Skip to content

.github/workflows: Remove unused dependency-updates.yml#179

Merged
skoeva merged 1 commit into
Azure:mainfrom
illume:dep-updates
Jan 27, 2026
Merged

.github/workflows: Remove unused dependency-updates.yml#179
skoeva merged 1 commit into
Azure:mainfrom
illume:dep-updates

Conversation

@illume
Copy link
Copy Markdown
Collaborator

@illume illume commented Jan 26, 2026

  • This doesn't seem to be working. There's no PRs made by it.
  • We already have dependabot and a security scanner for deps.
  • It uses a third party action for creating PRs.
  • It generates work to keep deps updated for it.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request removes an unused GitHub Actions workflow file (dependency-updates.yml) that was intended to automatically update npm dependencies for the AKS desktop plugin. The removal is justified as the workflow was not functioning as intended (no PRs were being created), and the repository already has alternative dependency management through Dependabot and security scanning via CodeQL and Scorecard.

Changes:

  • Removed the dependency-updates.yml workflow that used a third-party action (peter-evans/create-pull-request) to create automated dependency update PRs
  • Eliminates maintenance overhead of keeping the unused workflow up to date

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

skoeva
skoeva previously approved these changes Jan 26, 2026
@illume illume added bug Something isn't working workflow labels Jan 26, 2026
- This doesn't seem to be working. There's no PRs made.
- We already have dependabot and a security scanner for deps.
- It uses a third party action for creating PRs.
- It generates work to keep deps updated.
@illume
Copy link
Copy Markdown
Collaborator Author

illume commented Jan 27, 2026

An update to dependency-updates.yml was merged, removed it again.

Copy link
Copy Markdown
Collaborator

@sniok sniok left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yeah we already have dependabot and this doesn't seem to work

@skoeva skoeva merged commit 88a71a8 into Azure:main Jan 27, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working workflow

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants