icingadb icon indicating copy to clipboard operation
icingadb copied to clipboard

Add dependabot config for github actions

Open RincewindsHat opened this issue 2 years ago • 2 comments

RincewindsHat avatar Aug 10 '23 09:08 RincewindsHat

Interesting idea but I'm not entirely sure if this will help us. I mean we reference other actions using something like @v3, which means if compatible changes are done to the action, we'll receive them automatically. So feels like the resulting PRs are less "you should update this" but more "there's a new version that's probably incompatible, maybe you want to use it".

No description provided.

What exactly was your motivation for creating this PR?

julianbrost avatar Aug 10 '23 14:08 julianbrost

In other projects we got deprecation warnings for the pipelines after some time. The specific versions seem to be nailed to a specific node version which does not get updated within the version of the action. Therefore those actions will have to be updated eventually (if Github continues this practice) and IMHO it is better to get receive a PR for that beforehand instead of getting a deprecation notice unexpectedly.

RincewindsHat avatar Aug 15 '23 09:08 RincewindsHat

To be honest, I overlooked this PR. In the meantime, this has been fixed with PR #813.

lippserd avatar Oct 02 '24 08:10 lippserd