Merge pull request #15 from zopefoundation/auto-update

Add auto update via dependabot.

.github/dependabot.yml

@@ -0,0 +1,20 @@
+---
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    pull-request-branch-name:
+      separator: "-"
+    labels:
+      - github_actions
+  - package-ecosystem: pip
+    directory: dependabot/
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    pull-request-branch-name:
+      separator: "-"
+    labels:
+      - dependencies

.github/workflows/sync.yml

@@ -0,0 +1,33 @@
+name: Sync Requirements
+
+on:
+  pull_request:
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          ref: ${{ github.event.pull_request.head.ref }}
+          token: ${{ secrets.COMMIT_ACTIONS_TOKEN }}
+      - uses: actions/setup-python@v5
+        with:
+          python-version: 3.11
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install vereqsyn
+      - name: Syncing grok-versions.cfg with requirements.txt
+        run: |
+          vereqsyn grok-versions.cfg dependabot/requirements.txt
+      - name: Commit changes
+        uses: EndBug/add-and-commit@v9
+        with:
+          committer_name: GitHub Actions
+          committer_email: [email protected]
+          message: Version synchronization
+          add: '["grok-versions.cfg", "dependabot/requirements.txt"]'

.github/workflows/tests.yml

@@ -28,16 +28,16 @@ jobs:
         - ["3.10",  "py310"]
         - ["3.11",  "py311"]
         - ["3.12",  "py312"]
-        - ["pypy-3.9", "pypy3"]
+        - ["pypy-3.10", "pypy3"]
         - ["3.9",   "docs"]
 
     runs-on: ${{ matrix.os[1] }}
     if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name
     name: ${{ matrix.config[1] }}
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.config[0] }}
     - name: Pip cache

.meta.toml

@@ -2,7 +2,7 @@
 # https://github.com/zopefoundation/meta/tree/master/config/toolkit
 [meta]
 template = "toolkit"
-commit-id = "1a1f5e27"
+commit-id = "e45966cd"
 
 [python]
 with-sphinx-doctests = false
@@ -34,6 +34,7 @@ fail-under = "not applicable"
 
 [check-manifest]
 additional-ignores = [
+    "dependabot/*",
     "docs/_build/html/*",
     "docs/_build/html/*/*",
     "docs/_build/html/*/*/*",

dependabot/requirements.txt

@@ -0,0 +1,64 @@
+Chameleon==4.4.2
+fanstatic==1.4
+grok==4.0
+grokcore.annotation==4.0
+grokcore.catalog==4.0
+grokcore.chameleon==4.0
+grokcore.component==4.1
+grokcore.content==4.1
+grokcore.error==4.0
+grokcore.formlib==4.0
+grokcore.json==4.1
+grokcore.layout==4.0
+grokcore.message==4.0
+grokcore.security==4.0
+grokcore.site==4.0
+grokcore.startup==4.0
+grokcore.traverser==4.0
+grokcore.view==4.0
+grokcore.viewlet==4.0
+grokcore.xmlrpc==4.1
+grokui.admin==1.0
+grokui.base==0.8.2
+ipython==8.18.1
+martian==2.0.post1
+z3c.evalexception==4.0
+z3c.flashmessage==3.0
+z3c.pt==4.0
+z3c.recipe.i18n==2.0
+zc.catalog==3.0
+zope.app.appsetup==5.0
+zope.app.debug==4.0.0
+zope.app.publication==5.0
+zope.app.wsgi==5.0
+zope.errorview==2.0
+zope.fanstatic==3.0.0
+zope.generations==5.1.0
+zope.testbrowser==6.0
+appnope==0.1.3
+beautifulsoup4==4.12.2
+collective.recipe.omelette==1.1.0
+collective.recipe.template==2.2
+decorator==5.1.1
+gnureadline==8.1.2
+grokcore.rest==4.1
+ipython-genutils==0.2.0
+Paste==3.7.1
+pexpect==4.9.0
+pickleshare==0.7.5
+pkginfo==1.9.6
+ptyprocess==0.7.0
+requests-toolbelt==1.0.0
+shutilwhich==1.1.0
+simplegeneric==0.8.1
+soupsieve==2.5
+tqdm==4.66.1
+traitlets==5.14.0
+twine==4.0.2
+waitress==2.1.2
+WebOb==1.8.7
+WebTest==3.0.0
+WSGIProxy2==0.5.1
+z3c.autoinclude==1.0
+zc.recipe.egg==2.0.7
+zdaemon==5.0

docs/release.rst

@@ -19,6 +19,9 @@ Releasing a new GROK toolkit version
 Updating versions of dependencies
 ---------------------------------
 
+Manual way
+++++++++++
+
 To get new version pins into GROK toolkit run the following steps:
 
 * Check https://zopefoundation.github.io/zopetoolkit/ whether there is a new
@@ -34,6 +37,15 @@ To get new version pins into GROK toolkit run the following steps:
   versions are updated.
 * If the test runs are successful: create a pull request on GitHub.
 
+Automated way
++++++++++++++
+
+* There is a dependabot configuration automatically updating
+  ``dependabot/requirements.txt``.
+
+* And there is a GitHub actions job syncing between
+  ``dependabot/requirements.txt`` and ``grok-versions.cfg``.
+
 Creating a release
 ------------------
 

setup.cfg

@@ -11,6 +11,7 @@ ignore =
     .editorconfig
     .meta.toml
     docs/_build/html/_sources/*
+    dependabot/*
     docs/_build/html/*
     docs/_build/html/*/*
     docs/_build/html/*/*/*

setup.py

@@ -30,4 +30,5 @@
     python_requires='>=3.7',
     install_requires=[],
     entry_points={},
+    packages=[],
     )