Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add dependabot.yml to keep dependencies up to date #1613

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

shenxianpeng
Copy link
Contributor

@shenxianpeng shenxianpeng commented Oct 13, 2024

Add dependabot.yml to update GitHub action and Python package dependencies to date automatically.
(maybe it also can help with pull requests like #1614 )


📚 Documentation preview 📚: https://python-packaging-user-guide--1613.org.readthedocs.build/en/1613/

@shenxianpeng shenxianpeng changed the title feat: add dependabot.yml to bump version Add dependabot.yml to keep dependencies up to date Oct 13, 2024
@webknjaz
Copy link
Member

This will probably not work for workflows embedded in the guides. Plus, it's best to verify those manually every time since there's no automation doing that.

@webknjaz
Copy link
Member

webknjaz commented Oct 13, 2024

I don't like the frequency setting in the config. Dependabot can be very noisy. Quarterly would be fine, I suppose, but daily is crazy.

@shenxianpeng
Copy link
Contributor Author

Indeed. If it works, that would be great, as it would let the maintainer know some areas that need attention and possible updates.

The longest scheduled interval for Dependabot is monthly, so I changed it to monthly.

@webknjaz
Copy link
Member

Monthly still feel like a lot. It might seem that it's not, but that's only when you get notifications from a single repository. The more repos, the more notifications. So for me personally, it'd just add to a lot of noise that's already present… Not sure if anybody else here would want this in.

@webknjaz
Copy link
Member

On that note, it'd be nice to make pre-commit.ci's PRs less frequent too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants