaging, preserve PEP 440 suffix in version regex,…

7d769f7

… pin Python 3.12

vlad-scherbich requested a review from Copilot June 2, 2026 20:57

Copilot started reviewing on behalf of vlad-scherbich June 2, 2026 20:58 View session

Copilot AI reviewed Jun 2, 2026

View reviewed changes

KowalskiThomas approved these changes Jun 3, 2026

View reviewed changes

brettlangdon reviewed Jun 3, 2026

View reviewed changes

ci: broaden issue template to cover all dogstatsd files, not just con…

2440d98

…tainer.py

github-actions Bot added the stale label Jul 4, 2026

github-actions Bot closed this Jul 5, 2026

		@@ -0,0 +1,87 @@
		name: Check vendored datadogpy version

		# Runs weekly and on demand. Opens (or updates) a GitHub issue when the

Uh oh!

Conversation

vlad-scherbich commented Jun 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Changes

Testing

Uh oh!

This comment has been minimized.

cit-pr-commenter-54b7da Bot commented Jun 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codeowners resolved as

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

vlad-scherbich commented Jun 2, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

KowalskiThomas Jun 3, 2026

Choose a reason for hiding this comment

Uh oh!

vlad-scherbich Jun 3, 2026

Choose a reason for hiding this comment

Uh oh!

KowalskiThomas Jun 3, 2026

Choose a reason for hiding this comment

Uh oh!

brettlangdon left a comment

Choose a reason for hiding this comment

Uh oh!

vlad-scherbich commented Jun 3, 2026

Uh oh!

github-actions Bot commented Jul 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

vlad-scherbich commented Jun 2, 2026 •

edited

Loading

cit-pr-commenter-54b7da Bot commented Jun 2, 2026 •

edited

Loading