Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

.github: Add a dependabot config #2745

Closed
wants to merge 1 commit into from
Closed

Conversation

mrueg
Copy link
Contributor

@mrueg mrueg commented Nov 20, 2023

Adds a Dependabot configuration that checks for golang and github actions dependency updates

Signed-off-by: Manuel Rüger <manuel@rueg.eu>
@fujita
Copy link
Member

fujita commented Nov 28, 2023

This notifies the version update of all the packages?

@mrueg
Copy link
Contributor Author

mrueg commented Nov 28, 2023

It will create a PR if there's a new version of a golang dependency released or there's a new version of a used github action published.

@fujita
Copy link
Member

fujita commented Nov 28, 2023

I would like to update a package only when it has a security issue or such.

@mrueg
Copy link
Contributor Author

mrueg commented Nov 30, 2023

Ah understood. Then this is likely not what you want for this repository.

Closing then :)

@mrueg mrueg closed this Nov 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants