Pin dependencies, setup dependabot (#179)

sigstore · Jan 13, 2025 · 8c5fc39 · 8c5fc39
1 parent e10e40a
commit 8c5fc39
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 5 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,16 @@
+version: 2
+
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: monthly
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+    groups:
+      actions:
+        patterns:
+          - "*"
diff --git a/requirements.txt b/requirements.txt
@@ -1,5 +1,5 @@
-pytest~=7.1
-pytest-subtests
-requests~=2.32
-cryptography>=39
-sigstore-protobuf-specs~=0.3.0
+pytest==8.3.4
+pytest-subtests==0.14.1
+requests==2.32.3
+cryptography==44.0.0
+sigstore-protobuf-specs==0.3.2