ci(fix): Dependabot (#236)

Signed-off-by: oliver könig <[email protected]>
Signed-off-by: Anna Warno <[email protected]>

Author: ko3n1g

.github/workflows/_update_dependencies.yml

@@ -9,12 +9,6 @@ on:
     secrets:
       PAT:
         required: true
-      AZURE_CLIENT_ID:
-        required: true
-      AZURE_TENANT_ID:
-        required: true
-      AZURE_SUBSCRIPTION_ID:
-        required: true
       SSH_KEY:
         required: true
       SSH_PWD:
@@ -33,25 +27,18 @@ jobs:
 
   update-lockfile:
     environment: nemo-ci
-    runs-on: linux-amd64-cpu16
+    runs-on: ubuntu-latest
     needs: [pre-flight]
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - package: nemo-evaluator
+          - package: nemo-evaluator-launcher
     env:
       SOURCE_BRANCH: ${{ needs.pre-flight.outputs.bump-branch }}
       TARGET_BRANCH: ${{ inputs.target-branch }}
     steps:
-      - name: Install Azure CLI
-        run: curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
-
-      - name: Azure Login
-        uses: azure/login@v2
-        with:
-          client-id: ${{ secrets.AZURE_CLIENT_ID }}
-          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
-          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
-
-      - name: Azure ACR Login
-        run: az acr login --name nemoci
-
       - name: Checkout repo
         uses: actions/checkout@v4
         with:
@@ -61,7 +48,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.PAT }}
         run: |
-          docker build -f docker/Dockerfile.ci --build-arg INFERENCE_FRAMEWORK=inframework --secret id=GH_TOKEN -t eval .
+          docker build -f docker/Dockerfile.ci --build-arg PACKAGE=${{ matrix.package }} -t eval .
 
       - name: Create bump branch if not exists
         run: |
@@ -81,7 +68,7 @@ jobs:
         run: |
           docker run \
           --rm \
-          -v $(pwd):/workspace \
+          -v $(pwd)/packages/${{ matrix.package }}:/workspace \
           -w /workspace \
           -e GH_TOKEN=${{ secrets.PAT }} \
           eval \
@@ -90,8 +77,8 @@ jobs:
       - name: Upload lock file
         uses: actions/upload-artifact@v4
         with:
-          name: lock-file-${{ env.SOURCE_BRANCH }}
-          path: uv.lock
+          name: lock-file-${{ env.SOURCE_BRANCH }}-${{ matrix.package }}
+          path: packages/${{ matrix.package }}/uv.lock
 
   create-pr:
     needs: [update-lockfile, pre-flight]
@@ -128,8 +115,13 @@ jobs:
 
       - name: Download lock file
         uses: actions/download-artifact@v4
-        with:
-          name: lock-file-${{ env.SOURCE_BRANCH }}
+
+      - name: Move files
+        run: |
+          mv lock-file-${{ needs.pre-flight.outputs.bump-branch }}-nemo-evaluator-launcher/uv.lock \
+            packages/nemo-evaluator-launcher/uv.lock
+          mv lock-file-${{ needs.pre-flight.outputs.bump-branch }}-nemo-evaluator/uv.lock \
+            packages/nemo-evaluator/uv.lock
 
       - name: Create Bump PR
         uses: peter-evans/create-pull-request@v6

.github/workflows/dependabot.yml

@@ -24,6 +24,7 @@ jobs:
             grep -o 'r[0-9]\+\.[0-9]\+\.[0-9]\+' | 
             sort -V | 
             tail -n1)
+
           echo "nemo_eval_release_branch=$latest_branch" >> $GITHUB_OUTPUT
 
   bump-tags:
@@ -32,16 +33,13 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - target-branch: ${{ needs.get-release-branch-names.outputs.eval }}
+          # - target-branch: ${{ needs.get-release-branch-names.outputs.eval }} # re-enable that after code-freeze of 25.11
           - target-branch: main
     uses: ./.github/workflows/_update_dependencies.yml
     with:
       target-branch: ${{ matrix.target-branch }}
     secrets:
       PAT: ${{ secrets.PAT }}
-      AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
-      AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
-      AZURE_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
       SSH_KEY: ${{ secrets.SSH_KEY }}
       SSH_PWD: ${{ secrets.SSH_PWD }}
 
@@ -59,5 +57,5 @@ jobs:
         run: |
           curl -X POST \
             -H 'Content-type: application/json' \
-            --data "{\"text\":\":robot_joy: <https://github.com/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}|Mcore-bump-bot workflow> failed. Please fix manually.\n\ncc ${SLACK_WEBHOOK_ADMIN}\"}" \
+            --data "{\"text\":\":robot_joy: <https://github.com/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}|Dependabot workflow> failed. Please fix manually.\n\ncc ${SLACK_WEBHOOK_ADMIN}\"}" \
             $SLACK_WEBHOOK