Skip to content

Infra: Switch Dependabot to a monthly cadence #3914

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
kevinjqliu wants to merge 4 commits into
base: main
Choose a base branch
from
+16 −2
Open

Infra: Switch Dependabot to a monthly cadence #3914

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
72da503
Infra: Switch Dependabot to a monthly cadence
kevinjqliu Sep 6, 2026
6f3b66d
Docs: Note that triggering Dependabot requires committer access
kevinjqliu Sep 6, 2026
35797b0
Docs: Replace Dependabot Insights link that returns 404 without write…
kevinjqliu Sep 6, 2026
65f1aa3
Docs: Restore Dependabot Insights link and skip it in markdown-link-c…
kevinjqliu Sep 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ updates:
- package-ecosystem: "uv"
directory: "/"
schedule:
interval: "weekly"
interval: "monthly"
open-pull-requests-limit: 50
ignore:
- dependency-name: "datafusion"
Expand All @@ -31,7 +31,7 @@ updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
interval: "monthly"
cooldown:
default-days: 7
groups:
Expand Down
14 changes: 14 additions & 0 deletions mkdocs/docs/how-to-release.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,8 @@ This guide outlines the process for releasing PyIceberg in accordance with the [
* SVN Access
* Permission to upload artifacts to the [Apache development distribution](https://dist.apache.org/repos/dist/dev/iceberg/) (requires Apache Committer access).
* Permission to upload artifacts to the [Apache release distribution](https://dist.apache.org/repos/dist/release/iceberg/) (requires Apache PMC access).
* GitHub Access
* Write access to the [apache/iceberg-python](https://github.com/apache/iceberg-python) repository for triggering Dependabot (requires Apache Committer access).
* PyPI Access
* The `twine` package must be installed for uploading releases to PyPi.
* A PyPI account with publishing permissions for the [pyiceberg project](https://pypi.org/project/pyiceberg/).
Expand Down Expand Up @@ -65,6 +67,18 @@ deprecation_message(
)
```

### Update Dependencies

<!-- markdown-link-check-disable-next-line -->
Dependabot runs monthly to keep the noise down, so the pinned dependencies in `uv.lock` may be stale by the time of a release. Before cutting the release candidate, go to the [Dependabot page](https://github.com/apache/iceberg-python/network/updates) in the repository's Insights tab and trigger a manual check for both the `uv` and `github-actions` ecosystems. Review and merge the resulting PRs so the release ships with up-to-date dependencies.

<!-- prettier-ignore-start -->

!!! note
Only a committer with write access to the repository can trigger Dependabot manually. Please work with a committer if you do not have write access.

<!-- prettier-ignore-end -->

### Update Library Version

Update the release version by running `uv version <release-version>`, which updates both `pyproject.toml` and `uv.lock`. Then update the version in `pyiceberg/__init__.py` to match.
Expand Down
Loading