-
Notifications
You must be signed in to change notification settings - Fork 15
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ensure all released repo dependencies are in the openedx
GitHub organization
#238
Comments
The "Known Issues" list as of right now was based on some initial discovery by @nedbat . We have not yet checked the dependencies of the default frontend-apps. Also: We have not checked the dep lists for course-discovery, ecommerce, and other release-tagged IDAs. Tthis is OK, because none of those IDAs are run by default in the named release. |
I think you might want to add https://github.com/edx/mongoid-tree, which is used by https://github.com/openedx/cs_comments_service refs:
Or may be not, because forum is not run by defualt... |
I've added a check to edx-repo-health to ensure all main repos are in the correct organization: openedx/edx-repo-health#340 |
Thanks Ned! |
Hi folks! Is there something we could help you with so we can move this forward? |
@nedbat , had you been working on a script to check whether dependencies of released repos are in the openedx org? Or was that just for top-level released repos? |
I worked on it back in December: https://github.com/openedx/repo-tools/blob/master/edx_repo_tools/find_dependencies/README.rst |
Nice, thanks @nedbat . @mariajgrimaldi this issue remains important, but I think everyone involved is just busy right now. I'm not sure if Feanil or Ned plan on picking up it; if not, I'd probably be able to work more on it in July-ish. |
I think the next step is to re-run Ned's script and get a concrete list of all the repos that are outside the |
Do you folks still need help with this? I've now allocated the time for it -- sorry for the delay! |
@mariajgrimaldi no worries. If you have time and are interested in working on this, then certainly we could still use the help! |
I re-ran the dependency analyzer last week and got these results: These are the 47 repos tagged for Palm:openedx/blockstore These are the 54 repos in the openedx organization in the transitive dependencies:openedx/api-doc-tools These are the 9 repos in adjacent organizations that are in the transitive dependencies:edx/brand-edx.org BUT: Ed noticed that ora2 isn't mentioned. We aren't yet analyzing dependencies that get installed via other mechanisms. We still have some work to do on the analyzer. |
Thanks @nedbat. By "other mechanisms" I assumed you mean things like EDXAPP_PRIVATE_REQUIREMENTS, but ora2 is installed in base.txt: https://github.com/openedx/edx-platform/blob/ddb092c07c6e2b663dc3d52e7197b42f7f017988/requirements/edx/base.txt#L776 |
Yeah, I'm digging into this now. I don't understand why ora2 doesn't end up in the results yet. |
Hmm, there are still some missing repos because some don't declare their URL in their metadata:
(I think the difference between "No repo URL" and "Repo URL is UNKNOWN" is due to how the packages are built?) I've made some pull requests to add the URL to our packages. Thumbs appreciated:
|
I don't if this also releavnt while working on something I found a dependency in frontend-app-learning called |
Context
Starting with Palm, if a repo is in the named release, then its first-party dependencies must be in the openedx GH org.
More details: https://discuss.openedx.org/t/interim-guidance-on-the-openedx-github-organization/8518
This is related to, but not the same as: #203
Known issues
Deps to edx-platform:
Deps to default frontend-apps (learning, account, gradebook, profile, authn, discussions, course-authoring):
Acceptance Criteria
Write tooling to find all offending dependencies.
Then, for each dependency, either:
openedx
org; orThe text was updated successfully, but these errors were encountered: