search

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.72k stars 1.02k forks source link

Support heroku runtime updates #2176

Open merwok opened 5 years ago

merwok commented 5 years ago

Projects deployed to heroku define the Python version wanted in a pure text file called runtime.txt, with values like python-3.7.2 (https://devcenter.heroku.com/articles/python-support#supported-runtimes)

It would be great if dependabot sent me PRs when 3.7.3 becomes available :package: :robot: :sparkles:

Development happens here: https://github.com/heroku/heroku-buildpack-python , with release PRs and versions noted as tags.

I suppose this would require special handling, as e.g. v151 of that repo provides a bump python-3.5.6 → python-3.5.7. As far as I know there is no public repo with the container images, so the option of watching an image repo isn’t there. On the other hand the doc page (my first link above) could be scraped…

Throwing out the idea here for now!

greysteil commented 5 years ago

Interesting!

This one would be tricky but I'd like to get to it. I think scraping https://devcenter.heroku.com/articles/python-support#supported-runtimes would be the way to get the supported versions, and that this should be bundled into Python updates from a UI perspective (rather than being separately configurable).

merwok commented 5 years ago

That would work for me!

greysteil commented 5 years ago

Awesome. I can't work on this straight away but will keep it open and try to get to it soon!

merwok commented 5 years ago

FTR netlify also uses that filename: reference https://www.netlify.com/docs/build-settings/#python list of values https://github.com/netlify/build-image/blob/xenial/included_software.md#languages

(Heroku hosts dynamic sites, Netlify static sites; the runtime and requirements define the environment in which the site build command is run)

jeffwidman commented 1 year ago

👋 Sorry for the slow followup. I'm sweeping some dust bunnies from our backlog and ran across this.

In the nearly four years since this was originally opened, the popularity of Heroku seems to have dropped off a lot, esp since they dropped support for free tiers.

Is there still active interest in this, or should it be closed?

To be clear, we're not yet opening up to new ecosystems, although we hope to start looking into that soon. But I just saw this specific request and wondered if it was even relevant to our userbase anymore.

merwok commented 1 year ago

Would still be useful for us, but not that big a deal.

Netlify also uses runtime.txt but with a different format (and glacial pace to support current Python versions).

hiemanshu commented 5 months ago

+1 Would be useful for us as well.