-
-
Notifications
You must be signed in to change notification settings - Fork 232
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: Create dependabot.yml
to automatically update dependencies
#806
Conversation
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
@Abdel-Monaam-Aouini is attempting to deploy a commit to the next-intl Team on Vercel. A member of the Team first needs to authorize it. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the proposal!
@@ -0,0 +1,11 @@ | |||
# .github/dependabot.yml |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we configure dependabot so it provides all updates to dependencies in a single PR every month?
See:
- https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
- https://docs.github.com/en/code-security/dependabot/working-with-dependabot/troubleshooting-dependabot-errors#dependabot-fails-to-group-a-set-of-dependencies-into-a-single-pull-request-for-dependabot-version-updates
.github/dependabot.yml
Outdated
interval: 'weekly' | ||
commit-message: | ||
prefix: chore(deps) | ||
prefix-development: chore(deps) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A single PR that updates both dev and prod dependencies would be fine. For this repo, updates either affect runtime dependencies of next-intl
or anything else (docs, examples, etc.). I don't think dependabot can make a distinction between these two.
Co-authored-by: Jan Amann <jan@amann.work>
Co-authored-by: Jan Amann <jan@amann.work>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We can give this a shot and see how it works …
dependabot.yml
to automatically update dependencies
No description provided.