Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Keep GitHub Actions up to date with Dependabot #1226

Merged
merged 2 commits into from Jan 18, 2024

Conversation

Copy link
Contributor

@carltongibson carltongibson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I wonder if a weekly update isn't enough?

I also saw something about grouping updates... 🤔 Do you know about that? (Sometimes I feel dependabot can be a bit noisy...)

@cclauss
Copy link
Contributor Author

cclauss commented Jan 17, 2024

Switched to weekly.

This repo only has just two Actions so I doubt that the volume of updates will be overwhelming.

- uses: actions/checkout@v3
- uses: actions/setup-python@v4

Copy link
Contributor

@carltongibson carltongibson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, this looks good to me. Thanks.

(It was the pip packages that could do with grouping I think. Separate PR)

Thanks.

@carltongibson carltongibson merged commit e9b9048 into django-compressor:develop Jan 18, 2024
18 checks passed
@cclauss cclauss deleted the patch-1 branch January 18, 2024 08:12
diox pushed a commit that referenced this pull request Jan 18, 2024
* Schedule dependabot updates from PyPI to be weekly, not daily

Batch up these updates to make them less chatty and more manageable as discussed at #1226 (review)

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#scheduleinterval

* Group all PyPI updates into a single larger pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants