chore: bump dep version, check dep monthly (#1992)

* chore: bump dep version, check dep monthly

Signed-off-by: Keming <kemingyang@tensorchord.ai>

* fix lint

Signed-off-by: Keming <kemingyang@tensorchord.ai>

---------

Signed-off-by: Keming <kemingyang@tensorchord.ai>

Author: kemingy

.github/dependabot.yml

@@ -3,17 +3,9 @@ updates:
   - package-ecosystem: "gomod"
     directory: "/"
     schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "10:00"
-      timezone: "Asia/Shanghai"
-    open-pull-requests-limit: 5
+      interval: "monthly"
 
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "10:00"
-      timezone: "Asia/Shanghai"
-    open-pull-requests-limit: 5
+      interval: "monthly"

.github/workflows/release.yml

@@ -69,7 +69,7 @@ jobs:
         with:
           python-version: '3.11'
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.22.0
+        uses: pypa/cibuildwheel@v2.23.0
         env:
           CIBW_ARCHS_MACOS: arm64, x86_64
           CIBW_ARCHS_LINUX: auto64

go.mod

@@ -238,7 +238,14 @@ func (b generalBuilder) build(ctx context.Context, pw progresswriter.Writer) err
 	for _, entry := range b.entries {
 		// Set up docker config auth.
 		dockerConfig := config.LoadDefaultConfigFile(os.Stderr)
-		attachable := []session.Attachable{authprovider.NewDockerAuthProvider(dockerConfig, map[string]*authprovider.AuthTLSConfig{})}
+		attachable := []session.Attachable{
+			authprovider.NewDockerAuthProvider(
+				authprovider.DockerAuthProviderConfig{
+					ConfigFile: dockerConfig,
+					TLSConfigs: map[string]*authprovider.AuthTLSConfig{},
+				},
+			),
+		}
 		b.logger.WithFields(logrus.Fields{
 			"type": entry.Type,
 		}).Debug("build image with buildkit")

go.sum

@@ -15,6 +15,7 @@
 package docker
 
 import (
+	"bytes"
 	"context"
 	"encoding/base64"
 	"encoding/json"
@@ -267,7 +268,8 @@ func (c dockerClient) StartBuildkitd(ctx context.Context, tag, name string, bc *
 		"buildkit-config": bc,
 	})
 	logger.Debug("starting buildkitd")
-	if _, _, err := c.ImageInspectWithRaw(ctx, tag); err != nil {
+	var buf bytes.Buffer
+	if _, err := c.ImageInspect(ctx, tag, client.ImageInspectWithRawResponse(&buf)); err != nil {
 		if !client.IsErrNotFound(err) {
 			return "", errors.Wrap(err, "failed to inspect image")
 		}
@@ -386,7 +388,7 @@ func (c dockerClient) GetStatus(ctx context.Context, cname string) (containerTyp
 // Load loads the docker image from the reader into the docker host.
 // It's up to the caller to close the io.ReadCloser.
 func (c dockerClient) Load(ctx context.Context, r io.ReadCloser, quiet bool) error {
-	resp, err := c.ImageLoad(ctx, r, quiet)
+	resp, err := c.ImageLoad(ctx, r, client.ImageLoadWithQuiet(quiet))
 	if err != nil {
 		return err
 	}

pkg/builder/build.go

@@ -24,7 +24,7 @@ import (
 	"time"
 
 	"github.com/cockroachdb/errors"
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 	dockerimage "github.com/docker/docker/api/types/image"
 	"github.com/sirupsen/logrus"
 
@@ -287,14 +287,14 @@ func (nc *nerdctlClient) containerExists(ctx context.Context, tag string) (bool,
 	return err == nil, err
 }
 
-func (nc *nerdctlClient) containerInspect(ctx context.Context, tag string) (*types.ContainerJSON, error) {
+func (nc *nerdctlClient) containerInspect(ctx context.Context, tag string) (*container.InspectResponse, error) {
 	out, err := nc.exec(ctx, "inspect", tag)
 	if err != nil {
 		// TODO(kweizh): check not found
 		return nil, err
 	}
 
-	cs := []types.ContainerJSON{}
+	cs := []container.InspectResponse{}
 	err = json.Unmarshal([]byte(out), &cs)
 	if err != nil {
 		logrus.WithError(err).Error(cs)

pkg/driver/docker/docker.go

@@ -26,6 +26,7 @@ import (
 	"github.com/cockroachdb/errors"
 	"github.com/sirupsen/logrus"
 	"go.starlark.net/starlark"
+	"go.starlark.net/syntax"
 
 	interp "github.com/tensorchord/envd/pkg/lang/frontend/starlark"
 	"github.com/tensorchord/envd/pkg/lang/frontend/starlark/v1/config"
@@ -42,6 +43,19 @@ type entry struct {
 	err     error
 }
 
+func envdStarlarkResolveOptions() *syntax.FileOptions {
+	return &syntax.FileOptions{
+		// resolver
+		Set:               false,
+		While:             false,
+		TopLevelControl:   false,
+		GlobalReassign:    false,
+		LoadBindsGlobally: false,
+		// compiler
+		Recursion: true,
+	}
+}
+
 // generalInterpreter is the interpreter implementation for Starlark.
 // Please refer to https://github.com/google/starlark-go
 type generalInterpreter struct {
@@ -104,7 +118,7 @@ func (s *generalInterpreter) exec(thread *starlark.Thread, module string) (starl
 
 	if !strings.HasPrefix(module, universe.GitPrefix) {
 		var data interface{}
-		globals, err := starlark.ExecFile(thread, module, data, s.predeclared)
+		globals, err := starlark.ExecFileOptions(envdStarlarkResolveOptions(), thread, module, data, s.predeclared)
 		e = &entry{globals, err}
 	} else {
 		// exec remote git repo
@@ -135,7 +149,7 @@ func (s *generalInterpreter) loadGitModule(thread *starlark.Thread, path string)
 		if d.IsDir() || !strings.HasSuffix(d.Name(), ".envd") {
 			return nil
 		}
-		dict, err := starlark.ExecFile(thread, path, src, s.predeclared)
+		dict, err := starlark.ExecFileOptions(envdStarlarkResolveOptions(), thread, path, src, s.predeclared)
 		if err != nil {
 			return err
 		}
@@ -181,7 +195,7 @@ func (s generalInterpreter) ExecFile(filename string, funcname string) (interfac
 
 func (s generalInterpreter) Eval(script string) (interface{}, error) {
 	thread := s.NewThread(script)
-	return starlark.ExecFile(thread, "", script, s.predeclared)
+	return starlark.ExecFileOptions(envdStarlarkResolveOptions(), thread, "", script, s.predeclared)
 }
 
 func GetEnvdProgramHash(filename string) (string, error) {
@@ -193,7 +207,7 @@ func GetEnvdProgramHash(filename string) (string, error) {
 	funcAlwaysHas := func(x string) bool {
 		return true
 	}
-	_, prog, err := starlark.SourceProgram(filename, envdSrc, funcAlwaysHas)
+	_, prog, err := starlark.SourceProgramOptions(envdStarlarkResolveOptions(), filename, envdSrc, funcAlwaysHas)
 	if err != nil {
 		return "", err
 	}

pkg/driver/nerdctl/nerdctl.go

@@ -24,6 +24,6 @@ var _ = Describe("Starlark", func() {
 		filename := "testdata/test.envd"
 		hash, err := GetEnvdProgramHash(filename)
 		Expect(err).NotTo(HaveOccurred())
-		Expect(hash).To(Equal("1292b11c2ac16f70"))
+		Expect(hash).To(Equal("42bc7dd445dbc5a0"))
 	})
 })

pkg/lang/frontend/starlark/v1/interpreter.go

@@ -19,7 +19,7 @@ import (
 	"fmt"
 
 	"github.com/cockroachdb/errors"
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 	"github.com/docker/docker/api/types/image"
 	dockersystem "github.com/docker/docker/api/types/system"
 	"github.com/moby/buildkit/util/system"
@@ -205,7 +205,7 @@ func NewImageFromMeta(meta servertypes.ImageMeta) (*EnvdImage, error) {
 	return &img, nil
 }
 
-func NewEnvironmentFromContainer(ctr types.Container) (*EnvdEnvironment, error) {
+func NewEnvironmentFromContainer(ctr container.Summary) (*EnvdEnvironment, error) {
 	env := EnvdEnvironment{
 		Environment: servertypes.Environment{
 			Spec:   servertypes.EnvironmentSpec{Image: ctr.Image},
@@ -265,15 +265,15 @@ func newManifest(labels map[string]string) (EnvdManifest, error) {
 	return manifest, nil
 }
 
-func NewDependencyFromContainerJSON(ctr types.ContainerJSON) (*Dependency, error) {
+func NewDependencyFromContainerJSON(ctr container.InspectResponse) (*Dependency, error) {
 	return NewDependencyFromLabels(ctr.Config.Labels)
 }
 
 func NewDependencyFromImageSummary(img image.Summary) (*Dependency, error) {
 	return NewDependencyFromLabels(img.Labels)
 }
 
-func NewPortBindingFromContainerJSON(ctr types.ContainerJSON) ([]PortBinding, error) {
+func NewPortBindingFromContainerJSON(ctr container.InspectResponse) ([]PortBinding, error) {
 	var labels []servertypes.EnvironmentPort
 	err := json.Unmarshal([]byte(ctr.Config.Labels[ImageLabelPorts]), &labels)
 	if err != nil {