Skip to content

Bump frequenz-repo-config from 0.13.6 to 0.17.0 in the repo-config group#57

Merged
llucax merged 5 commits into
v0.x.xfrom
dependabot/pip/repo-config-2fa2ea805a
May 6, 2026
Merged

Bump frequenz-repo-config from 0.13.6 to 0.17.0 in the repo-config group#57
llucax merged 5 commits into
v0.x.xfrom
dependabot/pip/repo-config-2fa2ea805a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 5, 2026

Bumps the repo-config group with 1 update: frequenz-repo-config.

Updates frequenz-repo-config from 0.13.6 to 0.17.0

Release notes

Sourced from frequenz-repo-config's releases.

v0.17.0

Frequenz Repository Configuration Release Notes

Summary

This release improves workflows security, adds a black migration workflow, and fixes failed migrations from version v0.16.0.

Upgrading

Cookiecutter template

All upgrading should be done via the migration script or regenerating the templates.

curl -sSLf https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/<tag>/cookiecutter/migrate.py | python3 -I

But you might still need to adapt your code:

New Features

Cookiecutter template

  • Add a black-migration.yaml workflow that automatically reformats code when Dependabot upgrades black.

Bug Fixes

Cookiecutter template

  • Fix migration of CI workflow matrices that used arch/os dimensions with values different from the default template. The v0.16.0 migration relied on exact string matching, so projects with customized matrix items (for example arch: [amd64], os: [ubuntu-24.04]) could be left only partially migrated. The new migration step rebuilds the platform entries from the existing arch/os values and only rewrites runs-on when it still points to the old matrix keys.
  • Improve workflows security: tighten permissions, avoid potential shell injection, run Python in isolated mode, pin all dependencies using the SHA hash.

What's Changed

... (truncated)

Commits
  • 5814b77 Prepare for v0.17.0 release (#557)
  • 3d3a0de template: Bump version to the upcoming v0.17.0
  • b8165c5 Prepare release notes for the v0.17.0 release
  • 9bc1d61 Fix wrong trailing quote in migration script
  • f125700 Normalize tag comment
  • 488c80c Remove chardet pinning (#554)
  • 2ad88e7 migrate: Fix missed CI platform matrix migrations (#549)
  • eec17e3 Handle private repos in workflow migration (#548)
  • ce994a3 Add black auto-migration workflow (#556)
  • 5800adf Add release notes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the repo-config group with 1 update: [frequenz-repo-config](https://github.com/frequenz-floss/frequenz-repo-config-python).


Updates `frequenz-repo-config` from 0.13.6 to 0.17.0
- [Release notes](https://github.com/frequenz-floss/frequenz-repo-config-python/releases)
- [Changelog](https://github.com/frequenz-floss/frequenz-repo-config-python/blob/v0.x.x/RELEASE_NOTES.md)
- [Commits](frequenz-floss/frequenz-repo-config-python@v0.13.6...v0.17.0)

---
updated-dependencies:
- dependency-name: frequenz-repo-config
  dependency-version: 0.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: repo-config
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) type:tech-debt Improves the project without visible changes for users labels May 5, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 5, 2026 10:52
@dependabot dependabot Bot requested review from florian-wagner-frequenz and removed request for a team May 5, 2026 10:52
@dependabot dependabot Bot added part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) type:tech-debt Improves the project without visible changes for users labels May 5, 2026
=== v0.14.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.14.0/cookiecutter/migrate.py

========================================================================
Creating Dependabot auto-merge workflow...
Created/Updated Dependabot auto-merge workflow at .github/workflows/auto-dependabot.yaml
========================================================================
Disabling CODEOWNERS review requirement in GitHub ruleset...
Default branch: v0.x.x
Found ruleset ID: 9350853
CODEOWNERS review requirement already disabled.
========================================================================
Updating the mkdocs.yml for mkdocstrings-python v2 compatibility...
========================================================================
Migration script finished. Remember to follow any manual instructions.
========================================================================

=== v0.15.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.15.0/cookiecutter/migrate.py

========================================================================
Migrating workflows to use ubuntu-slim runner for lightweight jobs...
  Updated .github/workflows/ci.yaml: migrated job nox-all to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job test-installation-all to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job create-github-release to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job publish-to-pypi to ubuntu-slim
  Updated .github/workflows/release-notes-check.yml: migrated job check-release-notes to ubuntu-slim
  Updated .github/workflows/dco-merge-queue.yml: migrated job DCO to ubuntu-slim
  Updated .github/workflows/labeler.yml: migrated job Label to ubuntu-slim
========================================================================
Migrating pyproject license metadata to SPDX format...
  Updated pyproject.toml: migrated license metadata
========================================================================
Adding flake8-datetimez plugin to dev-flake8 dependencies...
  Updated pyproject.toml: added flake8-datetimez plugin
========================================================================
Fixing dependabot repo-config and mkdocstrings patterns...
  Skipped .github/dependabot.yml: repo-config patterns already updated
  Skipped .github/dependabot.yml: mkdocstrings patterns already updated
  Skipped .github/dependabot.yml (already up to date)
========================================================================
Migrating auto-dependabot workflow to use GitHub App token...
  Replacing .github/workflows/auto-dependabot.yaml with updated workflow (overwriting any local changes)
========================================================================
Migrating the CI workflows to use a platform matrix...
  - .github/workflows/ci.yaml
    Already uses platform matrix
========================================================================
Installing repo-config migration workflow...
  Replacing .github/workflows/repo-config-migration.yaml with updated workflow (overwriting any local changes)
  Updated .github/workflows/auto-dependabot.yaml: added repo-config group exclusion
========================================================================
Updating 'Protect version branches' GitHub ruleset...
  Updated ruleset 'Protect version branches': add 'Migrate Repo Config' status check
========================================================================

       ✅ Migration script finished successfully ✅

=== v0.16.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.16.0/cookiecutter/migrate.py

========================================================================
Fixing repo-config migration merge queue trigger...
  Updated .github/workflows/repo-config-migration.yaml: added merge_group trigger
========================================================================
Fixing mkdocstrings-python v2 paths for api repos...
  Skipping mkdocs.yml (not an api project)
========================================================================
Migrating protolint and publish-to-pypi runners to ubuntu-24.04...
  Skipping protolint runner migration (not an api project)
  Updated .github/workflows/ci.yaml: migrated runner for job publish-to-pypi
========================================================================
Updating 'Protect version branches' GitHub ruleset...
  Ruleset 'Protect version branches' is already up to date
========================================================================

       ✅ Migration script finished successfully ✅

=== v0.17.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.17.0/cookiecutter/migrate.py

========================================================================
Updating generated CI workflows...
  Updated .github/workflows/ci-pr.yaml: updated CI pull-request workflow
  Updated .github/workflows/ci.yaml: updated main CI workflow
>>> Updated .github/workflows/ci.yaml, but could not find the expected pattern(s). Please compare it with the latest template and complete the remaining changes manually.
Pattern 1:
            run: python -m build
Pattern 2:
              extra_opts=
              if echo "$REF_NAME" | grep -- -; then extra_opts=" --prerelease"; fi
              gh release create \
                -R "$REPOSITORY" \
                --notes-file RELEASE_NOTES.md \
                --generate-notes \
                $extra_opts \
                $REF_NAME \
                dist/*
========================================================================
Fixing missed CI platform matrix migrations...
  Skipped .github/workflows/ci.yaml: platform matrix migration already fixed
========================================================================
Updating generated Dependabot workflows...
  Updated .github/workflows/auto-dependabot.yaml: updated Dependabot auto-merge workflow
  Updated .github/workflows/repo-config-migration.yaml: updated repo-config migration workflow
========================================================================
Creating black migration workflow...
  Created .github/workflows/black-migration.yaml: black formatting migration workflow
========================================================================
Updating auxiliary GitHub workflows...
  Updated .github/workflows/dco-merge-queue.yml: updated DCO merge queue workflow
  Updated .github/workflows/labeler.yml: updated labeler workflow
  Updated .github/workflows/release-notes-check.yml: updated release notes check workflow
========================================================================

⚠️⚠️⚠️ Remember to check the manual steps: ⚠️⚠️⚠️
⚠️⚠️⚠️   1. Updated .github/workflows/ci.yaml, but could not find the expected pattern(s). Please compare it with the latest template and complete the remaining changes manually.
Pattern 1:
            run: python -m build
Pattern 2:
              extra_opts=
              if echo "$REF_NAME" | grep -- -; then extra_opts=" --prerelease"; fi
              gh release create \
                -R "$REPOSITORY" \
                --notes-file RELEASE_NOTES.md \
                --generate-notes \
                $extra_opts \
                $REF_NAME \
                dist/*

❌ Migration script finished but requires manual intervention ❌



The migration completed but requires manual intervention.
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 5, 2026

Repo Config Migration

Update: 0.13.6 → 0.17.0

⚠️ Manual Intervention Needed

The migration script exited with a non-zero status. Please review the output above and perform any required manual steps.

After completing the intervention, either remove the tool:repo-config:migration:intervention-pending label or add the tool:repo-config:migration:intervention-done label to signal resolution.

After intervention is marked as completed, this PR still requires manual review, approval, and merge.

Migration output

=== v0.14.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.14.0/cookiecutter/migrate.py

========================================================================
Creating Dependabot auto-merge workflow...
Created/Updated Dependabot auto-merge workflow at .github/workflows/auto-dependabot.yaml
========================================================================
Disabling CODEOWNERS review requirement in GitHub ruleset...
Default branch: v0.x.x
Found ruleset ID: 9350853
CODEOWNERS review requirement already disabled.
========================================================================
Updating the mkdocs.yml for mkdocstrings-python v2 compatibility...
========================================================================
Migration script finished. Remember to follow any manual instructions.
========================================================================

=== v0.15.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.15.0/cookiecutter/migrate.py

========================================================================
Migrating workflows to use ubuntu-slim runner for lightweight jobs...
  Updated .github/workflows/ci.yaml: migrated job nox-all to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job test-installation-all to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job create-github-release to ubuntu-slim
  Updated .github/workflows/ci.yaml: migrated job publish-to-pypi to ubuntu-slim
  Updated .github/workflows/release-notes-check.yml: migrated job check-release-notes to ubuntu-slim
  Updated .github/workflows/dco-merge-queue.yml: migrated job DCO to ubuntu-slim
  Updated .github/workflows/labeler.yml: migrated job Label to ubuntu-slim
========================================================================
Migrating pyproject license metadata to SPDX format...
  Updated pyproject.toml: migrated license metadata
========================================================================
Adding flake8-datetimez plugin to dev-flake8 dependencies...
  Updated pyproject.toml: added flake8-datetimez plugin
========================================================================
Fixing dependabot repo-config and mkdocstrings patterns...
  Skipped .github/dependabot.yml: repo-config patterns already updated
  Skipped .github/dependabot.yml: mkdocstrings patterns already updated
  Skipped .github/dependabot.yml (already up to date)
========================================================================
Migrating auto-dependabot workflow to use GitHub App token...
  Replacing .github/workflows/auto-dependabot.yaml with updated workflow (overwriting any local changes)
========================================================================
Migrating the CI workflows to use a platform matrix...
  - .github/workflows/ci.yaml
    Already uses platform matrix
========================================================================
Installing repo-config migration workflow...
  Replacing .github/workflows/repo-config-migration.yaml with updated workflow (overwriting any local changes)
  Updated .github/workflows/auto-dependabot.yaml: added repo-config group exclusion
========================================================================
Updating 'Protect version branches' GitHub ruleset...
  Updated ruleset 'Protect version branches': add 'Migrate Repo Config' status check
========================================================================

       ✅ Migration script finished successfully ✅

=== v0.16.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.16.0/cookiecutter/migrate.py

========================================================================
Fixing repo-config migration merge queue trigger...
  Updated .github/workflows/repo-config-migration.yaml: added merge_group trigger
========================================================================
Fixing mkdocstrings-python v2 paths for api repos...
  Skipping mkdocs.yml (not an api project)
========================================================================
Migrating protolint and publish-to-pypi runners to ubuntu-24.04...
  Skipping protolint runner migration (not an api project)
  Updated .github/workflows/ci.yaml: migrated runner for job publish-to-pypi
========================================================================
Updating 'Protect version branches' GitHub ruleset...
  Ruleset 'Protect version branches' is already up to date
========================================================================

       ✅ Migration script finished successfully ✅

=== v0.17.0 =========================================================
Script URL: https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/v0.17.0/cookiecutter/migrate.py

========================================================================
Updating generated CI workflows...
  Updated .github/workflows/ci-pr.yaml: updated CI pull-request workflow
  Updated .github/workflows/ci.yaml: updated main CI workflow
>>> Updated .github/workflows/ci.yaml, but could not find the expected pattern(s). Please compare it with the latest template and complete the remaining changes manually.
Pattern 1:
            run: python -m build
Pattern 2:
              extra_opts=
              if echo "$REF_NAME" | grep -- -; then extra_opts=" --prerelease"; fi
              gh release create \
                -R "$REPOSITORY" \
                --notes-file RELEASE_NOTES.md \
                --generate-notes \
                $extra_opts \
                $REF_NAME \
                dist/*
========================================================================
Fixing missed CI platform matrix migrations...
  Skipped .github/workflows/ci.yaml: platform matrix migration already fixed
========================================================================
Updating generated Dependabot workflows...
  Updated .github/workflows/auto-dependabot.yaml: updated Dependabot auto-merge workflow
  Updated .github/workflows/repo-config-migration.yaml: updated repo-config migration workflow
========================================================================
Creating black migration workflow...
  Created .github/workflows/black-migration.yaml: black formatting migration workflow
========================================================================
Updating auxiliary GitHub workflows...
  Updated .github/workflows/dco-merge-queue.yml: updated DCO merge queue workflow
  Updated .github/workflows/labeler.yml: updated labeler workflow
  Updated .github/workflows/release-notes-check.yml: updated release notes check workflow
========================================================================

⚠️⚠️⚠️ Remember to check the manual steps: ⚠️⚠️⚠️
⚠️⚠️⚠️   1. Updated .github/workflows/ci.yaml, but could not find the expected pattern(s). Please compare it with the latest template and complete the remaining changes manually.
Pattern 1:
            run: python -m build
Pattern 2:
              extra_opts=
              if echo "$REF_NAME" | grep -- -; then extra_opts=" --prerelease"; fi
              gh release create \
                -R "$REPOSITORY" \
                --notes-file RELEASE_NOTES.md \
                --generate-notes \
                $extra_opts \
                $REF_NAME \
                dist/*

❌ Migration script finished but requires manual intervention ❌



📋 Full migration logs

@github-actions github-actions Bot added tool:repo-config:migration:intervention-pending Migration requires manual intervention tool:repo-config:migration:executed Migration script has been run labels May 5, 2026
llucax added 3 commits May 5, 2026 13:46
This will make it less likely for repo-config migration scripts to fail.

Signed-off-by: Leandro Lucarella <luca-frequenz@llucax.com>
This part of the workflow diverted from the repo-config template so it
could not be updated by the migration script properly.

Signed-off-by: Leandro Lucarella <luca-frequenz@llucax.com>
These steps are also not part of the repo-config template, so they were
not updated by the migration script.

Signed-off-by: Leandro Lucarella <luca-frequenz@llucax.com>
@llucax llucax removed the tool:repo-config:migration:intervention-pending Migration requires manual intervention label May 5, 2026
@github-actions github-actions Bot added the tool:repo-config:migration:intervention-done Manual migration intervention has been completed label May 5, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 5, 2026

Repo Config Migration

Manual intervention has been marked as completed.

Because this PR required manual intervention, this action will not auto-approve or auto-merge it. Please review, approve, and merge this PR manually.

@llucax
Copy link
Copy Markdown
Contributor

llucax commented May 5, 2026

@phillip-wenig-frequenz FYI as this will probably be needed for the resampler repo.

@llucax llucax enabled auto-merge May 5, 2026 11:55
@llucax
Copy link
Copy Markdown
Contributor

llucax commented May 5, 2026

Needs approval from someone other than me 🙏

@llucax llucax added this pull request to the merge queue May 6, 2026
Merged via the queue into v0.x.x with commit b433046 May 6, 2026
12 checks passed
@llucax llucax deleted the dependabot/pip/repo-config-2fa2ea805a branch May 6, 2026 08:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) tool:repo-config:migration:executed Migration script has been run tool:repo-config:migration:intervention-done Manual migration intervention has been completed type:tech-debt Improves the project without visible changes for users

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants