1585038 - automate packages updates at https://pypi.pub.build.mozilla.org/pub/

Status: RESOLVED WONTFIX

(Release Engineering :: General, enhancement)

Description

[Tarek Ziadé (:tarek)]

Would it be possible to automate updates at https://pypi.pub.build.mozilla.org/pub/ ?

I am thinking about a white list of package we trust, with a cron job that would push the newest versions in our pypi directory.

One side effect is projects that don't pin versions as Tom Prince pointed out. But that's already the case with manual updates today as I don't think we do anything in particular to check the impact of adding a new package release there.

Comment 1

[Jordan Lund (:jlund)]

I think it's an interesting idea. Something we could investigate. I'll raise this and update this bug within the next 2 weeks.

Comment 2

[Jordan Lund (:jlund)]

so we should support this. our internal pypi managment needs a lot of refactoring and work and applying this fix in isolation is probably not the best approach unless it's a critical issue. As far as I know, it's not yet? I'm going to file a bug to track the major refactor.

We likely won't do anything in Q4 for this. Instead, we should keep filing tickets as we need new packages. This is not a great story but I'm hoping the recent influx of requests is due to the rush of py2 ending.

Maybe in 2020 H1 we can take a serious look at internal pypi.

Comment 3

[Tarek Ziadé (:tarek)]

Sounds good, thanks for the follow up on this.

Comment 4

[[e-mail] (:bhearsum)]

Hasn't come up again in years; we can file a new bug or re-open if it becomes desired again.