Skip to content

refactor: Link project requirements.txt's to root requirements.txt#4396

Draft
Laennart wants to merge 4 commits into
CactuseSecurity:developfrom
weichwaren-schmiede:refactor/requirements
Draft

refactor: Link project requirements.txt's to root requirements.txt#4396
Laennart wants to merge 4 commits into
CactuseSecurity:developfrom
weichwaren-schmiede:refactor/requirements

Conversation

@Laennart

Copy link
Copy Markdown
Collaborator

Consolidates all used dependencies in the top-level requirements.txt

@Laennart Laennart self-assigned this Mar 16, 2026
@sonarqubecloud

Copy link
Copy Markdown

@Laennart Laennart marked this pull request as ready for review May 18, 2026 14:19
Copilot AI review requested due to automatic review settings May 18, 2026 14:19

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR consolidates Python dependency installation by making the repository’s top-level requirements.txt the single entry point, and updating workflows/docs accordingly.

Changes:

  • Expand root requirements.txt to include linting tools and -r include the importer and app-data-import requirements files.
  • Remove the dedicated requirements-for-app-data-import.txt and introduce/adjust per-component requirements files with notes pointing to the root.
  • Update GitHub Actions and documentation to install from the root requirements.txt.

Reviewed changes

Copilot reviewed 6 out of 7 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
scripts/customizing/app_data_import/requirements.txt Adds an app-data-import requirements file intended to be pulled in by the root requirements.
scripts/customizing/app_data_import/requirements-for-app-data-import.txt Removes the old app-data-import requirements file.
scripts/customizing/app_data_import/readme.md Adds installation instructions pointing to the top-level requirements.
roles/importer/files/importer/requirements.txt Adds a note about using root requirements and removes linting deps from this file.
requirements.txt Becomes the main dependency entry point; adds linting deps and includes other requirements via -r.
documentation/importer/readme.md Updates lint setup instructions to install from root requirements.
.github/workflows/test-install.yml Updates CI to install from root requirements in the python-code-check job.
Comments suppressed due to low confidence (1)

scripts/customizing/app_data_import/requirements-for-app-data-import.txt:1

  • This file is removed, but documentation/developer-docs/git-howto.md still instructs installing it alongside the importer requirements. Please update that documentation (or provide a compatibility stub/redirect) so new contributors don’t follow broken setup steps.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Make sure to install the required Python packages from the top-level `requirements.txt` (GitPython is required to fetch the CSV files from Git):

```bash
pip install -r requirements.txt
@@ -0,0 +1,3 @@
# NOTE: Install all dependencies by using the top-level requirements.txt

GitPython>=3.1.0
Comment on lines 38 to 42
ruff and pre-commit are in requirements.txt

```
pip install -r .\roles\importer\files\importer\requirements.txt
pip install -r requirements.txt
```

@tpurschke tpurschke left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

let's discuss today if we should really fix the versions with == instead of using >=
From a security standpoint this is not really ideal.

@Y4nnikH

Y4nnikH commented May 28, 2026

Copy link
Copy Markdown
Collaborator

let's discuss today if we should really fix the versions with == instead of using >= From a security standpoint this is not really ideal.

Ah I did not see this. I just merged #4634 which fixes the versions and adds dependabot for python packages. We can change this again with another PR should we decide on a different approach

@tpurschke tpurschke marked this pull request as draft June 1, 2026 15:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants