-
Notifications
You must be signed in to change notification settings - Fork 37
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: add dependabot configuration files #2093
Conversation
✅ Deploy Preview for docs-spectrocloud ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@lennessyy Approved, no show stoppers but some suggestions 🚀
dependabot.yml
Outdated
- package-ecosystem: "npm" | ||
directory: "/" | ||
schedule: | ||
interval: "weekly" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Your call @lennessyy but this could get very noisy, especially in the JS ecosystem 😅
My recommendation is to leave it as monthly.
The other I wonder is if we should add target-branch
and commit-message
. That way we could ensure it starts with chore:
dependabot.yml
Outdated
@@ -0,0 +1,6 @@ | |||
version: 2 | |||
updates: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's add config block for GitHub Actions too 😄
.github/workflows/dependabot.yaml
Outdated
on: | ||
pull_request_target: | ||
types: [opened, synchronize, reopened, ready_for_review] | ||
branches-ignore: ["version-*"] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think dependabot only targets the default branch by default, you can also control in the config file.
🎉 This PR is included in version 4.2.1 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
🎉 This PR is included in version 4.2.1 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
Describe the Change
This PR adds custom configurations for dependabot:
Review Changes
💻 Add Preview URL
🎫 Jira Ticket