Project dependencies should be kept up-to-date for the latest security fixes.
To list Python packages that need upgrading:
pip list --outdatedTo upgrade local packages to their latest patch versions:
make upgradeTo upgrade packages to their latest minor or major version:
-
Bump the package version in pyproject.toml keeping the patch version zero, e.g.
~=1.2.0to~=1.3.0 -
Install the upgraded packages:
pip install -e .[dev]
To upgrade Terraform the latest minor version:
-
For each Terraform root module in cloud, update the required version in
versions.tfkeeping the patch version zero:terraform { required_version = "~> <version>" ... }
-
Update the Terraform version in the CI workflow:
- name: Setup Terraform uses: hashicorp/setup-terraform@v4 with: terraform_version: '~<version>'
-
Update the Terraform version in the README prerequisites
To upgrade each Terraform root module in cloud:
-
Update the providers in
versions.tfto the latest minor or major version keeping the patch version zero, e.g.~> 1.2.0to~> 1.3.0 -
Install the upgraded providers:
terraform init -upgrade