add dependency-update workflow template (fixes #683) by Rimsha2535 · Pull Request #756 · exasol/python-toolbox

Rimsha2535 · 2026-03-19T14:29:48Z

Fixes #683

Checklist

Note: If any of the items in the checklist are not relevant to your PR, just check the box.

For any Pull Request

Is the following correct:

the title of the Pull Request?
the title of the corresponding issue?
there are no other open [Pull Requests](../../../../pulls) for the same update/change?
that the issue which this Pull Request fixes ("Fixes...") is mentioned?

When Changes Were Made

Did you:

update the changelog?
update the cookiecutter-template?
update the implementation?
check coverage and add tests: unit tests and, if relevant, integration tests?
update the User Guide & other documentation?
resolve any failing CI criteria (incl. Sonar quality gate)?

When Preparing a Release

Have you:

thought about version number (major, minor, patch)?
checked Exasol packages for updates and resolved open vulnerabilities, if easily possible?

Notes

Changelog was not updated because this is an internal workflow/template change.
No separate cookiecutter-template update was needed because the workflow template itself was updated.
CI checks are currently failing and will be fixed.

ArBridgeman · 2026-04-15T08:10:55Z

The GitHub workflow code looked good, but it's always good test, so here are those tests done via
another branch (nearly identical to this one):

Use cases:

✅ No vulnerability detected, so no update
https://github.com/exasol/python-toolbox/actions/runs/24443525540/job/71414050584
✅ Vulnerability detected, do an update, & create PR
https://github.com/exasol/python-toolbox/actions/runs/24444147768/job/71416082184

Example PR:
#780

Like @ckunki said, we likely need to modify this text more to tell the user what to do. But it sounds like this would be done in a later effort.

ckunki

Added 2 comments

Co-authored-by: Christoph Kuhnke <christoph.kuhnke@exasol.com>

sonarqubecloud · 2026-05-06T08:51:55Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

ArBridgeman · 2026-05-06T09:15:09Z

+          status: '${{ job.status }}'
+          token: '${{ secrets.GITHUB_TOKEN }}'
+          notification_title: 'Dependency update for {repo} created a Pull Request'
+          status: '${{ job.status }}',


duplicate field

Suggested change

status: '${{ job.status }}',

ArBridgeman · 2026-05-06T09:15:15Z

+          token: '${{ secrets.GITHUB_TOKEN }}'
+          notification_title: 'Dependency update for {repo} created a Pull Request'
+          status: '${{ job.status }}',
+          token: '${{ secrets.GITHUB_TOKEN }}',


duplicate field

Suggested change

token: '${{ secrets.GITHUB_TOKEN }}',

ArBridgeman · 2026-05-06T09:17:14Z

+          notification_title: 'Dependency update for {repo} created a Pull Request'
+          status: '${{ job.status }}',
+          token: '${{ secrets.GITHUB_TOKEN }}',
+          notification_title: 'Dependency update for {repo} created a Pull Request',


duplicate field

Suggested change

notification_title: 'Dependency update for {repo} created a Pull Request',

ArBridgeman · 2026-05-06T09:19:32Z

+
+          echo "pr_url=$PR_URL" >> "$GITHUB_OUTPUT"
+
+          pr_url=$(gh pr create \


not needed

Suggested change

pr_url=$(gh pr create \

ArBridgeman · 2026-05-06T09:19:49Z

+          echo "pr_url=$PR_URL" >> "$GITHUB_OUTPUT"
+
+          pr_url=$(gh pr create \
+            --base "$BASE_BRANCH" \


not needed

Suggested change

--base "$BASE_BRANCH" \

ArBridgeman · 2026-05-06T09:20:04Z

+
+          pr_url=$(gh pr create \
+            --base "$BASE_BRANCH" \
+            --title "Update dependencies to fix vulnerabilities ($(date '+%Y-%m-%d'))" \


not needed

Suggested change

--title "Update dependencies to fix vulnerabilities ($(date '+%Y-%m-%d'))" \

ArBridgeman · 2026-05-06T09:21:07Z

+          pr_url=$(gh pr create \
+            --base "$BASE_BRANCH" \
+            --title "Update dependencies to fix vulnerabilities ($(date '+%Y-%m-%d'))" \
+            --body "Automated dependency update for \`poetry.lock\`.)


not needed

Suggested change

--body "Automated dependency update for \`poetry.lock\`.)

ArBridgeman · 2026-05-06T09:21:17Z

+            --base "$BASE_BRANCH" \
+            --title "Update dependencies to fix vulnerabilities ($(date '+%Y-%m-%d'))" \
+            --body "Automated dependency update for \`poetry.lock\`.)
+          echo "pr_url=$pr_url" >> "$GITHUB_OUTPUT"


not needed

Suggested change

echo "pr_url=$pr_url" >> "$GITHUB_OUTPUT"

ArBridgeman · 2026-05-06T09:22:16Z

+          echo "pr_url=$pr_url" >> "$GITHUB_OUTPUT"
+          This PR was created by the dependency update workflow after running:
+          - \`poetry run -- nox -s dependency:audit\`
+          - \`poetry update\`"


not needed

Suggested change

- \`poetry update\`"

ArBridgeman · 2026-05-06T09:22:25Z

+            --body "Automated dependency update for \`poetry.lock\`.)
+          echo "pr_url=$pr_url" >> "$GITHUB_OUTPUT"
+          This PR was created by the dependency update workflow after running:
+          - \`poetry run -- nox -s dependency:audit\`


not needed

Suggested change

- \`poetry run -- nox -s dependency:audit\`

ArBridgeman · 2026-05-06T09:22:33Z

+            --title "Update dependencies to fix vulnerabilities ($(date '+%Y-%m-%d'))" \
+            --body "Automated dependency update for \`poetry.lock\`.)
+          echo "pr_url=$pr_url" >> "$GITHUB_OUTPUT"
+          This PR was created by the dependency update workflow after running:


not needed

Suggested change

This PR was created by the dependency update workflow after running:

ckunki · 2026-05-06T09:38:33Z

    permissions:
      contents: read

-  test-python-environment:


Why has this been removed, now?

@ckunki Sorry, there was a merge conflict in that file and I think this line was accidentally removed while resolving it.

Thanks, this shouldn't be removed. It's related to the PTB not fully supporting GitHub workflow changes.
So the poetry run -- nox -s workflow:generate -- all overwrites & we need to manually ensure it stays 😿
@Rimsha2535 lmk if you want to pair briefly on this one.

added dependency-update workflow template

fdf9333

Rimsha2535 had a problem deploying to manual-approval March 19, 2026 14:29 — with GitHub Actions Failure

Rimsha2535 requested a review from kratz00 March 19, 2026 14:30

kratz00 changed the title ~~add dependency-update workflow template~~ add dependency-update workflow template (fixes #683) Mar 19, 2026

Rimsha2535 requested a review from ArBridgeman March 30, 2026 12:41

ArBridgeman reviewed Mar 31, 2026

View reviewed changes

Add dependency-update workflow template and update tests

67e8357

Rimsha2535 requested a deployment to manual-approval April 13, 2026 13:24 — with GitHub Actions Waiting

Merge branch 'main' into feature/dependency-update-workflow

e764019

Rimsha2535 requested a deployment to manual-approval April 13, 2026 13:26 — with GitHub Actions Waiting

Rimsha2535 requested a review from ArBridgeman April 13, 2026 13:27

ArBridgeman reviewed Apr 14, 2026

View reviewed changes

Rimsha2535 requested a deployment to manual-approval April 14, 2026 14:19 — with GitHub Actions Waiting

Apply review feedback for dependency update workflow

c9c53e6

Rimsha2535 requested a review from ArBridgeman April 14, 2026 14:35

Merge branch 'main' into feature/dependency-update-workflow

c05e242

ArBridgeman requested a deployment to manual-approval April 15, 2026 07:46 — with GitHub Actions Waiting

