-
Notifications
You must be signed in to change notification settings - Fork 48
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[W-7158536] Add dependabot config #40
Conversation
@@ -0,0 +1,10 @@ | |||
version: 1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
does this need to be in our packages specifically?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No. It can be at the root and watch all nested packages.
Edit: It actually has to be at the root of the repository for the config to be picked up.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
oh this is the language server, duh
- package_manager: "javascript" | ||
directory: "/" | ||
update_schedule: "daily" | ||
allowed_updates: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Does this mean it will only send updates for our own stuff. Wouldn't it be better to do updates for anything, i.e. the vscode language server also?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am open to having dependabot watch all dependencies. I believe @nrkruk had some reservations about this.
@bpbuch is there some way to send group PRs for everything under |
Not that I am aware of. There is an open issue from others requesting this as a feature. |
What does this PR do?
Add Dependabot config
What issues does this PR fix or reference?
@W-7158536@