[Announcement] pyup robot has been enabled

[webknjaz]

Hi everyone,

I've enabled pyup bot on the Molecule repo. It will help humans to keep dependencies up-to-date. This integration has been chosen over dependabot because it supports tox.ini (ref: #1710 (comment)).

UI: https://pyup.io/account/repos/github/ansible/molecule/
Config: .pyup.yml
Docs:

• https://pyup.io/docs/bot/config/
• https://pyup.io/docs/bot/filter/

I expect that it may be a bit annoying at first and we need to adjust in more granularly. So please feel free to send PRs against config and filter comment directives against specific lines in deps declarations.

Thanks.

--:robot:

[ssbarnea]

I know that this bot and I can tell you that it can be bit annoying, but weekly should keep us safe.

I checked config and seems good, pinning test deps being a good practice and not pinning runtime ones (setup.cfg), as we don't want to create conflicts for consumers.

Lets use this ticket for follow-ups on that manner.

[decentral1se]

Can we close this off? Seems to well integrated now.

[webknjaz]

Fair enough.