Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add dependabot #11

Closed
nsiwnf opened this issue Jul 25, 2023 · 5 comments · Fixed by #510
Closed

Add dependabot #11

nsiwnf opened this issue Jul 25, 2023 · 5 comments · Fixed by #510
Assignees
@nsiwnf

Comments

@nsiwnf
Copy link
Collaborator

nsiwnf commented Jul 25, 2023

Add a dependabot github action workflow to ensure we are up to date with the latest versions.
@nsiwnf nsiwnf added the good first issue Good for newcomers label Jul 25, 2023
@Thrillberg Thrillberg self-assigned this Aug 5, 2023
@Thrillberg
Copy link
Collaborator

@nsiwnf I've started poking around at this and I'm a little confused. My understanding is that dependabot already will open PRs when vulnerabilities are detected or dependencies are out of date. The change in the link you provided would give us extra metadata about the open PR, is that right? I'm not sure that we need it or what benefit the metadata gets us.

@nsiwnf
Copy link
Collaborator Author

nsiwnf commented Aug 5, 2023

We have to add the dependabot yml to configure how often it runs and what packages to check (rails, npm etc) - as of right now, it will not open any PRs

@Thrillberg
Copy link
Collaborator

Oh funny, maybe dependabot changed its behavior? I have another open source repo that it opens PRs on and there is no configuration to enable it. GitHub just does it. I'll look into it more...

@kasugaijin kasugaijin added on hold Further investigation/decision-making is required and removed good first issue Good for newcomers labels Oct 23, 2023
@github-actions GitHub Actions
Copy link

This issue is marked as stale due to no activity within 30 days. If no further activity is detected within 7 days, it will be unassigned.

@github-actions github-actions bot added the Stale label Nov 23, 2023
@github-actions github-actions bot removed the Stale label Nov 30, 2023
@github-actions GitHub Actions
Copy link

Automatically unassigned after 7 days of inactivity.

@nsiwnf nsiwnf self-assigned this Mar 9, 2024
@nsiwnf nsiwnf removed the on hold Further investigation/decision-making is required label Mar 9, 2024
@nsiwnf nsiwnf linked a pull request Mar 9, 2024 that will close this issue
Repo hygiene #510
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@nsiwnf nsiwnf

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Repo hygiene rubyforgood/homeward-tails
3 participants
@Thrillberg @nsiwnf @kasugaijin