Skip to content

add auto-close dependabot step for requirements*.txt type files - #4220

Merged
derrickaw merged 2 commits into
mainfrom
20260903_autocloseDependabotBadPRs
Sep 3, 2026
Merged

add auto-close dependabot step for requirements*.txt type files#4220
derrickaw merged 2 commits into
mainfrom
20260903_autocloseDependabotBadPRs

Conversation

@derrickaw

@derrickaw derrickaw commented Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor
  1. Dependabot tries to upgrade a lock requirements file that shouldn't be touched except through the weekly generation script.
  2. See build(deps): bump transformers from 5.5.0 to 5.10.1 in /python/src/main/python/streaming-llm #4211, build(deps): bump cryptography from 46.0.7 to 50.0.0 in /python/src/main/python/streaming-llm #4215, build(deps): bump cryptography from 47.0.0 to 50.0.0 in /python/src/main/python/job-builder-server #4217, build(deps): bump cryptography from 47.0.0 to 50.0.0 in /python/src/main/python/bigquery-anomaly-detection #4218 for examples.
  3. Currently, dependabot does have an exclude path option, but for security vulnerabilities, they still get through.
  4. So proposing an auto-close step when requirements.txt or requirements_all.txt files are touched in a PR. Something similar was done in Apache Beam - add closing dependabot step apache/beam#39649

@derrickaw derrickaw added the addition New feature or request label Sep 3, 2026
@derrickaw

derrickaw commented Sep 3, 2026

Copy link
Copy Markdown
Contributor Author

/gemini review

@gemini-code-assist

gemini-code-assist Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

@derrickaw
derrickaw marked this pull request as ready for review September 3, 2026 14:05
@gemini-code-assist

gemini-code-assist Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

@derrickaw derrickaw changed the title add auto-close dependabot step add auto-close dependabot step for requirements*.txt type files Sep 3, 2026
@derrickaw
derrickaw requested a review from Abacn September 3, 2026 16:14
@derrickaw
derrickaw merged commit ab8f188 into main Sep 3, 2026
13 checks passed
@derrickaw
derrickaw deleted the 20260903_autocloseDependabotBadPRs branch September 3, 2026 16:16
aasthabharill pushed a commit that referenced this pull request Sep 7, 2026
@derrickaw @aasthabharill
add auto-close dependabot step for requirements*.txt type files (#4220)
70ea652 
* add auto-close dependabot step

* add ignore comment
aasthabharill added a commit that referenced this pull request Sep 7, 2026
@aasthabharill @github-actions
@liferoad @darshan-sj @derrickaw
Add automated PR watchdog for codelab parameters (#4206)
70b1bc7 
* yml file

* yml file

* changes

* deps: update Python dependencies (#4194)

Co-authored-by: liferoad <7833268+liferoad@users.noreply.github.com>

* [SpannerToSourceDb] Reverse replication Integration test with SSL based connection (#4192)

* [SpannerToSourceDb] Reverse replication Integration test with SSL based connection

* Moving process creation code into a method

* Addressing comments

* add auto-close dependabot step for requirements*.txt type files (#4220)

* add auto-close dependabot step

* add ignore comment

* add delta lake to iceberg blueprint and IT (#4103)

* add delta lake to iceberg IT

* fix spotless and rerun auto-generation

* switch to interrupt call

* change to a dynamic import to fix error

* add forgotten yaml definition file

* add generated README for DeltaLakeToIceberg template

* switch back to stop method for direct runner

* address gemini comment

* spotless

* initial comments fixes

* change iceberg to lakehouse

* change to a wrapped writetoiceberg via writetolakehouse

* update yaml file with wrapper transform

* remove old writetolakehouse transform idea

* spotless

* change to renamed transform

* address Delta client comment

* spotless

* fix generated file

* create write to lakehouse

* change package

* oops - used wrong assumed date

* fix uri catalog version

* update jar to to be the same

* change to managed and mimic deltalake

* update one more version jar

* add manifest resource transformer

* add managed and iceberg

* change pattern

* force to schemaAwareExternalTransform

* another try

* add transformer

* update per Cham's comments

* fix formatting

* fix naming determination (#4210)

