Update dependabot #850
Merged
Update dependabot #850
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
* Increase python open PRs from default 5 to 20. * Add dependabot updates for github actions. * Update actions and pin versions to hash for supply chain security safety. * Add a `runtime.txt` file to trick dependabot into thinking this is the required version for updates. Signed-off-by: SuperQ <superq@gmail.com>
chriskuehl
approved these changes
Apr 10, 2024
Comment on lines
+1
to
+2
| python-3.8 | ||
| # Specifies the python version that dependabot should use. |
There was a problem hiding this comment.
Just FYI, I'm planning to try out migrating this repo to Poetry sometime soon, which should obviate the need for this (since Poetry solves for all Python versions and can deal with different constraints for each). OK to merge this now but might become unnecessary later.
There was a problem hiding this comment.
Yea, I was just looking to get in workarounds to avoid dependabot trying to update things that would fail CI.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
💸 TL;DR
runtime.txtfile to trick dependabot into thinking this is therequired version for updates.
✅ Checks