Skip to content

Bump frequenz-repo-config from 0.14.0 to 0.17.0 in the repo-config group across 1 directory#171

Merged
llucax merged 2 commits into
v0.x.xfrom
dependabot/pip/repo-config-e8d352bcc8
Apr 29, 2026
Merged

Bump frequenz-repo-config from 0.14.0 to 0.17.0 in the repo-config group across 1 directory#171
llucax merged 2 commits into
v0.x.xfrom
dependabot/pip/repo-config-e8d352bcc8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the repo-config group with 1 update in the / directory: frequenz-repo-config.

Updates frequenz-repo-config from 0.14.0 to 0.17.0

Release notes

Sourced from frequenz-repo-config's releases.

v0.17.0

Frequenz Repository Configuration Release Notes

Summary

This release improves workflows security, adds a black migration workflow, and fixes failed migrations from version v0.16.0.

Upgrading

Cookiecutter template

All upgrading should be done via the migration script or regenerating the templates.

curl -sSLf https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/<tag>/cookiecutter/migrate.py | python3 -I

But you might still need to adapt your code:

New Features

Cookiecutter template

  • Add a black-migration.yaml workflow that automatically reformats code when Dependabot upgrades black.

Bug Fixes

Cookiecutter template

  • Fix migration of CI workflow matrices that used arch/os dimensions with values different from the default template. The v0.16.0 migration relied on exact string matching, so projects with customized matrix items (for example arch: [amd64], os: [ubuntu-24.04]) could be left only partially migrated. The new migration step rebuilds the platform entries from the existing arch/os values and only rewrites runs-on when it still points to the old matrix keys.
  • Improve workflows security: tighten permissions, avoid potential shell injection, run Python in isolated mode, pin all dependencies using the SHA hash.

What's Changed

... (truncated)

Commits
  • 5814b77 Prepare for v0.17.0 release (#557)
  • 3d3a0de template: Bump version to the upcoming v0.17.0
  • b8165c5 Prepare release notes for the v0.17.0 release
  • 9bc1d61 Fix wrong trailing quote in migration script
  • f125700 Normalize tag comment
  • 488c80c Remove chardet pinning (#554)
  • 2ad88e7 migrate: Fix missed CI platform matrix migrations (#549)
  • eec17e3 Handle private repos in workflow migration (#548)
  • ce994a3 Add black auto-migration workflow (#556)
  • 5800adf Add release notes
  • Additional commits viewable in compare view

@dependabot dependabot Bot added part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) type:tech-debt Improves the project without visible changes for users labels Mar 27, 2026
@dependabot dependabot Bot requested a review from a team as a code owner March 27, 2026 11:37
@dependabot dependabot Bot requested review from phillip-wenig-frequenz and removed request for a team March 27, 2026 11:37
@dependabot dependabot Bot added part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) type:tech-debt Improves the project without visible changes for users labels Mar 27, 2026
@github-actions github-actions Bot added the tool:auto-merged PR was auto-merged by automation label Mar 27, 2026
github-actions[bot]
github-actions Bot previously approved these changes Mar 27, 2026
@github-actions github-actions Bot enabled auto-merge March 27, 2026 11:37
@github-actions

This comment was marked as outdated.

@github-actions github-actions Bot added the tool:repo-config:migration:executed Migration script has been run label Mar 27, 2026
@llucax llucax closed this Mar 27, 2026
auto-merge was automatically disabled March 27, 2026 12:35

Pull request was closed

@dependabot @github

This comment was marked as outdated.

@dependabot dependabot Bot deleted the dependabot/pip/repo-config-e8d352bcc8 branch March 27, 2026 12:35
@llucax llucax restored the dependabot/pip/repo-config-e8d352bcc8 branch April 1, 2026 07:33
@llucax

This comment was marked as outdated.

@dependabot @github

This comment was marked as outdated.

@llucax llucax removed the tool:repo-config:migration:executed Migration script has been run label Apr 1, 2026
@llucax llucax reopened this Apr 29, 2026
@llucax

This comment was marked as outdated.

