Modify nox session release:prepare to add-on dependency changes

[ArBridgeman]

Details

The goal is to create a nox task for detecting changes in dependencies within a PR (relative to main).

Task(s)

Within the created nox task, the following requirements are needed:

• get list of all changed dependencies between main & the latest tag to be able to add onto a changelog
  • get list of all changed dependencies between main & the latest tag
  • categorize the changed dependencies into their groups -> main, dev
  • categorize the changed dependencies as removed, added, or changed using classes, which have a property for its changelog text

[tkilias]

I think, changing changelog and closing Github Issues need to be different nox tasks, because the changelog needs to be changed during the PR is still open. The closing of the Github issues must happen after the PR was merged, see details here. This means that the two tasks are used in two separate Github workflows.

Maybe we also want to split the two tasks into separate Github issues to make this a bit more digestable.

[ArBridgeman]

I think, changing changelog and closing Github Issues need to be different nox tasks, because the changelog needs to be changed during the PR is still open. The closing of the Github issues must happen after the PR was merged, see details here. This means that the two tasks are used in two separate Github workflows.

Maybe we also want to split the two tasks into separate Github issues to make this a bit more digestable.

Yes, I agree that they'd be 2 separate nox tasks (😬 not clearly written above) & tackled in 2 GitHub issues (-> moved to #402). With the changelog modifications, it'd good, when we get to it, if we discuss how that would work if the changelog already had modifications present in the respective changelog file or we'd ignore that case.

[tkilias]

if we discuss how that would work if the changelog already had modifications present in the respective changelog file or we'd ignore that case.

My suggestion would be that we have a dedicated section in the changelog for closed CVEs and this section only gets modified by the PTB.

[tkilias]

Here is a first diagram of the process.