Replace poetry update with poetry lock --no-update

BartSchuurmans commented 1 month ago

poetry update is a command that upgrades all dependecies to their latest compatible version. This is not desired when you just want to configure a repository. Instead, poetry lock --no-update should be run after configuring the repository to update the lock file.

This fixes the behavior of Frogbot upgrading all dependencies when called in CI.

Fixes #835

[x] All tests passed. If this feature is not already covered by the tests, I added new tests.
[ ] All static analysis checks passed.
[x] This pull request is on the dev branch.
[x] I used gofmt for formatting the code before submitting the pull request.

github-actions[bot] commented 1 month ago

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

BartSchuurmans commented 1 month ago

I have read the CLA Document and I hereby sign the CLA

BartSchuurmans commented 1 month ago

recheck

BartSchuurmans commented 2 days ago

Could someone take a look at this? My company is a paying customer of JFrog but has difficulties using it because we widely use poetry and the current behaviour is not correct.

jfrog / jfrog-cli-core

Replace poetry update with poetry lock --no-update #1235

[x] I used gofmt for formatting the code before submitting the pull request.