@llucax

This comment was marked as outdated.

@dependabot @github

This comment was marked as outdated.

@llucax

This comment was marked as outdated.

@dependabot @github

This comment was marked as outdated.

Bumps the repo-config group with 1 update in the / directory: [frequenz-repo-config](https://github.com/frequenz-floss/frequenz-repo-config-python).


Updates `frequenz-repo-config` from 0.14.0 to 0.17.0
- [Release notes](https://github.com/frequenz-floss/frequenz-repo-config-python/releases)
- [Changelog](https://github.com/frequenz-floss/frequenz-repo-config-python/blob/v0.x.x/RELEASE_NOTES.md)
- [Commits](frequenz-floss/frequenz-repo-config-python@v0.14.0...v0.17.0)

---
updated-dependencies:
- dependency-name: frequenz-repo-config
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: repo-config
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump frequenz-repo-config from 0.14.0 to 0.16.0 in the repo-config group Bump frequenz-repo-config from 0.14.0 to 0.17.0 in the repo-config group across 1 directory Apr 29, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/repo-config-e8d352bcc8 branch from 5062bdb to 0d4dbe5 Compare April 29, 2026 08:59
github-actions[bot]
github-actions Bot previously approved these changes Apr 29, 2026
@github-actions github-actions Bot enabled auto-merge April 29, 2026 08:59
=== v0.15.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.15.0/cookiecutter/migrate.py

========================================================================
Migrating workflows to use ubuntu-slim runner for lightweight jobs...
  Updated .github/workflows/ci.yaml: migrated job nox-all to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job test-installation-all to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job create-github-release to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job publish-to-pypi to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job protolint to ubuntu-slim
  Updated .github/workflows/release-notes-check.yml: migrated job check-release-notes to ubuntu-slim
  Updated .github/workflows/dco-merge-queue.yml: migrated job DCO to ubuntu-slim
  Updated .github/workflows/labeler.yml: migrated job Label to ubuntu-slim
  Updated .github/workflows/ci-pr.yaml: migrated job protolint to ubuntu-slim
========================================================================
Migrating pyproject license metadata to SPDX format...
  Updated pyproject.toml: migrated license metadata
========================================================================
Adding flake8-datetimez plugin to dev-flake8 dependencies...
  Updated pyproject.toml: added flake8-datetimez plugin
========================================================================
Fixing dependabot repo-config and mkdocstrings patterns...
  Skipped .github/dependabot.yml: repo-config patterns already updated
  Skipped .github/dependabot.yml: mkdocstrings patterns already updated
  Skipped .github/dependabot.yml (already up to date)
========================================================================
Migrating auto-dependabot workflow to use GitHub App token...
  Replacing .github/workflows/auto-dependabot.yaml with updated workflow (overwriting any local changes)
========================================================================
Migrating the CI workflows to use a platform matrix...
  - .github/workflows/ci.yaml
    Migrated arch+os matrix to platform
========================================================================
Installing repo-config migration workflow...
  Replacing .github/workflows/repo-config-migration.yaml with updated workflow (overwriting any local changes)
  Updated .github/workflows/auto-dependabot.yaml: added repo-config group exclusion
========================================================================
Updating 'Protect version branches' GitHub ruleset...
  Ruleset 'Protect version branches' is already up to date
========================================================================

       ✅ Migration script finished successfully ✅

=== v0.16.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.16.0/cookiecutter/migrate.py

========================================================================
Fixing repo-config migration merge queue trigger...
  Updated .github/workflows/repo-config-migration.yaml: added merge_group trigger
========================================================================
Fixing mkdocstrings-python v2 paths for api repos...
  Updated mkdocs.yml: moved mkdocstrings api paths out of options
========================================================================
Migrating protolint and publish-to-pypi runners to ubuntu-24.04...
  Updated .github/workflows/ci-pr.yaml: migrated runner for job protolint
  Updated .github/workflows/ci.yaml: migrated runner for job protolint
  Updated .github/workflows/ci.yaml: migrated runner for job publish-to-pypi
========================================================================
Updating 'Protect version branches' GitHub ruleset...
  Ruleset 'Protect version branches' is already up to date
========================================================================

       ✅ Migration script finished successfully ✅



The migration completed successfully.
@github-actions

Copy link
Copy Markdown
Contributor

Repo Config Migration

Update: 0.14.0 → 0.16.0

✅ Migration completed successfully.

Migration output
=== v0.15.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.15.0/cookiecutter/migrate.py

========================================================================
Migrating workflows to use ubuntu-slim runner for lightweight jobs...
  Updated .github/workflows/ci.yaml: migrated job nox-all to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job test-installation-all to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job create-github-release to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job publish-to-pypi to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job protolint to ubuntu-slim
  Updated .github/workflows/release-notes-check.yml: migrated job check-release-notes to ubuntu-slim
  Updated .github/workflows/dco-merge-queue.yml: migrated job DCO to ubuntu-slim
  Updated .github/workflows/labeler.yml: migrated job Label to ubuntu-slim
  Updated .github/workflows/ci-pr.yaml: migrated job protolint to ubuntu-slim
========================================================================
Migrating pyproject license metadata to SPDX format...
  Updated pyproject.toml: migrated license metadata
========================================================================
Adding flake8-datetimez plugin to dev-flake8 dependencies...
  Updated pyproject.toml: added flake8-datetimez plugin
========================================================================
Fixing dependabot repo-config and mkdocstrings patterns...
  Skipped .github/dependabot.yml: repo-config patterns already updated
  Skipped .github/dependabot.yml: mkdocstrings patterns already updated
  Skipped .github/dependabot.yml (already up to date)
========================================================================
Migrating auto-dependabot workflow to use GitHub App token...
  Replacing .github/workflows/auto-dependabot.yaml with updated workflow (overwriting any local changes)
========================================================================
Migrating the CI workflows to use a platform matrix...
  - .github/workflows/ci.yaml
    Migrated arch+os matrix to platform
========================================================================
Installing repo-config migration workflow...
  Replacing .github/workflows/repo-config-migration.yaml with updated workflow (overwriting any local changes)
  Updated .github/workflows/auto-dependabot.yaml: added repo-config group exclusion
========================================================================
Updating 'Protect version branches' GitHub ruleset...
  Ruleset 'Protect version branches' is already up to date
========================================================================

       ✅ Migration script finished successfully ✅

=== v0.16.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.16.0/cookiecutter/migrate.py

========================================================================
Fixing repo-config migration merge queue trigger...
  Updated .github/workflows/repo-config-migration.yaml: added merge_group trigger
========================================================================
Fixing mkdocstrings-python v2 paths for api repos...
  Updated mkdocs.yml: moved mkdocstrings api paths out of options
========================================================================
Migrating protolint and publish-to-pypi runners to ubuntu-24.04...
  Updated .github/workflows/ci-pr.yaml: migrated runner for job protolint
  Updated .github/workflows/ci.yaml: migrated runner for job protolint
  Updated .github/workflows/ci.yaml: migrated runner for job publish-to-pypi
========================================================================
Updating 'Protect version branches' GitHub ruleset...
  Ruleset 'Protect version branches' is already up to date
========================================================================

       ✅ Migration script finished successfully ✅


Next step

Migration changes were committed and auto-merge-on-changes is disabled. Please review, approve, and merge this PR manually.


📋 Full migration logs

@github-actions github-actions Bot added this pull request to the merge queue Apr 29, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to no response for status checks Apr 29, 2026
@llucax llucax added this pull request to the merge queue Apr 29, 2026
Merged via the queue into v0.x.x with commit 1e59b3d Apr 29, 2026
10 checks passed
@llucax llucax deleted the dependabot/pip/repo-config-e8d352bcc8 branch April 29, 2026 12:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) tool:auto-merged PR was auto-merged by automation tool:repo-config:migration:executed Migration script has been run type:tech-debt Improves the project without visible changes for users

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant