fix actions; add dep update for workflows in dependabot.yml

SarthakJariwala · Nov 23, 2020 · b36b25a · b36b25a
1 parent ffcd32b
commit b36b25a
Show file tree

Hide file tree

Showing 5 changed files with 33 additions and 16 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,8 +1,19 @@
 version: 2
 updates:
-- package-ecosystem: pip
-  directory: "/"
-  schedule:
-    interval: daily
-    time: "13:00"
-  open-pull-requests-limit: 10
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: daily
+      time: "13:00"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: pip
+    directory: "/.github/workflows"
+    schedule:
+      interval: daily
diff --git a/.github/workflows/constraints.txt b/.github/workflows/constraints.txt
@@ -0,0 +1,3 @@
+pip==20.2.4
+nox==2020.8.22
+poetry==1.1.4
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
@@ -4,13 +4,14 @@ jobs:
   coverage:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
-    - uses: actions/setup-python@v1
+    - uses: actions/checkout@v2.3.4
+    - uses: actions/setup-python@v2.1.4
       with:
         python-version: '3.8'
         architecture: x64
-    - run: pip install nox==2020.8.22
-    - run: pip install poetry==1.1.4
+    - run: pip install --constraint=.github/workflows/constraints.txt pip
+    - run: pip install --constraint=.github/workflows/constraints.txt nox
+    - run: pip install --constraint=.github/workflows/constraints.txt poetry
     - run: nox --sessions tests coverage
       env:
         CODECOV_TOKEN: ${{secrets.CODECOV_TOKEN}}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -11,8 +11,9 @@ jobs:
       with:
         python-version: '3.8'
         architecture: x64
-    - run: pip install nox==2020.8.22
-    - run: pip install poetry==1.1.4
+    - run: pip install --constraint=.github/workflows/constraints.txt pip
+    - run: pip install --constraint=.github/workflows/constraints.txt nox
+    - run: pip install --constraint=.github/workflows/constraints.txt poetry
     - run: nox
     - run: poetry build
     - run: poetry publish --username=__token__ --password=${{ secrets.PYPI_TOKEN }}
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -17,11 +17,12 @@ jobs:
           - { python-version: 3.8, os: macos-latest }
 
     steps:
-      - uses: actions/checkout@v2.3.1
-      - uses: actions/setup-python@v2.1.1
+      - uses: actions/checkout@v2.3.4
+      - uses: actions/setup-python@v2.1.4
         with:
           python-version: ${{ matrix.python-version }}
           architecture: x64
-      - run: pip install nox==2020.8.22
-      - run: pip install poetry==1.1.4
+      - run: pip install --constraint=.github/workflows/constraints.txt pip
+      - run: pip install --constraint=.github/workflows/constraints.txt nox
+      - run: pip install --constraint=.github/workflows/constraints.txt poetry
       - run: nox