jku / python-tuf / 7193057774

97%

push

github

Dependabot: Use groups, update weekly

All dependencies are now checked weekly and those weekly updates
are grouped into 4 groups:
  * critical python build/release deps
  * python test and lint deps (only pinned for test repro)
  * all other python dependencies
  * All github action dependencies

This is not quite the division that was hashed out in #2014, mostly for
practical reasons:
* GitHub actions are already practically split by pinning strategy so they
  don't really need further groups:
  * Non-security-relevant actions are pinned by tags
  * Other actions are pinned by hash
* The dependency grouping is quite limited

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>

556 of 576 branches covered (0.0%)

Branch coverage included in aggregate %.

1358 of 1381 relevant lines covered (98.33%)

10.82 hits per line