Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: add dependabot config #1857

Closed
wants to merge 2 commits into from
Closed

ci: add dependabot config #1857

wants to merge 2 commits into from

Conversation

afuetterer
Copy link
Contributor

Changes proposed in this pull request:

  • add dependabot config

Context:

There are some outdated GitHub Actions in your workflows. Instead of updating those manually, you could go for a monthly dependency update from the bot.

What do you think?

@afuetterer

This comment was marked as resolved.

@coveralls
Copy link

Coverage Status

coverage: 94.214%. remained the same
when pulling 1a1cedd on afuetterer:dependabot
into 3e64fe4 on spec-first:main.

@RobbeSneyders
Copy link
Member

Thanks @afuetterer

The tests are failing due to an updated dependency. I synced with main to resolve this.

I still need some convincing that this PR is an improvement though. Auto-updates might still require manual updates to the pipeline if the interface changes, while we have never had any issues with outdated Github actions in the past. So I'm seeing potential additional overhead so solve a problem we've never had.

@afuetterer
Copy link
Contributor Author

Alright, fair enough. So I am closing this?

@afuetterer afuetterer closed this Feb 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants