qontract-reconcile 0.10.2.dev233__py3-none-any.whl → 0.10.2.dev234__py3-none-any.whl

{qontract_reconcile-0.10.2.dev233.dist-info → qontract_reconcile-0.10.2.dev234.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: qontract-reconcile
-Version: 0.10.2.dev233
+Version: 0.10.2.dev234
 Summary: Collection of tools to reconcile services with their desired state as defined in the app-interface DB.
 Project-URL: homepage, https://github.com/app-sre/qontract-reconcile
 Project-URL: repository, https://github.com/app-sre/qontract-reconcile
@@ -43,7 +43,7 @@ Requires-Dist: pygithub<1.59,>=1.58
 Requires-Dist: pyjwt~=2.7
 Requires-Dist: pyopenssl~=23.0
 Requires-Dist: pypd<1.2.0,>=1.1.0
-Requires-Dist: python-gitlab==5.6.0
+Requires-Dist: python-gitlab==6.0.0
 Requires-Dist: requests-oauthlib~=1.3
 Requires-Dist: requests~=2.32
 Requires-Dist: rich<14.0.0,>=13.3.0

{qontract_reconcile-0.10.2.dev233.dist-info → qontract_reconcile-0.10.2.dev234.dist-info}/RECORD

@@ -27,12 +27,12 @@ reconcile/github_owners.py,sha256=viE1KJ-zaTxuZ5yItg2C263J0brn-Q-3hR_DkYDMbhY,31
 reconcile/github_repo_invites.py,sha256=U9UCzNVwrZ7MqODtFah8ogH0NNY-XjBin7G9gqHtCUY,2690
 reconcile/github_repo_permissions_validator.py,sha256=PNqL4dqa2OaNBy-NmLVN-t1HZa6eS6HgSYmfOunYqtA,1798
 reconcile/github_validator.py,sha256=-j17tn3csFVjPMSPL3te48iWVkPZCncRXdeKeLdGjjQ,931
-reconcile/gitlab_fork_compliance.py,sha256=RbHckzLnE9zkOFHJANzoejEMMbMAivmqJVs3Suvp9lU,4591
-reconcile/gitlab_housekeeping.py,sha256=JEnerWbirICkJQy91ZVepcHge2XWrVUazfIeKnZ94ZQ,26345
+reconcile/gitlab_fork_compliance.py,sha256=kRbHeVIqFkGIIxgPlS36jBtgCH4huWbSYK-bfyfahrU,4552
+reconcile/gitlab_housekeeping.py,sha256=pZZn7Ww0FobqJrepVWoK44srh4W5P4WyAs3u81Xf4yM,26622
 reconcile/gitlab_labeler.py,sha256=BA2dbXsN9hErUwJl22qcxfeH7XiPCuQ9LN3NddWdnpo,4540
-reconcile/gitlab_members.py,sha256=yRZOZqwB9_FJ5DWIFEod6hoG0X38z36atInNshAWddI,8263
+reconcile/gitlab_members.py,sha256=O_RR3sOgK0Sv8fXSC3QwV4wcCJyKRE2MzJRiaWEqTgQ,8294
 reconcile/gitlab_mr_sqs_consumer.py,sha256=i_MDVfA3Uk_TJiNkfEJzhO6_rwR7z3I3dH9oEw686U4,2681
-reconcile/gitlab_owners.py,sha256=nIEsf3QWI3yIw_Bxy5oMaCmszTaNZDwQVaaZZxPgh4g,14447
+reconcile/gitlab_owners.py,sha256=C0Pzlsi9Z8o6JlpuvYOdYVBEHvPjS-1L4q6-E7s1agk,14503
 reconcile/gitlab_permissions.py,sha256=Do8npcSK89dlA2T9LLdkhngTtv9ovmI4sohTFp7gglc,8373
 reconcile/gitlab_projects.py,sha256=JIB1UP8CnwSkngEMZE7DFQETMX6sJMp4DXaKoS-Pdkc,1879
 reconcile/integrations_manager.py,sha256=KKMui_zXHNbMT0o5jnW2JpDzIKuMPqBvamit3I84pDE,9313
@@ -167,10 +167,10 @@ reconcile/change_owners/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG
 reconcile/change_owners/approver.py,sha256=Z3_11vnK2WNOxjEEXVDh0224-_-qbt9d6mBeVE-7fsc,2259
 reconcile/change_owners/bundle.py,sha256=h30fU-JmLH5a-rCAovpzTeTkkkgZztsZ5A2raee0YuU,5355
 reconcile/change_owners/change_log_tracking.py,sha256=lRHdC6-sqzUClmoVNq8v5rygAzeQJRxbKbJNDB3YI8E,9499
-reconcile/change_owners/change_owners.py,sha256=7tESnSX2-psNGPIF63OeK5f-m3iqwanaGjt03FIjWXU,17111
+reconcile/change_owners/change_owners.py,sha256=U0KmAkDlzxmj4odk2sRrGotfEOq1hC_mb85iCwAzVD0,17105
 reconcile/change_owners/change_types.py,sha256=5eSvS2_npUriq9RN4LdAWdYUiNzF91K1pDUEVYDIQ4k,32023
 reconcile/change_owners/changes.py,sha256=YTqwUYutQ6JVSSYmC2Ph5ROCiVix42Vnzy47-i57z4Q,18119
-reconcile/change_owners/decision.py,sha256=PqkcDfhX0T7YitNx6idVorYYk_KvcIndQTwQoJJ7bfs,7502
+reconcile/change_owners/decision.py,sha256=755rHmrnhfM_xVKnCPlLPOVm_TCJVb3lSkkUvxFM61Q,7491
 reconcile/change_owners/diff.py,sha256=0vyu29xCL24ZhUa7hqBni0NaxoCYRXLwvA-h8V23YQ4,9009
 reconcile/change_owners/implicit_ownership.py,sha256=6BehZvx4IjrphmOt_LLLk9_02Fl5BY5jd00Wuz_PBZk,4234
 reconcile/change_owners/self_service_roles.py,sha256=xSe5AKZxXAIo0vWOMM5hImQ_rd-dQ38y_5dG5L6X0so,9655
@@ -611,7 +611,7 @@ reconcile/utils/external_resources.py,sha256=YzTb0xAcNdmKO326mGQy7BmST56CZcdru4l
 reconcile/utils/filtering.py,sha256=S4PbMHuFr3ED0P2Q_ea5CAaB7FimI62B-F5YTaKrphA,402
 reconcile/utils/git.py,sha256=o4p9m8jlzCJDcutl2HErvGLhL6sZ1NB4Aw3zGcQIzso,2427
 reconcile/utils/github_api.py,sha256=S1vO-hvYPzm5BIychVIHSYibMns0HBmLgS78MkPfunE,3402
-reconcile/utils/gitlab_api.py,sha256=4-DG5wV7k0jSl4Yp4ELQbp3qJY6uYuHukiZJ5tYkhCM,28648
+reconcile/utils/gitlab_api.py,sha256=0wJObojbXXk8Cgh8ymNWlwD1CdENmpsMo1zDSTddnoE,28335
 reconcile/utils/gpg.py,sha256=EKG7_fdMv8BMlV5yUdPiqoTx-KrzmVSEAl2sLkaKwWI,1123
 reconcile/utils/gql.py,sha256=C0thIm_k9MBldfqwHzyqtYZk9sIvMdm9IbbnXLGwjD8,14158
 reconcile/utils/grouping.py,sha256=vr9SFHZ7bqmHYrvYcEZt-Er3-yQYfAAdq5sHLZVmXPY,456
@@ -667,7 +667,7 @@ reconcile/utils/three_way_diff_strategy.py,sha256=oQcHXd9LVhirJfoaOBoHUYuZVGfyL2
 reconcile/utils/throughput.py,sha256=iP4UWAe2LVhDo69mPPmgo9nQ7RxHD6_GS8MZe-aSiuM,344
 reconcile/utils/vault.py,sha256=aSA8l9cJlPUHpChFGl27nSY-Mpq9FMjBo7Dcgb1BVfM,15036
 reconcile/utils/vaultsecretref.py,sha256=0KUSzuvTRxPyKY919TO3-B_eYg4_76fzKvMF8j5s1G0,911
-reconcile/utils/vcs.py,sha256=X9wCe0aWrDxP9kuOABLjkex0fYW-6vuYwjboYYlNMZM,10225
+reconcile/utils/vcs.py,sha256=AtAGxhGRL7JcG3mmXN2qRE5Cw89c4I6cRAYQ8x3Fq7Y,10222
 reconcile/utils/acs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 reconcile/utils/acs/base.py,sha256=4UsDrCpAOuddL3PKNuIQYoJP1BtZQNNB8_KEX0lXneg,2532
 reconcile/utils/acs/policies.py,sha256=jpbi3qpGkBD_X6MfzsX12dPajUbmACmhIOz_0rDvYzs,5489
@@ -775,7 +775,7 @@ tools/app_sre_tekton_access_reporter.py,sha256=o9prLUgQpwO3msRWc2as1xT1y9OB3znkp
 tools/app_sre_tekton_access_revalidation.py,sha256=66nHEaY-bIqxIhpcmwN8AvQZu6ZXenfkg4Fut0pVZRM,2726
 tools/glitchtip_access_reporter.py,sha256=o01A6b88t3Wie6tj_tJWWVo2J01LxQ_a9giGm4UzEaU,2901
 tools/glitchtip_access_revalidation.py,sha256=PXN5wxl6OX8sxddPaakDF3X79nFLvpm-lz0mWLVelw0,2806
-tools/qontract_cli.py,sha256=kaKlRhxyqcK4wB454QyvMAY5BMIPMi_vRTLHhX_o954,159006
+tools/qontract_cli.py,sha256=9TfODEGBzRjpTFp0UGPE_9iqj0LMBaNbT3DdXeqYLBg,159113
 tools/template_validation.py,sha256=qpKYaTgk0GOPGa2Ct5_5sKdwIHtCAKIBGzsMPuJU5fw,3371
 tools/cli_commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 tools/cli_commands/container_images_report.py,sha256=_8GuBsl_qYP5qfa5aa9krwyKHYu82MSh02deHEroSa4,5459
@@ -801,7 +801,7 @@ tools/saas_promotion_state/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJ
 tools/saas_promotion_state/saas_promotion_state.py,sha256=UfwwRLS5Ya4_Nh1w5n1dvoYtchQvYE9yj1VANt2IKqI,3925
 tools/sre_checkpoints/__init__.py,sha256=CDaDaywJnmRCLyl_NCcvxi-Zc0hTi_3OdwKiFOyS39I,145
 tools/sre_checkpoints/util.py,sha256=zEDbGr18ZeHNQwW8pUsr2JRjuXIPz--WAGJxZo9sv_Y,894
-qontract_reconcile-0.10.2.dev233.dist-info/METADATA,sha256=smWMr5frcUeo5bVFtSiIZzfs85VvhvkhTqHHQGrPiNo,24352
-qontract_reconcile-0.10.2.dev233.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-qontract_reconcile-0.10.2.dev233.dist-info/entry_points.txt,sha256=5i9l54La3vQrDLAdwDKQWC0iG4sV9RRfOb1BpvzOWLc,698
-qontract_reconcile-0.10.2.dev233.dist-info/RECORD,,
+qontract_reconcile-0.10.2.dev234.dist-info/METADATA,sha256=iNMIf9DSOc-sdEsqs0SNiNRMJkJ8Oy3g5h-s8CwN9p8,24352
+qontract_reconcile-0.10.2.dev234.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+qontract_reconcile-0.10.2.dev234.dist-info/entry_points.txt,sha256=5i9l54La3vQrDLAdwDKQWC0iG4sV9RRfOb1BpvzOWLc,698
+qontract_reconcile-0.10.2.dev234.dist-info/RECORD,,

reconcile/change_owners/change_owners.py

@@ -382,7 +382,7 @@ def run(
 
             comments = gl.get_merge_request_comments(merge_request)
             good_to_test_approvers = {
-                c["username"] for c in comments if c["body"].strip() == "/good-to-test"
+                c.username for c in comments if c.body.strip() == "/good-to-test"
             }
 
             change_admitted = is_change_admitted(

reconcile/change_owners/decision.py

@@ -1,12 +1,8 @@
-import operator
 from collections import defaultdict
-from collections.abc import (
-    Iterable,
-    Mapping,
-)
+from collections.abc import Iterable
 from dataclasses import dataclass
 from enum import Enum
-from typing import Any
+from operator import attrgetter
 
 from reconcile.change_owners.approver import (
     Approver,
@@ -16,6 +12,7 @@ from reconcile.change_owners.bundle import FileRef
 from reconcile.change_owners.change_types import ChangeTypeContext, DiffCoverage
 from reconcile.change_owners.changes import BundleFileChange
 from reconcile.change_owners.diff import Diff
+from reconcile.utils.gitlab_api import Comment
 
 
 class DecisionCommand(Enum):
@@ -33,12 +30,12 @@ class Decision:
 
 
 def get_approver_decisions_from_mr_comments(
-    comments: Iterable[Mapping[str, Any]],
+    comments: Iterable[Comment],
 ) -> list[Decision]:
     decisions: list[Decision] = []
-    for c in sorted(comments, key=operator.itemgetter("created_at")):
-        commenter = c["username"]
-        comment_body = c.get("body")
+    for c in sorted(comments, key=attrgetter("created_at")):
+        commenter = c.username
+        comment_body = c.body
         for line in comment_body.split("\n") if comment_body else []:
             line = line.strip()
             if line == DecisionCommand.APPROVED.value:

reconcile/gitlab_fork_compliance.py

@@ -77,8 +77,7 @@ class GitlabForkCompliance:
                     continue
                 LOG.info([f"adding {member.username} as maintainer"])
                 user_payload = {"user_id": member.id, "access_level": MAINTAINER_ACCESS}
-                member = self.src.project.members.create(user_payload)
-                member.save()
+                self.src.project.members.create(user_payload)
 
