chore(deps): generate Gemfile.lock files and allow in .gitignore for Phase 2 sample#34843
Open
torreypayne wants to merge 2 commits into
Open
chore(deps): generate Gemfile.lock files and allow in .gitignore for Phase 2 sample#34843torreypayne wants to merge 2 commits into
torreypayne wants to merge 2 commits into
Conversation
…e for Phase 2 rollout - Generate initial Gemfile.lock files for 5 sample Phase 2 client libraries - Update .gitignore negation rules (!Gemfile.lock) for enrolled sample libraries - Enroll sample libraries in .github/renovate.json5 under 'enrolled gems lockfiles' group Resolves https://b.corp.google.com/issues/509981628 (Phase 2 Sample Pilot)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Overview
This pull request introduces `Gemfile.lock` tracking for a representative pilot sample of Phase 2 (`Batch 2: Generated Gems A - D`) client libraries, expanding upon the Phase 1 rollout (PR #34666) and fulfilling the P1 dependency security mandate (b/509981628).
By checking in these lockfiles, we eliminate non-deterministic dependency resolutions during CI presubmit/postsubmit runs and enroll these libraries into weekly automated lockfile maintenance (`bundle lock --update`) managed by Renovate.
Enrolled Scope (5 Sample Libraries)
To safely validate `.gitignore` negation and lockfile generation behavior across the major Generated Gem prefix families before scaling across all ~198 Phase 2 gems, this PR enrolls the following representative sample:
Changes Included
Verification
Related Issues