Skip to content

LCORE-0000: Document Konflux dependency update process in AGENTS.md #3065

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tisnik merged 1 commit into from
Oct 29, 2026
Merged

LCORE-0000: Document Konflux dependency update process in AGENTS.md #3065

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 32 additions & 0 deletions AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -426,3 +426,35 @@ Allowed prefixes: `LCORE-`, `RSPEED-`, `MGTM-`, `OLS-`, `RHIDP-`, `LEADS-`, `CWF
4. Follow existing code patterns in the module you're modifying
5. Write unit tests covering new functionality
6. Run format and verify before completion

### Dependency Update Process (Konflux)

When bumping or adding Python dependencies, the Konflux hermetic build requires
several files to be regenerated **in order**. Complete all of these steps in a
single PR to avoid iterative CI failures.

1. **Update `pyproject.toml`** with the new version constraints.
2. **Regenerate `uv.lock`** — run `uv lock` to sync the lockfile with the
updated constraints.
3. **Regenerate Konflux requirement files** — run
`python3 scripts/konflux_resolve.py --profile cpu` to regenerate the hashed
requirement files under `.konflux/`:
- `.konflux/requirements.hashes.wheel.txt` (RHOAI wheels)
- `.konflux/requirements.hashes.source.txt` (PyPI sdists)
- `.konflux/requirements.hashes.wheel.pypi.txt` (PyPI wheel fallbacks)
- `.konflux/requirements-build.txt` (build dependencies for sdist packages)

This script requires `podman` and network access. See
`scripts/konflux_resolve.py --help` for additional options (`--verbose`,
`--quiet`). Build profiles are defined in `.konflux/profiles.toml`.
4. **Verify `.tekton/*.yaml` prefetch package lists** — the resolve script
patches the `"packages"` field in the Tekton pipeline files listed in
`.konflux/profiles.toml` (`tekton_files`). Confirm that the package list in
`.tekton/lightspeed-stack-0-8-pull-request.yaml` and
`.tekton/lightspeed-stack-0-8-push.yaml` reflects the updated dependency set
(packages added or removed as needed).
5. **Check for dropped transitive dependencies** — if a dependency is removed
or downgraded, verify that no source files import packages that were only
available as transitive dependencies of the removed/changed package.
6. **Run `uv run make verify`** to confirm linting and type checking pass with
the updated dependencies.
Loading