robotoff icon indicating copy to clipboard operation
robotoff copied to clipboard

Reintroduce Dependabot for just GitHub Actions

Open teolemon opened this issue 1 year ago • 3 comments

Reintroduce Dependabot for just GitHub Actions

version: 2
updates:
  - package-ecosystem: "pip"
    directory: "/" # Location of package manifests
    schedule:
      interval: "monthly"
    commit-message:
      prefix: "chore"
      include: "scope"
    open-pull-requests-limit: 30
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "monthly"
    commit-message:
      prefix: "chore"
      include: "scope"
    open-pull-requests-limit: 30
  - package-ecosystem: "docker"
    directory: "/"
    schedule:
      interval: "monthly"
    commit-message:
      prefix: "chore"
      include: "scope"
    open-pull-requests-limit: 30

teolemon avatar Apr 24 '23 17:04 teolemon

With @alexgarel we disabled dependabot on purpose, as it introduced a lot of open pull requests, and as every version upgrade introduce possibly unexpected breaking changes.

raphael0202 avatar Apr 25 '23 04:04 raphael0202

I'm not talking about docker or pip updates, just GitHub actions (like crowdin)

teolemon avatar Apr 25 '23 06:04 teolemon

Yes I think it's ok to add it for github actions.

alexgarel avatar Apr 27 '23 08:04 alexgarel