#Renovate + Dagger

1 messages Ā· Page 1 of 1 (latest)

azure shuttle
#

🧵

#

The general idea would be to develop a plugin for Renovate, that can scan repos for dagger modules, and check their latest available versions?

final tree
#

Yep that would be useful

#

That would allow us to keep our dependent modules up to date

#

Regular updates is the name of the game

#

@fervent fjord

azure shuttle
#

dagger update will update all dependencies for the current module, in case that's useful

sharp lance
thick wigeon
#

Yes, we use that renovate to update our modules with dagger develop. This updates the engine version and the SDK dependencies accordingly. I demoed it in a community call: #1370547151180009753 message
Updating module dependencies is not yet implemented.
I missed an API giving the latest version of a Daggerverse module. It is hard to find out the latest version when semver versioning is missing.

cosmic tundra
#

We’re hitting a few issues with Renovate and Dagger.

We currently run Renovate via GitHub Action to mount the Docker socket, but I’d like to move this to our EKS cluster (I hit some issues when mounting the socket. This need a second look).

When Renovate runs dagger develop -r, it fails with: failed to resolve git src: git error: exit status. This is likely an SSH key issue during dependency installation.

{
  "name": ā€œsome-name-hereā€,
  "engineVersion": "v0.19.3",
  "sdk": {
    "source": "python"
  },
  "dependencies": [
    {
      "name": "secrets-file",
      "source": "git@github.com:some-org/repo-name/modules/secrets-file@0.112.1",
      "pin": "942006f1c1ac491042ac583589c05072c6b843ca"
    },

  ]
}

Also, updating a third-party Python dependency triggers the error below. I suspect it's because the generated code isn't committed to the repo.

Command failed: uv lock --upgrade-package google-cloud-artifact-registry
Using CPython 3.14.2 interpreter at: /opt/containerbase/tools/python/3.14.2/bin/python3
error: Distribution not found at: file:///tmp/renovate/repos/github/some-org/some-repo/daggerflows/some-module/.dagger/google-artifact-registry/sdk
final tree
#

@cosmic tundra is with Nine (Brett) by the way

#

Good news is that we can probably run renovate normally ( not through gh actions ) when we start checking in the generated code.

#

Solomon mentioned that you can do that now... we should perhaps explore this

azure shuttle
#

Also @final tree now that dagger functions can return changesets, with a nice UI for reviewing and applying them... And soon a first-class dagger generate to detect and run generator functions... Maybe we could implement such a generator function that updates all dependencies in the current context, then package that in a toolchain that anyone can install?

final tree
#

Yes that would be good. Would this be a bit like dagger develop --recursive ?

final tree
#

Does dagger cloud have an API we can call? If it did, would be possible to build a renovate datasource for it...