Re: [RESEND. PATCH 1/5] drm/ci: Upgrade requirements because of bothering by GitHub Dependabot

[WangYuli <wangyuli@uniontech.com>]

[-- Attachment #1.1.1: Type: text/plain, Size: 1259 bytes --]


On 2024/10/29 18:47, Vignesh Raman wrote:
> Hi Helen,
>
> On 29/10/24 16:07, Helen Mae Koike Fornazier wrote:
>>
>>
>>
>>
>> ---- On Thu, 17 Oct 2024 00:39:48 -0300 WangYuli  wrote ---
>>
>>   > GitHub Dependabot keeps bugging us about old, vulnerable Python 
>> packages.
>>   >
>>   > Until we figure out a way to make it calm, we're stuck updating our
>>   > dependencies whenever it complains.
>>   >
>>   > I guess it's a good thing in the long run, though, right?
>>   > Makes our CI a bit "more secure"...
>>   >
>>   > Signed-off-by: WangYuli wangyuli@uniontech.com>
>>   > --
>>   > 2.45.2
>>   >
>>   >
>>
>>
>> Hi WangYuli,
>>
>> Thanks for this.
>>
>> tbh, I'm tempted in removing the python script that is in the repo, 
>> and keep it out-of-tree somewhere, since it is a tool that is only 
>> triggered manually in local environment.
>>
>> I also want to hear Vignesh's thoughts about it.
>
> We can remove xfails/update-xfails.py script since we do not use this 
> in CI jobs. Once ci-collate [1] is ready and tested for drm-ci, we 
> could use this tool directly.
>
> [1] https://gitlab.freedesktop.org/gfx-ci/ci-collate/
>
> Regards,
> Vignesh
>

Cool!

Cheers,
-- 
WangYuli

[-- Attachment #1.1.2: OpenPGP public key --]
[-- Type: application/pgp-keys, Size: 645 bytes --]

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 236 bytes --]