Update requirements for Python 3.14 compatibility

[janbrasna]

For now it seems that to successfully install on 3.14 or 3.15-alpha the only necessary update is bumping ruamel-yaml-clib here:

thunderbird-notes/requirements.txt

Line 290 in 18a0217

ruamel-yaml-clib==0.2.12 \

past v0.2.13 — the current one is v0.2.15 and that either has the necessary wheels available, or builds successfully on the few platforms I tried.

(The project doesn't really keep a changelog, but from commit history it seems it's mainly build+packaging and version compatibility changes: https://sourceforge.net/p/ruamel-yaml-clib/code/commit_browser …)

[coreycb]

How soon do you need a fix for this? I'm generally using 3.12 now.

[janbrasna]

@coreycb It's just an observation, with a note to work around it if/once needed. (I thought I needed to be able to pip install it within potential thunderbird-website CI, but it's not the case, so I just verified that for visibility; it's not blocking anything as far as I see.)

I quickly tried verifying after upgrading deps a little widely b73b07d that the tests run @janbrasna/thunderbird-notes/actions/runs/20606122620/ up to 3.15.0a3 but haven't researched all the scripts and functionality to verify further. After fixing up some pulled template includes that are probably broken for some time now I was able to run preview.py as well but don't feel qualified to check the whole stack and tooling works as expected/before, so I only singled out this particular package version being the practical limit updating further.

[coreycb]

Thanks for bringing this up. What I'd like to do is have dependabot propose updates to requirements.txt on a regular basis, but we should probably add a .github/workflow/ that smoke tests preview.py first.

The dependabot update would be:

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5ace460..4776211 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,5 +1,10 @@
 version: 2
 updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

[coreycb]

Worth noting, we do already have dependabot updates in place for security issues. But that doesn't involve near as much change as keeping up with the latest dependencies.

[janbrasna]

I'm not sure preview.py actually even works currently — it seems the templates pulled from thunderbird-website have some jinja includes that don't resolve, crashing the script — so I had to manually edit the files pulled from github TEMPLATE_DOWNLOAD_URL locally first to shim those lines to run the preview scripts. 🤷