automatic-releases icon indicating copy to clipboard operation
automatic-releases copied to clipboard

Bump `milestone` in `.github/dependabot.yml`, when available?

Open Ocramius opened this issue 3 years ago • 0 comments

Feature Request

Q A
New Feature yes
RFC no
BC Break no

laminas/automatic-releases works exceptionally well with milestone automation, but dependabot updates often don't land in milestone/release notes, due to dependabot not assigning a milestone to opened PRs.

This could be automated, by assigning a milestone number/name (both seem to be supported) when creating a new milestone: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#milestone

Unsure if this is to be pursued, as it may lead to git conflicts (unlikely, because dependabot only acts on latest branches), but it could be an interesting idea to do so.

In practice, when a new milestone is created, we push a new commit with the milestone: value to each dependabot.yml#updates[].milestone entry (or set it, if not existing).

Ocramius avatar Sep 18 '21 23:09 Ocramius