Skip to content

[python] pin remaining unpinned dependencies in python docker images - #7644

Open
gnufede wants to merge 8 commits into
mainfrom
gnufede/pin-deps
Open

[python] pin remaining unpinned dependencies in python docker images#7644
gnufede wants to merge 8 commits into
mainfrom
gnufede/pin-deps

Conversation

@gnufede

@gnufede gnufede commented Sep 3, 2026

Copy link
Copy Markdown
Member

Motivation

Follow-up to kowalski/python-pin-anyio-4-15: pin all remaining unpinned transitive and direct dependencies across parametric, anthropic, openai, google_genai, fastapi, and tornado Docker images to prevent breakage from future package releases.

Changes

Pinned transitive deps: h11, idna, protobuf, grpcio, googleapis-common-protos, Deprecated, wrapt, backoff, importlib-metadata.
Pinned direct deps: PyYAML, requests, pycryptodome, python-multipart, jinja2, psycopg2-binary, itsdangerous, tornado, httpx.

Workflow

  1. ⚠️ Create your PR as draft ⚠️
  2. Work on you PR until the CI passes
  3. Mark it as ready for review
    • Test logic is modified? -> Get a review from RFC owner.
    • Framework is modified, or non obvious usage of it -> get a review from R&P team

🚀 Once your PR is reviewed and the CI green, you can merge it!

🛟 #apm-shared-testing 🛟

Reviewer checklist

  • Anything but tests/ or manifests/ is modified ? I have the approval from R&P team
  • A docker base image is modified?
    • the relevant build-XXX-image label is present
  • A scenario is added, removed or renamed?

KowalskiThomas and others added 7 commits September 3, 2026 10:33
Co-authored-by: Federico Mon <federico.mon@datadoghq.com>
Co-authored-by: Charles de Beauchesne <charles.debeauchesne@datadoghq.com>
Co-authored-by: Charles de Beauchesne <charles.debeauchesne@datadoghq.com>
Co-authored-by: Charles de Beauchesne <charles.debeauchesne@datadoghq.com>
Co-authored-by: Charles de Beauchesne <charles.debeauchesne@datadoghq.com>
Follow-up to kowalski/python-pin-anyio-4-15: pin all remaining
unpinned transitive and direct dependencies across parametric,
anthropic, openai, google_genai, fastapi, and tornado Docker images
to prevent breakage from future package releases.

Pinned transitive deps: h11, idna, protobuf, grpcio,
googleapis-common-protos, Deprecated, wrapt, backoff,
importlib-metadata.
Pinned direct deps: PyYAML, requests, pycryptodome,
python-multipart, jinja2, psycopg2-binary, itsdangerous,
tornado, httpx.
@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

CODEOWNERS have been resolved as:

utils/build/docker/python/anthropic-py.Dockerfile                       @DataDog/system-tests-reviewers
utils/build/docker/python/anthropic_app/requirements.txt                @DataDog/system-tests-reviewers
utils/build/docker/python/fastapi/requirements-fastapi.txt              @DataDog/system-tests-reviewers
utils/build/docker/python/google_genai-py.Dockerfile                    @DataDog/system-tests-reviewers
utils/build/docker/python/openai-py.Dockerfile                          @DataDog/system-tests-reviewers
utils/build/docker/python/openai_app/requirements.txt                   @DataDog/system-tests-reviewers
utils/build/docker/python/parametric/Dockerfile                         @DataDog/system-tests-reviewers
utils/build/docker/python/parametric/requirements.txt                   @DataDog/system-tests-reviewers
utils/build/docker/python/tornado/requirements-tornado.txt              @DataDog/system-tests-reviewers

@KowalskiThomas KowalskiThomas left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for taking care of that.

@@ -1,17 +1,17 @@
PyYAML
PyYAML==6.0.3

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It'll require to update base images. I've an ongoing task on it, I'll do this one after.

@datadog-prod-us1-5

datadog-prod-us1-5 Bot commented Sep 3, 2026

Copy link
Copy Markdown

Tests

All CI checks and tests passed.

🎉 All green!

🧪 All tests passed
❄️ No new flaky tests detected

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 979aa54 | Docs | View more details | Give us feedback!

Base automatically changed from kowalski/python-pin-anyio-4-15 to main September 3, 2026 10:23
@gnufede
gnufede marked this pull request as ready for review September 3, 2026 10:36
@gnufede
gnufede requested a review from a team as a code owner September 3, 2026 10:37
@gnufede
gnufede requested review from duviduduvid and removed request for a team September 3, 2026 10:37
@gnufede
gnufede enabled auto-merge (squash) September 3, 2026 12:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants