mirror of
https://github.com/mudler/LocalAI.git
synced 2026-07-30 09:57:57 -04:00
bc653c9b09
The weekly "Dependabot Updates" pip job for /backend/python/diffusers has been failing with `private_source_authentication_failure` against the Jetson pip index (https://pypi.jetson-ai-lab.io/jp6/cu129/), referenced by that backend's requirements-l4t12.txt. diffusers is the only dependabot-configured pip directory that pulls from that private index, so it is the only update job that fails; the other backends update cleanly. torch and transformers are deliberately pinned in this backend for reproducibility (see backend/python/diffusers/requirements-*.txt and #9979), so we do not want dependabot bumping them anyway. Ignoring both dependencies for this directory stops dependabot from resolving them against the unreachable Jetson index and keeps the weekly update job green, without removing update coverage for the rest of the backend's dependencies. Assisted-by: Claude:opus-4.8 [Claude Code] Signed-off-by: Ettore Di Giacinto <mudler@localai.io> Co-authored-by: Ettore Di Giacinto <mudler@localai.io>
130 lines
4.3 KiB
YAML
130 lines
4.3 KiB
YAML
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "gitsubmodule"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "gomod"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
ignore:
|
|
- dependency-name: "github.com/mudler/LocalAI/pkg/grpc/proto"
|
|
- package-ecosystem: "github-actions"
|
|
# Workflow files stored in the default location of `.github/workflows`. (You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.)
|
|
directory: "/"
|
|
schedule:
|
|
# Check for updates to GitHub Actions every weekday
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
# Workflow files stored in the default location of `.github/workflows`. (You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.)
|
|
directory: "/"
|
|
schedule:
|
|
# Check for updates to GitHub Actions every weekday
|
|
interval: "weekly"
|
|
- package-ecosystem: "docker"
|
|
# Workflow files stored in the default location of `.github/workflows`. (You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.)
|
|
directory: "/"
|
|
schedule:
|
|
# Check for updates to GitHub Actions every weekday
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/bark"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/common/template"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/coqui"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/diffusers"
|
|
schedule:
|
|
interval: "weekly"
|
|
# torch and transformers are deliberately pinned in this backend (see
|
|
# backend/python/diffusers/requirements-*.txt and issue #9979), and the
|
|
# l4t12 variant resolves them from the Jetson pip index
|
|
# (https://pypi.jetson-ai-lab.io/jp6/cu129/). dependabot cannot authenticate
|
|
# against that index and fails the whole weekly update with a
|
|
# private_source_authentication_failure. Ignore the two pinned deps we don't
|
|
# want bumped anyway so the job stays green.
|
|
ignore:
|
|
- dependency-name: "torch"
|
|
- dependency-name: "transformers"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/exllama"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/exllama2"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/mamba"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/openvoice"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/rerankers"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/sentencetransformers"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/transformers"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend/python/vllm"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/examples/chainlit"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/examples/functions"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/examples/langchain/langchainpy-localai-example"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/examples/langchain-chroma"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "pip"
|
|
directory: "/examples/streamlit-bot"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "docker"
|
|
directory: "/examples/k8sgpt"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "docker"
|
|
directory: "/examples/kubernetes"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "docker"
|
|
directory: "/examples/langchain"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "gomod"
|
|
directory: "/examples/semantic-todo"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "docker"
|
|
directory: "/examples/telegram-bot"
|
|
schedule:
|
|
interval: "weekly"
|