CIDuty/How To/Update Python dependencies

Introduction

Use this page if you want to update Python dependencies.

The action list is as follows:

1. Check the puppet repo for patch made by pyup bot
2. Check the dependencies and how they affect the systems
3. Check if there are any releases on the go also check with the release team.
4. If you have the Ok, start the update
5. Monitoring the update on puppet mail and papertrail
6. In case of failure rollback
7. Questions and Answers

Check the puppet repo for patch made by pyup bot

Go to https://github.com/mozilla-releng/build-puppet and click on Pull requests and look for "Scheduled weekly dependency update for week X" ( where X is the current week )

Check the dependencies and how they affect the systems

If you don't know what it does, you can click on it name and find out also on most of them you can also check the change log. For example : ptyprocess 0.6.0

Check if there are any releases on the go also check with the release team

The update action shouldn't be done during a release. Always ask the release duty team before running the update

Running the update

After checking all the dependencies and there is no release, you can start the update, by merging the pyup update into master

Questions and Answers

Q : What do we need to do before update ?

A : We need to check all the dependencies that will be updated, to figure out what could be affected in case of any surprises.

Q : How do we do the update ?

A : We need to merge pyup-bot patch to the master.

Q: When it is recommended to run the update ?

A : This should be done, when there are no releases and also it should be wise to ask the release duty team before starting any action.

Q : Where and what do we need to monitor when we triggered the update ?

A : The monitoring should be done the Puppet mail and also on papertrail

Q : How do we rollback in case of problems/errors ?