Hi Helen,
On 29/10/24 16:07, Helen Mae Koike Fornazier wrote:
---- On Thu, 17 Oct 2024 00:39:48 -0300 WangYuli wrote ---
> GitHub Dependabot keeps bugging us about old, vulnerable Python packages.
>
> Until we figure out a way to make it calm, we're stuck updating our
> dependencies whenever it complains.
>
> I guess it's a good thing in the long run, though, right?
> Makes our CI a bit "more secure"...
>
> Signed-off-by: WangYuli wangyuli@xxxxxxxxxxxxx>
> --
> 2.45.2
>
>
Hi WangYuli,
Thanks for this.
tbh, I'm tempted in removing the python script that is in the repo, and keep it out-of-tree somewhere, since it is a tool that is only triggered manually in local environment.
I also want to hear Vignesh's thoughts about it.
We can remove xfails/update-xfails.py script since we do not use this in CI jobs. Once ci-collate [1] is ready and tested for drm-ci, we could use this tool directly.
[1] https://gitlab.freedesktop.org/gfx-ci/ci-collate/
Regards,
Vignesh
Attachment:
OpenPGP_0xC5DA1F3046F40BEE.asc
Description: OpenPGP public key
Attachment:
OpenPGP_signature.asc
Description: OpenPGP digital signature