DEVOPS-1112: Update dependabot configuration - #216
Open
RomFloreani wants to merge 2 commits into
Open
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
Updates the repository’s Dependabot configuration to expand automated dependency update coverage and adjust how update PRs are created.
Changes:
- Removes the
target-branchsetting for the existinggithub-actionsupdate configuration (Dependabot will target the repo default branch). - Adds a new
pre-commitecosystem entry to enable weekly updates for pre-commit hooks, grouped into a single update PR.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
8
to
11
| - package-ecosystem: "github-actions" | ||
| directory: "/" | ||
| target-branch: "develop" | ||
| schedule: | ||
| interval: "weekly" |
Comment on lines
+28
to
+29
| #ignore: | ||
| # - dependency-name: "https://github.com/pre-commit/#mirrors-mypy" |
github-actions
Bot
changed the title
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.
Suppressed comments (3)
.github/dependabot.yml:11
- Removing
target-branch: developchanges Dependabot behavior to target the repository default branch for GitHub Actions updates. If your workflow expects dependency PRs to land ondevelop(as before), re-addtarget-branchto avoid PRs going to the wrong branch.
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
.pre-commit-config.yaml:11
- This PR adds Dependabot support for pre-commit autoupdates, but pre-commit.ci autoupdates remain enabled (just less frequent). If the goal is to have Dependabot be the single source of pre-commit version bumps, keeping pre-commit.ci autoupdates can lead to duplicate/competing update PRs.
autoupdate_schedule: quarterly
.github/dependabot.yml:25
- The new
pre-commitDependabot updates block does not specify atarget-branch. If your repo’s integration branch isdevelop(as implied by the existing pre-commit.ci config), consider settingtarget-branch: develophere as well so pre-commit update PRs follow the same branching strategy as other dependency updates.
- package-ecosystem: "pre-commit"
directory: "/"
schedule:
interval: "weekly"
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
DEVOPS-1112 - use dependabot for pre-commit autoupdate
Automated update of .github/dependabot.yml