Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependabot config to reduce noise #244

Merged
merged 1 commit into from
Apr 5, 2023
Merged

Update dependabot config to reduce noise #244

merged 1 commit into from
Apr 5, 2023

Conversation

Sephsekla
Copy link
Collaborator

What?

Make several updates to Dependabot config to reduce the frequency of notifications.

Why?

Resolve #149

How?

Make several updates to Dependabot config:

  • Dependabot PRs will now be created weekly, rather than daily.
  • Dependabot will only create updates for direct dependencies, and also any @wordpress dependencies, however this may update other dependencies transitively.
  • Security PRs will still be created as before.

This should hopefully make this more manageable without sacrificing security or maintenance.

Testing Instructions

Screenshots or screencast

@Sephsekla Sephsekla added the [Type] development tools Setting up and cofniguring tools to help with the development process. label Apr 5, 2023
@Sephsekla Sephsekla self-assigned this Apr 5, 2023
@Sephsekla Sephsekla requested review from erikyo and johnhooks April 5, 2023 16:10
johnhooks
johnhooks approved these changes Apr 5, 2023
View reviewed changes
Copy link
Collaborator

@johnhooks johnhooks left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks like it should reduce the quantity of bot PRs. Let's give it a try.

@erikyo erikyo mentioned this pull request Apr 5, 2023
Closed
@Sephsekla Sephsekla merged commit 57ba5cf into develop Apr 5, 2023
@Sephsekla Sephsekla deleted the 149-dependabot-config branch April 5, 2023 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@johnhooks johnhooks johnhooks approved these changes

@erikyo erikyo erikyo approved these changes

Assignees

@Sephsekla Sephsekla

Labels
[Type] development tools Setting up and cofniguring tools to help with the development process.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

set Dependabot only for security updates
3 participants
@Sephsekla @erikyo @johnhooks