         # Last but not least, we remove the blocked label, in case
         # it is set

reconcile/gitlab_housekeeping.py

@@ -14,10 +14,12 @@ from operator import itemgetter
 from typing import Any, cast
 
 import gitlab
+from gitlab.const import PipelineStatus
 from gitlab.v4.objects import (
     ProjectCommit,
     ProjectIssue,
     ProjectMergeRequest,
+    ProjectMergeRequestPipeline,
 )
 from prometheus_client import (
     Counter,
@@ -133,11 +135,16 @@ def _calculate_time_since_approval(approved_at: str) -> float:
 
 
 def get_timed_out_pipelines(
-    pipelines: list[dict], pipeline_timeout: int = 60
-) -> list[dict]:
+    pipelines: list[ProjectMergeRequestPipeline],
+    pipeline_timeout: int = 60,
+) -> list[ProjectMergeRequestPipeline]:
     now = datetime.utcnow()
 
-    pending_pipelines = [p for p in pipelines if p["status"] in {"pending", "running"}]
+    pending_pipelines = [
+        p
+        for p in pipelines
+        if p.status in {PipelineStatus.PENDING, PipelineStatus.RUNNING}
+    ]
 
     if not pending_pipelines:
         return []
@@ -145,7 +152,7 @@ def get_timed_out_pipelines(
     timed_out_pipelines = []
 
     for p in pending_pipelines:
-        update_time = datetime.strptime(p["updated_at"], DATE_FORMAT)
+        update_time = datetime.strptime(p.updated_at, DATE_FORMAT)
 
         elapsed = (now - update_time).total_seconds()
 
@@ -160,20 +167,19 @@ def clean_pipelines(
     dry_run: bool,
     gl: GitLabApi,
     fork_project_id: int,
-    pipelines: list[dict],
+    pipelines: list[ProjectMergeRequestPipeline],
 ) -> None:
     if not dry_run:
         gl_piplelines = gl.get_project_by_id(fork_project_id).pipelines
 
     for p in pipelines:
-        logging.info(["canceling", p["web_url"]])
+        logging.info(["canceling", p.web_url])
         if not dry_run:
             try:
-                gl_piplelines.get(p["id"]).cancel()
+                gl_piplelines.get(p.id, lazy=True).cancel()
             except gitlab.exceptions.GitlabPipelineCancelError as err:
                 logging.error(
-                    f"unable to cancel {p['web_url']} - "
-                    f"error message {err.error_message}"
+                    f"unable to cancel {p.web_url} - error message {err.error_message}"
                 )
 
 
@@ -188,9 +194,9 @@ def verify_on_demand_tests(
     Check if MR has passed all necessary test jobs and add comments to indicate test results.
     """
     pipelines = gl.get_merge_request_pipelines(mr)
-    running_pipelines = [p for p in pipelines if p["status"] == "running"]
+    running_pipelines = [p for p in pipelines if p.status == PipelineStatus.RUNNING]
     if running_pipelines:
-        # wait for pipelines complate
+        # wait for pipelines completion
         return False
 
     commit = next(mr.commits())
@@ -510,7 +516,9 @@ def rebase_merge_requests(
                 continue
             # possible statuses:
             # running, pending, success, failed, canceled, skipped
-            running_pipelines = [p for p in pipelines if p["status"] == "running"]
+            running_pipelines = [
+                p for p in pipelines if p.status == PipelineStatus.RUNNING
+            ]
             if running_pipelines:
                 continue
 
@@ -591,7 +599,9 @@ def merge_merge_requests(
         if wait_for_pipeline:
             # possible statuses:
             # running, pending, success, failed, canceled, skipped
-            running_pipelines = [p for p in pipelines if p["status"] == "running"]
+            running_pipelines = [
+                p for p in pipelines if p.status == PipelineStatus.RUNNING
+            ]
             if running_pipelines:
                 if insist:
                     # This raise causes the method to restart due to the usage of
@@ -606,8 +616,8 @@ def merge_merge_requests(
                     )
                 continue
 
-        last_pipeline_result = pipelines[0]["status"]
-        if last_pipeline_result != "success":
+        last_pipeline_result = pipelines[0].status
+        if last_pipeline_result != PipelineStatus.SUCCESS:
             continue
 
         logging.info(["merge", gl.project.name, mr.iid])

reconcile/gitlab_members.py

@@ -216,7 +216,7 @@ def reconcile_gitlab_members(
                 gl.get_access_level_string(gitlab_user.access_level),
             ])
             if not dry_run:
-                gl.add_group_member(group, gitlab_user)
+                gl.add_group_member(group, gitlab_user.user, gitlab_user.access_level)
         for key, group_member in diff_data.delete.items():
             logging.info([
                 key,

reconcile/gitlab_owners.py

@@ -89,19 +89,19 @@ class MRApproval:
         comments = self.gitlab.get_merge_request_comments(self.mr)
         for comment in comments:
             # Only interested in '/lgtm' comments
-            if comment["body"] != "/lgtm":
+            if comment.body != "/lgtm":
                 continue
 
             # Only interested in comments created after the top commit
             # creation time
-            comment_created_at = dateparser.parse(comment["created_at"])
+            comment_created_at = dateparser.parse(comment.created_at)
             if (
                 comment_created_at < self.top_commit_created_at
                 and not self.persistent_lgtm
             ):
                 continue
 
-            lgtms.append(comment["username"])
+            lgtms.append(comment.username)
         return lgtms
 
     def expand_groups(self, owners: list[str]) -> set[str]:
@@ -173,19 +173,22 @@ class MRApproval:
         comments = self.gitlab.get_merge_request_comments(self.mr)
         for comment in comments:
             # Only interested on our own comments
-            if comment["username"] != self.gitlab.user.username:
+            if comment.username != self.gitlab.user.username:
                 continue
 
             # Ignoring non-approval comments
-            body = comment["body"]
+            body = comment.body
             if not body.startswith(COMMENT_PREFIX):
                 continue
 
             # If the comment was created before the last commit,
             # it means we had a push after the comment. In this case,
             # we delete the comment and move on.
-            comment_created_at = dateparser.parse(comment["created_at"])
-            if comment_created_at < self.top_commit_created_at:
+            comment_created_at = dateparser.parse(comment.created_at)
+            if (
+                comment_created_at < self.top_commit_created_at
+                and comment.note is not None
+            ):
                 # Deleting stale comments
                 _LOG.info([
                     f"Project:{self.gitlab.project.id} "
@@ -193,7 +196,7 @@ class MRApproval:
                     f"- removing stale comment"
                 ])
                 if not self.dry_run:
-                    self.gitlab.delete_comment(comment["note"])
+                    self.gitlab.delete_comment(comment.note)
                 continue
 
             # At this point, we've found an approval comment comment

reconcile/utils/gitlab_api.py

@@ -7,16 +7,12 @@ from collections.abc import (
     Iterable,
     Mapping,
 )
+from dataclasses import dataclass
 from functools import cached_property
-from operator import (
-    attrgetter,
-    itemgetter,
-)
+from operator import attrgetter
 from typing import (
     Any,
-    Protocol,
     Self,
-    TypedDict,
     cast,
 )
 from urllib.parse import urlparse
@@ -47,6 +43,7 @@ from gitlab.v4.objects import (
     ProjectMergeRequest,
     ProjectMergeRequestManager,
     ProjectMergeRequestNote,
+    ProjectMergeRequestPipeline,
     ProjectMergeRequestResourceLabelEvent,
     User,
 )
@@ -97,15 +94,19 @@ class MRStatus:
 GROUP_BOT_NAME_REGEX = re.compile(r"group_.+_bot_.+")
 
 
-class GLGroupMember(TypedDict):
-    id: str
-    user: str
-    access_level: str
+@dataclass(frozen=True)
+class Assignment:
+    author: str
+    assignee: str
 
 
-class GitlabUser(Protocol):
-    user: str
-    access_level: int
+@dataclass(frozen=True)
+class Comment:
+    id: int
+    username: str
+    body: str
+    created_at: str
+    note: ProjectMergeRequestNote | None = None
 
 
 class GitLabApi:
@@ -254,7 +255,7 @@ class GitLabApi:
             "remove_source_branch": str(remove_source_branch),
             "labels": labels,
         }
-        return cast(ProjectMergeRequest, self.project.mergerequests.create(data))
+        return self.project.mergerequests.create(data)
 
     def mr_exists(self, title: str) -> bool:
         mrs = self.get_merge_requests(state=MRState.OPENED)
@@ -274,10 +275,7 @@ class GitLabApi:
 
     def get_app_sre_group_users(self) -> list[GroupMember]:
         app_sre_group = self.gl.groups.get("app-sre")
-        return cast(
-            list[GroupMember],
-            app_sre_group.members.list(get_all=True),
-        )
+        return app_sre_group.members.list(get_all=True)
 
     def get_group_if_exists(self, group_name: str) -> Group | None:
         try:
@@ -312,7 +310,7 @@ class GitLabApi:
 
     def get_group_members(self, group: Group) -> list[GroupMember]:
         return [
-            cast(GroupMember, m)
+            m
             for m in group.members.list(iterator=True)
             if not self._is_bot_username(m.username)
         ]
@@ -331,17 +329,17 @@ class GitLabApi:
             member.access_level = access_level
             member.save()
 
-    def add_group_member(self, group: Group, user: GitlabUser) -> None:
-        gitlab_user = self.get_user(user.user)
+    def add_group_member(self, group: Group, username: str, access_level: int) -> None:
+        gitlab_user = self.get_user(username)
         if gitlab_user is not None:
             try:
                 group.members.create({
                     "user_id": gitlab_user.id,
-                    "access_level": user.access_level,
+                    "access_level": access_level,
                 })
             except GitlabCreateError:
-                member = group.members.get(user.user)
-                member.access_level = user.access_level
+                member = group.members.get(gitlab_user.id)
+                member.access_level = access_level
                 member.save()
 
     def remove_group_member(self, group: Group, user_id: str) -> None:
@@ -398,37 +396,27 @@ class GitLabApi:
         return self.gl.projects.get(project_id)
 
     def get_issues(self, state: str) -> list[ProjectIssue]:
-        return cast(
-            list[ProjectIssue],
-            self.project.issues.list(state=state, get_all=True),
-        )
+        return self.project.issues.list(state=state, get_all=True)
 
     def get_merge_request(self, mr_id: str | int) -> ProjectMergeRequest:
         return self.project.mergerequests.get(mr_id)
 
     def get_merge_requests(self, state: str) -> list[ProjectMergeRequest]:
-        return cast(
-            list[ProjectMergeRequest],
-            self.project.mergerequests.list(state=state, get_all=True),
-        )
+        return self.project.mergerequests.list(state=state, get_all=True)
 
     @staticmethod
     def get_merge_request_label_events(
         mr: ProjectMergeRequest,
     ) -> list[ProjectMergeRequestResourceLabelEvent]:
-        return cast(
-            list[ProjectMergeRequestResourceLabelEvent],
-            mr.resourcelabelevents.list(get_all=True),
-        )
+        return mr.resourcelabelevents.list(get_all=True)
 
     @staticmethod
-    def get_merge_request_pipelines(mr: ProjectMergeRequest) -> list[dict]:
-        # TODO: use typed object in return
-        # TODO: use server side order_by
-        items = mr.pipelines.list(iterator=True)
+    def get_merge_request_pipelines(
+        mr: ProjectMergeRequest,
+    ) -> list[ProjectMergeRequestPipeline]:
         return sorted(
-            [i.asdict() for i in items],
-            key=itemgetter("created_at"),
+            mr.pipelines.list(iterator=True),
+            key=attrgetter("created_at"),
             reverse=True,
         )
 
@@ -456,25 +444,28 @@ class GitLabApi:
     def get_merge_request_comments(
         merge_request: ProjectMergeRequest,
         include_description: bool = False,
-    ) -> list[dict[str, Any]]:
+    ) -> list[Comment]:
         comments = []
         if include_description:
-            comments.append({
-                "username": merge_request.author["username"],
-                "body": merge_request.description,
-                "created_at": merge_request.created_at,
-                "id": MR_DESCRIPTION_COMMENT_ID,
-            })
-        for note in merge_request.notes.list(iterator=True):
-            if note.system:
-                continue
-            comments.append({
-                "username": note.author["username"],
-                "body": note.body,
-                "created_at": note.created_at,
-                "id": note.id,
-                "note": note,
-            })
+            comments.append(
+                Comment(
+                    id=MR_DESCRIPTION_COMMENT_ID,
+                    username=merge_request.author["username"],
+                    body=merge_request.description or "",
+                    created_at=merge_request.created_at,
+                )
+            )
+        comments.extend(
+            Comment(
+                id=note.id,
+                username=note.author["username"],
+                body=note.body or "",
+                created_at=note.created_at,
+                note=note,
+            )
+            for note in merge_request.notes.list(iterator=True)
+            if not note.system
+        )
         return comments
 
     @staticmethod
@@ -488,9 +479,12 @@ class GitLabApi:
     ) -> None:
         comments = self.get_merge_request_comments(merge_request)
         for c in comments:
-            body = c["body"] or ""
-            if c["username"] == self.user.username and body.startswith(startswith):
-                self.delete_comment(c["note"])
+            if (
+                c.username == self.user.username
+                and c.body.startswith(startswith)
+                and c.note is not None
+            ):
+                self.delete_comment(c.note)
 
     @retry()
     def get_project_labels(self) -> set[str]:
@@ -631,7 +625,7 @@ class GitLabApi:
         item.save()
 
     def get_user(self, username: str) -> User | None:
-        user = cast(list[User], self.gl.users.list(search=username, page=1, per_page=1))
+        user = self.gl.users.list(search=username, page=1, per_page=1)
         if not user:
             logging.error(f"{username} user not found")
             return None
@@ -732,25 +726,22 @@ class GitLabApi:
         self.create_branch("production", "master")
 
     def is_last_action_by_team(
-        self, mr: ProjectMergeRequest, team_usernames: list[str], hold_labels: list[str]
+        self, mr: ProjectMergeRequest, team_usernames: set[str], hold_labels: list[str]
     ) -> bool:
         # what is the time of the last app-sre response?
         last_action_by_team = None
         # comments
         comments = self.get_merge_request_comments(mr)
-        comments.sort(key=itemgetter("created_at"), reverse=True)
+        comments.sort(key=attrgetter("created_at"), reverse=True)
         for comment in comments:
-            username = comment["username"]
+            username = comment.username
             if username == self.user.username:
                 continue
             if username in team_usernames:
-                last_action_by_team = comment["created_at"]
+                last_action_by_team = comment.created_at
                 break
         # labels
-        label_events = cast(
-            list[ProjectMergeRequestResourceLabelEvent],
-            mr.resourcelabelevents.list(get_all=True),
-        )
+        label_events = mr.resourcelabelevents.list(get_all=True)
         for label in reversed(label_events):
             if label.action == "add" and label.label["name"] in hold_labels:
                 username = label.user["username"]
@@ -774,11 +765,11 @@ class GitLabApi:
             break
         # comments
         for comment in comments:
-            username = comment["username"]
+            username = comment.username
             if username == self.user.username:
                 continue
             if username not in team_usernames:
-                last_action_not_by_team = comment["created_at"]
+                last_action_not_by_team = comment.created_at
                 break
 
         if not last_action_not_by_team:
@@ -787,19 +778,20 @@ class GitLabApi:
         return last_action_not_by_team < last_action_by_team
 
     def is_assigned_by_team(
-        self, mr: ProjectMergeRequest, team_usernames: list[str]
+        self, mr: ProjectMergeRequest, team_usernames: set[str]
     ) -> bool:
         if not mr.assignee:
             return False
         last_assignment = self.last_assignment(mr)
-        if not last_assignment:
+        if last_assignment is None:
             return False
-
-        author, assignee = last_assignment[0], last_assignment[1]
-        return author in team_usernames and mr.assignee["username"] == assignee
+        return (
+            last_assignment.author in team_usernames
+            and mr.assignee["username"] == last_assignment.assignee
+        )
 
     @staticmethod
-    def last_assignment(mr: ProjectMergeRequest) -> tuple[str, str] | None:
+    def last_assignment(mr: ProjectMergeRequest) -> Assignment | None:
         """
         Get the last assignment of a merge request.
         :param mr: merge request
@@ -809,7 +801,10 @@ class GitLabApi:
         notes = mr.notes.list(sort="desc", order_by="created_at", iterator=True)
         return next(
             (
-                (note.author["username"], note.body.removeprefix(body_format))
+                Assignment(
+                    author=note.author["username"],
+                    assignee=note.body.removeprefix(body_format),
+                )
                 for note in notes
                 if note.system and note.body.startswith(body_format)
             ),
@@ -818,15 +813,17 @@ class GitLabApi:
 
     def last_comment(
         self, mr: ProjectMergeRequest, exclude_bot: bool = True
-    ) -> dict[str, Any] | None:
+    ) -> Comment | None:
         comments = self.get_merge_request_comments(mr)
-        comments.sort(key=itemgetter("created_at"), reverse=True)
-        for comment in comments:
-            username = comment["username"]
-            if username == self.user.username and exclude_bot:
-                continue
-            return comment
-        return None
+        comments.sort(key=attrgetter("created_at"), reverse=True)
+        return next(
+            (
+                comment
+                for comment in comments
+                if not (exclude_bot and comment.username == self.user.username)
+            ),
+            None,
+        )
 
     def get_commit_sha(self, ref: str, repo_url: str) -> str:
         project = self.get_project(repo_url)
@@ -841,10 +838,7 @@ class GitLabApi:
         return response.get("commits", [])
 
     def get_personal_access_tokens(self) -> list[PersonalAccessToken]:
-        return cast(
-            list[PersonalAccessToken],
-            self.gl.personal_access_tokens.list(get_all=True),
-        )
+        return self.gl.personal_access_tokens.list(get_all=True)
 
     @staticmethod
     def get_directory_contents(

reconcile/utils/vcs.py

@@ -9,6 +9,7 @@ from enum import Enum
 from typing import Literal
 from urllib.parse import urlparse
 
+from gitlab.const import PipelineStatus
 from gitlab.v4.objects import ProjectMergeRequest
 
 from reconcile.typed_queries.github_orgs import GithubOrgV1
@@ -154,14 +155,13 @@ class VCS:
         pipelines = self._gitlab_instance.get_merge_request_pipelines(mr)
         if not pipelines:
             return MRCheckStatus.NONE
-        # available status codes https://docs.gitlab.com/ee/api/pipelines.html
-        last_pipeline_result = pipelines[0]["status"]
+        last_pipeline_result = pipelines[0].status
         match last_pipeline_result:
-            case "success":
+            case PipelineStatus.SUCCESS:
                 return MRCheckStatus.SUCCESS
-            case "running":
+            case PipelineStatus.RUNNING:
                 return MRCheckStatus.RUNNING
-            case "failed":
+            case PipelineStatus.FAILED:
                 return MRCheckStatus.FAILED
             case _:
                 # Lets assume all other states as non-present

tools/qontract_cli.py

@@ -27,6 +27,7 @@ import click
 import click.core
 import requests
 import yaml
+from gitlab.const import PipelineStatus
 from rich import box
 from rich import print as rich_print
 from rich.console import Console, Group
@@ -2331,15 +2332,17 @@ def app_interface_review_queue(ctx: click.Context) -> None:
             pipelines = gl.get_merge_request_pipelines(mr)
             if not pipelines:
                 continue
-            running_pipelines = [p for p in pipelines if p["status"] == "running"]
+            running_pipelines = [
+                p for p in pipelines if p.status == PipelineStatus.RUNNING
+            ]
             if running_pipelines:
                 continue
-            last_pipeline_result = pipelines[0]["status"]
-            if last_pipeline_result != "success":
+            last_pipeline_result = pipelines[0].status
+            if last_pipeline_result != PipelineStatus.SUCCESS:
                 continue
 
             author = mr.author["username"]
-            app_sre_team_members = [u.username for u in gl.get_app_sre_group_users()]
+            app_sre_team_members = {u.username for u in gl.get_app_sre_group_users()}
             if author in app_sre_team_members:
                 continue
 
@@ -2357,7 +2360,7 @@ def app_interface_review_queue(ctx: click.Context) -> None:
                 if (
                     last_comment
                     and trigger_phrases_regex
-                    and not re.fullmatch(trigger_phrases_regex, last_comment["body"])
+                    and not re.fullmatch(trigger_phrases_regex, last_comment.body)
                 ):
                     continue
 
@@ -2417,7 +2420,7 @@ def app_interface_open_selfserviceable_mr_queue(ctx: click.Context) -> None:
 
         # skip MRs where AppSRE is involved already (author or assignee)
         author = mr.author["username"]
-        app_sre_team_members = [u.username for u in gl.get_app_sre_group_users()]
+        app_sre_team_members = {u.username for u in gl.get_app_sre_group_users()}
         if author in app_sre_team_members:
             continue
         is_assigned_by_app_sre = gl.is_assigned_by_team(mr, app_sre_team_members)
@@ -2428,11 +2431,11 @@ def app_interface_open_selfserviceable_mr_queue(ctx: click.Context) -> None:
         pipelines = gl.get_merge_request_pipelines(mr)
         if not pipelines:
             continue
-        running_pipelines = [p for p in pipelines if p["status"] == "running"]
+        running_pipelines = [p for p in pipelines if p.status == PipelineStatus.RUNNING]
         if running_pipelines:
             continue
-        last_pipeline_result = pipelines[0]["status"]
-        if last_pipeline_result != "success":
+        last_pipeline_result = pipelines[0].status
+        if last_pipeline_result != PipelineStatus.SUCCESS:
             continue
 
         item = {