Skip to content

[python] pin remaining unpinned dependencies in python docker images - #7644

Merged
gnufede merged 17 commits into
mainfrom
gnufede/pin-deps
Sep 15, 2026
Merged

gnufede merged 17 commits into
mainfrom
gnufede/pin-deps

Conversation

@gnufede

@gnufede gnufede commented Sep 3, 2026

Copy link
Copy Markdown
Member

Motivation

Follow-up to kowalski/python-pin-anyio-4-15: pin all remaining unpinned transitive and direct dependencies across parametric, anthropic, openai, google_genai, fastapi, and tornado Docker images to prevent breakage from future package releases.

Changes

Pinned transitive deps: h11, idna, protobuf, grpcio, googleapis-common-protos, Deprecated, wrapt, backoff, importlib-metadata.
Pinned direct deps: PyYAML, requests, pycryptodome, python-multipart, jinja2, psycopg2-binary, itsdangerous, tornado, httpx.

Workflow

  1. ⚠️ Create your PR as draft ⚠️
  2. Work on you PR until the CI passes
  3. Mark it as ready for review
    • Test logic is modified? -> Get a review from RFC owner.
    • Framework is modified, or non obvious usage of it -> get a review from R&P team

🚀 Once your PR is reviewed and the CI green, you can merge it!

🛟 #apm-shared-testing 🛟

Reviewer checklist

  • Anything but tests/ or manifests/ is modified ? I have the approval from R&P team
  • A docker base image is modified?
    • the relevant build-XXX-image label is present
  • A scenario is added, removed or renamed?

KowalskiThomas and others added 7 commits September 3, 2026 10:33
Co-authored-by: Federico Mon <federico.mon@datadoghq.com>
Co-authored-by: Charles de Beauchesne <charles.debeauchesne@datadoghq.com>
Co-authored-by: Charles de Beauchesne <charles.debeauchesne@datadoghq.com>
Co-authored-by: Charles de Beauchesne <charles.debeauchesne@datadoghq.com>
Co-authored-by: Charles de Beauchesne <charles.debeauchesne@datadoghq.com>
Follow-up to kowalski/python-pin-anyio-4-15: pin all remaining
unpinned transitive and direct dependencies across parametric,
anthropic, openai, google_genai, fastapi, and tornado Docker images
to prevent breakage from future package releases.

Pinned transitive deps: h11, idna, protobuf, grpcio,
googleapis-common-protos, Deprecated, wrapt, backoff,
importlib-metadata.
Pinned direct deps: PyYAML, requests, pycryptodome,
python-multipart, jinja2, psycopg2-binary, itsdangerous,
tornado, httpx.
@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

CODEOWNERS have been resolved as:

mirror_images.lock.yaml                                                 @DataDog/system-tests-core
mirror_images.yaml                                                      @DataDog/system-tests-core
utils/build/docker/base-images.lock.json                                @DataDog/system-tests-reviewers
utils/build/docker/python/anthropic-py.Dockerfile                       @DataDog/system-tests-reviewers
utils/build/docker/python/anthropic_app/requirements.txt                @DataDog/system-tests-reviewers
utils/build/docker/python/fastapi/requirements-fastapi.txt              @DataDog/system-tests-reviewers
utils/build/docker/python/google_genai-py.Dockerfile                    @DataDog/system-tests-reviewers
utils/build/docker/python/openai-py.Dockerfile                          @DataDog/system-tests-reviewers
utils/build/docker/python/openai_app/requirements.txt                   @DataDog/system-tests-reviewers
utils/build/docker/python/parametric/Dockerfile                         @DataDog/system-tests-reviewers
utils/build/docker/python/parametric/requirements.txt                   @DataDog/system-tests-reviewers
utils/build/docker/python/tornado/requirements-tornado.txt              @DataDog/system-tests-reviewers

@KowalskiThomas KowalskiThomas left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for taking care of that.

Comment thread utils/build/docker/python/fastapi/requirements-fastapi.txt
@datadog-prod-us1-5

datadog-prod-us1-5 Bot commented Sep 3, 2026

Copy link
Copy Markdown

Tests

🎉 All green!

🧪 All tests passed
❄️ No new flaky tests detected

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: ed02dbc | Docs | View more details | Give us feedback!

Base automatically changed from kowalski/python-pin-anyio-4-15 to main September 3, 2026 10:23
@gnufede
gnufede marked this pull request as ready for review September 3, 2026 10:36
@gnufede
gnufede requested a review from a team as a code owner September 3, 2026 10:37
@gnufede
gnufede requested review from duviduduvid and removed request for a team September 3, 2026 10:37
@gnufede
gnufede enabled auto-merge (squash) September 3, 2026 12:51
@cbeauchesne
cbeauchesne disabled auto-merge September 7, 2026 13:25
@gnufede
gnufede requested a review from a team as a code owner September 14, 2026 10:53
@gh-worker-ownership-write-b05516
gh-worker-ownership-write-b05516 Bot removed the request for review from a team September 15, 2026 09:01
@gnufede
gnufede merged commit d430f02 into main Sep 15, 2026
2119 checks passed
@gnufede
gnufede deleted the gnufede/pin-deps branch September 15, 2026 13:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants