start addressing dependabot-flagged issues and add missing image build workflow

[atvaccaro]

This should close a bunch of the dependabot PRs. It also aligns our various image building workflow names and updates poetry as needed.

I tested the aggregator checker changes.

[2022-09-21 17:08:15,472] {pod_launcher.py:149} INFO - https://data.trilliumtransit.com/gtfs/tracy-ca-us/tracy-ca-us.zip
[2022-09-21 17:08:15,473] {pod_launcher.py:149} INFO - saving results to gs://gtfs-data-test/feed_aggregator_checks/dt=2022-09-21/checks.jsonl
[2022-09-21 17:08:15,628] {pod_launcher.py:149} INFO - Results saved to gs://gtfs-data-test/feed_aggregator_checks/dt=2022-09-21/checks.jsonl
Fetching individual feed URLs: 100%|██████████| 177/177 [00:39<00:00,  4.45it/s]
[2022-09-21 17:08:17,850] {pod_launcher.py:198} INFO - Event: check-aggregators.26438c56ca7545919ff3363b889f7f26 had an event of type Succeeded
[2022-09-21 17:08:17,850] {pod_launcher.py:311} INFO - Event with job id check-aggregators.26438c56ca7545919ff3363b889f7f26 Succeeded
[2022-09-21 17:08:17,950] {pod_launcher.py:198} INFO - Event: check-aggregators.26438c56ca7545919ff3363b889f7f26 had an event of type Succeeded
[2022-09-21 17:08:17,951] {pod_launcher.py:311} INFO - Event with job id check-aggregators.26438c56ca7545919ff3363b889f7f26 Succeeded
[2022-09-21 17:08:18,110] {taskinstance.py:1212} INFO - Marking task as SUCCESS. dag_id=check_feed_aggregators, task_id=check_aggregators, execution_date=20220921T000000, start_date=20220921T162940, end_date=20220921T170818

[lauriemerrell]

• can you list the specific dependabot issues/PRs that you think this will close or that you are working from? just to understand which specific dependency issues we intend to be fixing here.
• why do we need to rename the github workflows? just consistency or is there a functional reason?
• will dependabot close its PRs on its own?

[atvaccaro]

• can you list the specific dependabot issues/PRs that you think this will close or that you are working from? just to understand which specific dependency issues we intend to be fixing here.

Yep!
#1809
#1801
#1800
#1799
#1798
#1797
#1796

• why do we need to rename the github workflows? just consistency or is there a functional reason?

Just for consistency, since I'm adding a new one.

• will dependabot close its PRs on its own?

I believe so yes.

[lauriemerrell]

• Re: https://github.com/cal-itp/data-infra/pull/1809/files -- why does warehouse/requirements.txt even exist at all? (that file is not updated in this PR)
• can you just add a note to the PR description nothing that we are also updating the poetry version -- I was confused about some of the diffs here like why the Dockerfiles are involved

[atvaccaro]

• Re: https://github.com/cal-itp/data-infra/pull/1809/files -- why does warehouse/requirements.txt even exist at all? (that file is not updated in this PR)

ah yeah good catch; that's the temporary workaround for python-poetry/poetry-plugin-export#118; I need to update it there too

• can you just add a note to the PR description nothing that we are also updating the poetry version -- I was confused about some of the diffs here like why the Dockerfiles are involved

done