freeze schema version & dependabot (#148)

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

.github/dependabot.yml

@@ -1,12 +1,24 @@
 # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
 version: 2
 updates:
+  # Enable version updates for python
+  - package-ecosystem: "pip"
+    directory: "/requirements"
+    schedule:
+      interval: "weekly"
+    labels: ["ci/cd"]
+    pull-request-branch-name:
+      separator: "-"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "Lightning-AI/core-lightning"
+
+  # Enable version updates for GitHub Actions
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
-    labels:
-      - "ci/cd"
+    labels: ["ci/cd"]
     pull-request-branch-name:
       separator: "-"
     open-pull-requests-limit: 5

.github/workflows/check-code.yml

@@ -107,7 +107,3 @@ jobs:
 
     - name: Run pre-commit
       uses: pre-commit/action@v3.0.0
-      # this action also provides an additional behaviour when used in private repositories
-      # when configured with a github token, the action will push back fixes to the pull request branch
-      # with:
-      #   token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/check-schema.yml

@@ -3,6 +3,11 @@ name: Check schema flow
 on:
   workflow_call:
     inputs:
+      actions-ref:
+        description: 'Version of actions, normally the same as workflow'
+        required: false
+        type: string
+        default: ""
       azure-dir:
         description: 'Directory containing Azure Pipelines config files. Provide an empty string to skip checking on Azure Pipelines files.'
         default: '.azure/'
@@ -23,9 +28,24 @@ jobs:
       with:
         submodules: recursive
 
-    - name: Install dependencies
+    # if actions version is given install defined versions
+    - name: "[optional] Pull re-usable 🤖 actions"
+      if: inputs.actions-ref != ''
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ inputs.actions-ref }}
+        path: .cicd
+        repository: Lightning-AI/utilities
+    - name: "[optional] Install recommended dependencies"
+      if: inputs.actions-ref != ''
+      run: |
+        pip install -r ./.cicd/requirements/gha-schema.txt
+        pip list | grep "check-jsonschema"
+    # otherwise fall back to using the latest
+    - name: "[default] Install recommended dependencies"
+      if: inputs.actions-ref == ''
       run: |
-        pip install check-jsonschema -q
+        pip install -q check-jsonschema
         pip list | grep "check-jsonschema"
 
     - name: Scan repo

.github/workflows/ci-use-checks.yaml

@@ -17,11 +17,24 @@ jobs:
       actions-ref: ${{ github.sha }}  # use local version
       extra-typing: 'typing'
 
-  check-schema:
+  check-schema-latest:
+    uses: ./.github/workflows/check-schema.yml
+    with:
+      azure-dir: ""
+
+  check-schema-fixed:
     uses: ./.github/workflows/check-schema.yml
     with:
+      actions-ref: ${{ github.sha }}  # use local version
       azure-dir: ""
 
+  check-schema:
+    runs-on: ubuntu-latest
+    # just aggregation of the previous two jobs
+    needs: ["check-schema-latest", "check-schema-fixed"]
+    steps:
+      - run: echo "done"
+
   check-package:
     uses: ./.github/workflows/check-package.yml
     with:

CHANGELOG.md

@@ -33,6 +33,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Fixed issue with `is_overridden` falsely returning True when the parent method is wrapped ([#149](https://github.com/Lightning-AI/utilities/pull/149))
 
 
+- CI: optional freeze version of schema check ([148](https://github.com/Lightning-AI/utilities/pull/148))
+
+
 ## [0.9.0] - 2023-06-29
 
 ### Added

requirements/gha-schema.txt

@@ -0,0 +1 @@
+check-jsonschema ==0.23.3

setup.py

@@ -27,7 +27,7 @@ def _load_py_module(fname: str, pkg: str = "lightning_utilities"):
 # make extras as automated loading
 requirements_extra = {}
 for fpath in glob.glob(os.path.join(_PATH_REQUIRE, "*.txt")):
-    if os.path.basename(fpath) in ("base.txt", "dev-docs.txt", "dev-tests.txt"):
+    if os.path.basename(fpath) in ("base.txt", "dev-docs.txt", "dev-tests.txt", "gha-schema.txt"):
         continue
     name, _ = os.path.splitext(os.path.basename(fpath))
     with open(fpath) as fp: