add dependabot for pyproj (#40)

Author: jjimenezshaw

.github/dependabot.yml

@@ -10,6 +10,13 @@ updates:
     schedule:
       interval: "daily"
 
+  # Configuration for pyproj
+  - package-ecosystem: "pip"
+    directory: "/scripts/"
+    schedule:
+      interval: "weekly"
+
+  # GitHub actions themselves
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

scripts/.python-version

@@ -0,0 +1 @@
+3.12

scripts/Dockerfile

@@ -14,6 +14,7 @@ ENV DEST_DIR=/home/dist
 WORKDIR /home/
 
 COPY conf .
+COPY .python-version .
 RUN /home/install.sh
 
 COPY templates ./templates

scripts/conf/apt-packages.txt

@@ -1,9 +1,6 @@
 gcc
 git
-software-properties-common
-python3.10
-python3-dev
-python3-distutils
-python3-venv
-python3-apt
+python${python_version}
+python${python_version}-venv
+python${python_version}-dev
 python3-pip

scripts/conf/install.sh

@@ -4,23 +4,34 @@ set -Eeuo pipefail
 TZ=Europe/Berlin
 ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
 
+if [ -f "/home/.python-version" ]; then
+    python_version=`cat /home/.python-version`
+else
+    python_version=3
+fi
 # install missing packages
 PACKAGE_LIST=/home/apt-packages.txt
 if [ -f "$PACKAGE_LIST" ]; then
     apt-get update -qq > /dev/null
+    apt-get -qq --yes install software-properties-common
+    add-apt-repository --yes ppa:deadsnakes/ppa  # for different python versions
+    apt-get update -qq > /dev/null
 
     apt-get \
         -qq --yes \
-        --allow-downgrades \
         --allow-remove-essential \
         --allow-change-held-packages \
+        --no-install-recommends \
         install \
-        `cat $PACKAGE_LIST` > /dev/null
+        `cat $PACKAGE_LIST | sed "s/\\${python_version}/${python_version}/p"` > /dev/null
 fi
 
 # setup python environment
 mkdir -p $VIRTUAL_ENV
-python3 -m venv $VIRTUAL_ENV
+python${python_version} -m venv $VIRTUAL_ENV
+. $VIRTUAL_ENV/bin/activate
+
+python3 --version
 
 # install pyproj
 python3 -m pip install -q --upgrade pip

scripts/requirements.txt

@@ -0,0 +1,5 @@
+# we use requirements.txt to easily trigger dependabot
+# but we do not install pyproj directly from pip.
+# pyproj is "compiled" for the specific version of PROJ
+# the file .python-version is needed to run properly with dependabot
+pyproj==3.7.1

scripts/run.sh

@@ -10,7 +10,9 @@ test "$(ls -A $DIRNAME/dist/)" && rm -r $DIRNAME/dist/*
 PROJ_VERSION=`cat $DIRNAME/Dockerfile | sed -n 's/^FROM .*:\(.*\)$/\1/p'`
 echo "PROJ_VERSION=$PROJ_VERSION"
 
-PYPROJ_VERSION=3.7.1
+# extract PYPROJ version from requirements.txt
+PYPROJ_VERSION=`cat $DIRNAME/requirements.txt | sed -n 's/^pyproj==\(.*\)$/\1/p'`
+echo "PYPROJ_VERSION=$PYPROJ_VERSION"
 
 DOCKER_TAG="crs-explorer:$PROJ_VERSION"
 STOP_COUNTER="${1:-0}"