* fix naming

* fix default imports issue

* rerun some checks

* clean up old named files

* change pubsubtoiceberg yaml name

* update readme with blueprint naming conventions

* Refactor pipeline parameter options to seperate Options.java file (#4209)

* yml file

* yml file

* changes

* Refactor DataStreamToSpannerOptions to
separate file

* Delete .github/workflows/codelab-watchdog.yml

* Refactor SpannerToSourceDbOptions to separate file

* mistakes

* Refactor GCSSpannerDVOptions to a separate file

* spotless

* Fix checkstyle formatting and missing package-info

* year

* year

* fix tests

* fix tests

* testing

* spotless

* Fix test compilation failures in SpannerToSourceDbTest

* spotless

* change+test

* revert test changes

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: liferoad <7833268+liferoad@users.noreply.github.com>
Co-authored-by: darshan-sj <darshan-sj@users.noreply.github.com>
Co-authored-by: Derrick Williams <derrickaw@google.com>
pratickchokhani pushed a commit to pratickchokhani/DataflowTemplates that referenced this pull request Sep 7, 2026
@aasthabharill @github-actions
@liferoad @darshan-sj @derrickaw @pratickchokhani
Add automated PR watchdog for codelab parameters (GoogleCloudPlatform…
7d87217 
…#4206)

* yml file

* yml file

* changes

* deps: update Python dependencies (GoogleCloudPlatform#4194)

Co-authored-by: liferoad <7833268+liferoad@users.noreply.github.com>

* [SpannerToSourceDb] Reverse replication Integration test with SSL based connection (GoogleCloudPlatform#4192)

* [SpannerToSourceDb] Reverse replication Integration test with SSL based connection

* Moving process creation code into a method

* Addressing comments

* add auto-close dependabot step for requirements*.txt type files (GoogleCloudPlatform#4220)

* add auto-close dependabot step

* add ignore comment

* add delta lake to iceberg blueprint and IT (GoogleCloudPlatform#4103)

* add delta lake to iceberg IT

* fix spotless and rerun auto-generation

* switch to interrupt call

* change to a dynamic import to fix error

* add forgotten yaml definition file

* add generated README for DeltaLakeToIceberg template

* switch back to stop method for direct runner

* address gemini comment

* spotless

* initial comments fixes

* change iceberg to lakehouse

* change to a wrapped writetoiceberg via writetolakehouse

* update yaml file with wrapper transform

* remove old writetolakehouse transform idea

* spotless

* change to renamed transform

* address Delta client comment

* spotless

* fix generated file

* create write to lakehouse

* change package

* oops - used wrong assumed date

* fix uri catalog version

* update jar to to be the same

* change to managed and mimic deltalake

* update one more version jar

* add manifest resource transformer

* add managed and iceberg

* change pattern

* force to schemaAwareExternalTransform

* another try

* add transformer

* update per Cham's comments

* fix formatting

* fix naming determination (GoogleCloudPlatform#4210)

* fix naming

* fix default imports issue

* rerun some checks

* clean up old named files

* change pubsubtoiceberg yaml name

* update readme with blueprint naming conventions

* Refactor pipeline parameter options to seperate Options.java file (GoogleCloudPlatform#4209)

* yml file

* yml file

* changes

* Refactor DataStreamToSpannerOptions to
separate file

* Delete .github/workflows/codelab-watchdog.yml

* Refactor SpannerToSourceDbOptions to separate file

* mistakes

* Refactor GCSSpannerDVOptions to a separate file

* spotless

* Fix checkstyle formatting and missing package-info

* year

* year

* fix tests

* fix tests

* testing

* spotless

* Fix test compilation failures in SpannerToSourceDbTest

* spotless

* change+test

* revert test changes

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: liferoad <7833268+liferoad@users.noreply.github.com>
Co-authored-by: darshan-sj <darshan-sj@users.noreply.github.com>
Co-authored-by: Derrick Williams <derrickaw@google.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Abacn Abacn Abacn approved these changes

Assignees

No one assigned

Labels

addition New feature or request size/S

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@derrickaw @Abacn