From 8d9b3b28802f270cf7b0ecba0bf6e9076bc3ccbd Mon Sep 17 00:00:00 2001
From: Zach White <skullydazed@gmail.com>
Date: Wed, 23 Jun 2021 19:28:31 -0700
Subject: [PATCH] pin versions and use dependabot to update them (#56)

---
 .github/dependabot.yml | 15 +++++++++++++++
 requirements-dev.txt   | 31 +++++++++++++++++++++++++++++--
 setup.py               | 35 +++++++++++++++++++++++++----------
 3 files changed, 69 insertions(+), 12 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..805929c
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,15 @@
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions" # See documentation for possible values
+    directory: "/"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "pip" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"
+    reviewers:
+      - "qmk/collaborators"
diff --git a/requirements-dev.txt b/requirements-dev.txt
index b679c2e..cd05cb8 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -1,2 +1,29 @@
-bumpversion
-twine
+bleach==3.3.0
+bump2version==1.0.1
+bumpversion==0.6.0
+certifi==2021.5.30
+cffi==1.14.5
+chardet==4.0.0
+colorama==0.4.4
+cryptography==3.4.7
+docutils==0.17.1
+idna==2.10
+importlib-metadata==4.5.0
+jeepney==0.6.0
+keyring==23.0.1
+packaging==20.9
+pkginfo==1.7.0
+pycparser==2.20
+Pygments==2.9.0
+pyparsing==2.4.7
+readme-renderer==29.0
+requests==2.25.1
+requests-toolbelt==0.9.1
+rfc3986==1.5.0
+SecretStorage==3.3.1
+six==1.16.0
+tqdm==4.61.1
+twine==3.4.1
+urllib3==1.26.5
+webencodings==0.5.1
+zipp==3.4.1
diff --git a/setup.py b/setup.py
index 82c398a..e2c02c0 100644
--- a/setup.py
+++ b/setup.py
@@ -40,15 +40,30 @@ if __name__ == "__main__":
         ],
         python_requires=metadata['requires-python'],
         install_requires=[
-            "dotty-dict",
-            "flake8",
-            "hid",
-            "hjson",
-            "jsonschema>=3",
-            "milc>=1.4.0",
-            "nose2",
-            "pygments",
-            "pyusb",
-            "yapf"
+            "appdirs==1.4.4",
+            "argcomplete==1.12.3",
+            "attrs==21.2.0",
+            "colorama==0.4.4",
+            "coverage==5.5",
+            "dotty-dict==1.3.0",
+            "flake8==3.9.2",
+            "halo==0.0.31",
+            "hid==1.0.4",
+            "hjson==3.0.2",
+            "jsonschema==3.2.0",
+            "log-symbols==0.0.14",
+            "mccabe==0.6.1",
+            "milc==1.4.2",
+            "nose2==0.10.0",
+            "pycodestyle==2.7.0",
+            "pyflakes==2.3.1",
+            "Pygments==2.9.0",
+            "pyrsistent==0.17.3",
+            "pyusb==1.1.1",
+            "setuptools>=45",
+            "six==1.16.0",
+            "spinners==0.0.24",
+            "termcolor==1.1.0",
+            "yapf==0.31.0"
         ]
     )