Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(repo): update dependabot config #18722

Merged
merged 4 commits into from
Jan 7, 2025
Merged

Conversation

dionysuzx
Copy link
Collaborator

Summary of changes

  • Dependabot now only opens three PRs max, once a month for Go, JavaScript, and GitHub actions.
  • It does major/minor/patch (ALL); if you want to exclude a dependency (eg. breaking change); you can do that explicitly and open a GitHub issue if needed to triage for later.
  • I added @davidtaikocha, @RogerLamTd, @KorbinianK, and @bearni95 as dependabot owners here. Anyone works, but I think it's important the reviewers here stay on top of it.
  • Turned off stale issues workflow, we don't need this anymore. This was from a time we had a lot of spam. Now it can get in the way of important tracking. Maintainers / contributors should close unnecessary issues.

I don't think we should automatically close these. It should be less noisy now, as you can see in the config, at the very most there will only be 3 PRs open once a month, which is quite forgiving. I think the bigger issue is we need to actually merge in these dependency updates for JavaScript projects.

@dionysuzx
Copy link
Collaborator Author

@davidtaikocha feel free to update the interval for Go dependencies. In my projects I usually like to do once a week, but maybe once a month is also fine.

@davidtaikocha davidtaikocha enabled auto-merge (squash) January 7, 2025 07:18
@davidtaikocha davidtaikocha merged commit 1c040e4 into main Jan 7, 2025
4 checks passed
@davidtaikocha davidtaikocha deleted the update-dependabot-config branch January 7, 2025 07:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants