Managed dependencies for strax, straxen, wfsim and pema
This repository is a container for tracking the dependencies of the latest versions of the strax, straxen, wfsim and pema - packages. The idea is to maintain the requirements-tests.txt file that serves as the shared requirements file of each. To avoid having to maintain several very similar files for each of the packages, we just maintain only this file. The packages all download this file when performing tests to assure that we know tests are always performed on fixed software versions.
Since this repository's only purpose is to facilitate a requirements file for other testing infrastructures, the testing on this specific repo is set rather flexible. In contrast to the packages mentioned above one can easily let dependabot merge PRs (we don't require an approving review or anything). Hence one can safely tell dependabot to merge PRs which it will automatically merge as soon as the tests pass. Just add this comment to a PR:
@dependabot squash and mergeOne side note is that one should keep in mind that dependabot's PRs don't have access to our required secrets. This means that the tests are only really fully run when a PR is merged to master (and has access to the secrets there). This can lead to the unlikely situation that an issue with one dependency is uncovered then. The offending PR should be reverted as soon as possible to prevent tests on the respective packages to fail too (they usually rely on the code on the master branch of this repository).