Pin runtime and test dependencies (#316)

* build: Extracted runtime dependencies finto requirements.txt.

Signed-off-by: Michael Seifert <[email protected]>

* build: Removed upper version bound on pytest dependency.

Constrained pytest to v7.1.1.

Signed-off-by: Michael Seifert <[email protected]>

* build: Added version constraints for transitive dependencies of the "testing" extra.

Signed-off-by: Michael Seifert <[email protected]>

* build: Added version constraints for dependencies to the "pytest-min" tox environment.

Signed-off-by: Michael Seifert <[email protected]>

* build: Extracted runtime dependencies from pytest-min tox environment into the file pytest-min-requirements.txt.

Signed-off-by: Michael Seifert <[email protected]>

* build: Added missing explicit dependency on typing-extensions to pytest-min-requirements.

Signed-off-by: Michael Seifert <[email protected]>

* ci: Move different sets of constraint and requirement files to different directories.

This allows Dependabot to update both dependency sets independently.

Signed-off-by: Michael Seifert <[email protected]>

* build: Removed upper bound on the mypy version installed by the "testing" extra.

Adjusted constraints accordingly.

Signed-off-by: Michael Seifert <[email protected]>

* build: Removed upper bound on the coverage version installed by the "testing" extra.

Adjusted constraints accordingly.

Signed-off-by: Michael Seifert <[email protected]>

Author: seifertm

.github/dependabot.yml

@@ -2,9 +2,15 @@
 version: 2
 updates:
 - package-ecosystem: pip
-  directory: /
+  directory: /dependencies/default
   schedule:
-    interval: daily
+    interval: weekly
+  open-pull-requests-limit: 10
+  target-branch: master
+- package-ecosystem: pip
+  directory: /dependencies/pytest-min
+  schedule:
+    interval: weekly
   open-pull-requests-limit: 10
   target-branch: master
 - package-ecosystem: github-actions

dependencies/default/constraints.txt

@@ -0,0 +1,24 @@
+async-generator==1.10
+attrs==21.4.0
+coverage==6.3.2
+flaky==3.7.0
+hypothesis==6.39.6
+idna==3.3
+importlib-metadata==4.11.3
+iniconfig==1.1.1
+mypy==0.942
+mypy-extensions==0.4.3
+outcome==1.1.0
+packaging==21.3
+pluggy==1.0.0
+py==1.11.0
+pyparsing==3.0.7
+pytest==7.1.1
+pytest-trio==0.7.0
+sniffio==1.2.0
+sortedcontainers==2.4.0
+tomli==2.0.1
+trio==0.20.0
+typed-ast==1.5.2
+typing_extensions==4.1.1
+zipp==3.7.0

dependencies/default/requirements.txt

@@ -0,0 +1,4 @@
+# Always adjust install_requires in setup.cfg and pytest-min-requirements.txt
+# when changing runtime dependencies
+pytest >= 6.1.0
+typing-extensions >= 3.7.2; python_version < "3.8"

dependencies/pytest-min/constraints.txt

@@ -0,0 +1,22 @@
+async-generator==1.10
+attrs==21.4.0
+coverage==6.3.2
+flaky==3.7.0
+hypothesis==6.39.6
+idna==3.3
+iniconfig==1.1.1
+mypy==0.942
+mypy-extensions==0.4.3
+outcome==1.1.0
+packaging==21.3
+pluggy==0.13.1
+py==1.11.0
+pyparsing==3.0.7
+pytest==6.1.0
+pytest-trio==0.7.0
+sniffio==1.2.0
+sortedcontainers==2.4.0
+toml==0.10.2
+tomli==2.0.1
+trio==0.20.0
+typing_extensions==4.1.1

dependencies/pytest-min/requirements.txt

@@ -0,0 +1,4 @@
+# Always adjust install_requires in setup.cfg and requirements.txt
+# when changing minimum version dependencies
+pytest == 6.1.0
+typing-extensions >= 3.7.2; python_version < "3.8"

setup.cfg

@@ -34,16 +34,17 @@ python_requires = >=3.7
 packages = find:
 include_package_data = True
 
+# Always adjust requirements.txt and pytest-min-requirements.txt when changing runtime dependencies
 install_requires =
   pytest >= 6.1.0
   typing-extensions >= 3.7.2; python_version < "3.8"
 
 [options.extras_require]
 testing =
-  coverage==6.2
+  coverage >= 6.2
   hypothesis >= 5.7.1
   flaky >= 3.5.0
-  mypy == 0.931
+  mypy >= 0.931
   pytest-trio >= 0.7.0
 
 [options.entry_points]

tox.ini

@@ -8,15 +8,17 @@ passenv =
 [testenv]
 extras = testing
 deps =
-     pytest == 6.2.5  # required for Python 3.10, not bad for others
+     --requirement dependencies/default/requirements.txt
+     --constraint dependencies/default/constraints.txt
 commands = make test
 allowlist_externals =
     make
 
 [testenv:pytest-min]
 extras = testing
 deps =
-     pytest == 6.1.0
+     --requirement dependencies/pytest-min/requirements.txt
+     --constraint dependencies/pytest-min/constraints.txt
 commands = make test
 allowlist_externals =
     make