ArBridgeman reviewed Apr 15, 2026

View reviewed changes

Comment thread exasol/toolbox/templates/github/workflows/dependency-update.yml Outdated

ArBridgeman reviewed Apr 15, 2026

View reviewed changes

Comment thread .github/workflows/dependency-update.yml Outdated

ckunki reviewed Apr 15, 2026

View reviewed changes

Comment thread .github/workflows/dependency-update.yml

ckunki requested changes Apr 15, 2026

View reviewed changes

Comment thread test/integration/tools/workflow_integration_test.py Outdated

tkilias reviewed Apr 16, 2026

View reviewed changes

Comment thread .github/workflows/dependency-update.yml Outdated

Rimsha2535 and others added 2 commits April 20, 2026 11:50

Improve dependency update workflow, tests, and docs

cea77fd

Merge branch 'main' into feature/dependency-update-workflow

9844688

ArBridgeman had a problem deploying to manual-approval April 29, 2026 08:16 — with GitHub Actions Error

ArBridgeman requested a deployment to manual-approval April 29, 2026 08:34 — with GitHub Actions Waiting

ArBridgeman added 2 commits April 29, 2026 13:11

Merge branch 'main' into feature/dependency-update-workflow

454f20e

Fix release:prepare test

49145b9

ckunki reviewed May 6, 2026

View reviewed changes

Comment thread .github/workflows/dependency-update.yml

ckunki requested changes May 6, 2026

View reviewed changes

ArBridgeman mentioned this pull request May 6, 2026

Improve description in automated PR from dependency-update.yml #792

Open

11 tasks

Rimsha2535 and others added 6 commits May 6, 2026 10:44

Update .github/workflows/dependency-update.yml

a882d41

Co-authored-by: Christoph Kuhnke <christoph.kuhnke@exasol.com>

Update .github/workflows/dependency-update.yml

eec5503

Co-authored-by: Christoph Kuhnke <christoph.kuhnke@exasol.com>

Update .github/workflows/dependency-update.yml

4bb47a9

Co-authored-by: Christoph Kuhnke <christoph.kuhnke@exasol.com>

Update .github/workflows/dependency-update.yml

a4c95e3

Co-authored-by: Christoph Kuhnke <christoph.kuhnke@exasol.com>

Update .github/workflows/dependency-update.yml

8ec9d68

Co-authored-by: Christoph Kuhnke <christoph.kuhnke@exasol.com>

Merge branch 'main' into feature/dependency-update-workflow

7ee7359

Rimsha2535 requested a deployment to manual-approval May 6, 2026 08:48 — with GitHub Actions Waiting

Rimsha2535 added 2 commits May 6, 2026 10:59

Add slack_hook

9e18007

Resolve merge conflicts

ee5f3ab

Rimsha2535 requested review from ArBridgeman and ckunki and removed request for ArBridgeman May 6, 2026 09:05

ArBridgeman reviewed May 6, 2026

View reviewed changes

Copy dependency-update workflow changes to template

6f64290

ArBridgeman reviewed May 6, 2026

View reviewed changes

ckunki requested changes May 6, 2026

View reviewed changes

ckunki approved these changes May 6, 2026

View reviewed changes


		echo "pr_url=$PR_URL" >> "$GITHUB_OUTPUT"

		pr_url=$(gh pr create \

Conversation

Rimsha2535 commented Mar 19, 2026 • edited by ArBridgeman Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Checklist

For any Pull Request

When Changes Were Made

When Preparing a Release

Notes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ArBridgeman commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ckunki left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

sonarqubecloud Bot commented May 6, 2026

Quality Gate passed

Uh oh!

ArBridgeman May 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

ArBridgeman May 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

ArBridgeman May 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Rimsha2535 commented Mar 19, 2026 •

edited by ArBridgeman

Loading

ArBridgeman commented Apr 15, 2026 •

edited

Loading

ArBridgeman May 6, 2026 •

edited

Loading

ArBridgeman May 6, 2026 •

edited

Loading

ArBridgeman May 6, 2026 •

edited

Loading