Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependabot configuration #3447

Merged
merged 2 commits into from Apr 22, 2024
Merged

Update dependabot configuration #3447

merged 2 commits into from Apr 22, 2024

Conversation

wadoon
Copy link
Member

@wadoon wadoon commented Mar 22, 2024

This PR reconfigures dependenabot in the following manner:

  1. Group incoming updates into a single Pull Request

Sometimes there are 3 or 4 PRs created by dependabot. Now they are bundled into one combined PR.

  1. Slow down the checking of new versions from weekly to monthly

We are not very security-critical. This helps to prevent downloading new libs every week.

@wadoon wadoon added the dependencies Pull requests that update a dependency file label Mar 22, 2024
@wadoon wadoon requested a review from mattulbrich March 22, 2024 09:43
@wadoon wadoon self-assigned this Mar 22, 2024
.github/dependabot.yml Outdated Show resolved Hide resolved
@mattulbrich mattulbrich added the Reviewer Feedback Feedback from the review needs to be addressed label Mar 26, 2024
- Group incoming updates into a single Pull Request
- Slow down the checking of new versions from weekly to monthly
@wadoon wadoon enabled auto-merge March 26, 2024 17:22
@wadoon wadoon removed the Reviewer Feedback Feedback from the review needs to be addressed label Mar 28, 2024
@wadoon wadoon requested a review from mattulbrich April 4, 2024 01:30
@KeYProject KeYProject deleted a comment from codecov bot Apr 20, 2024
@wadoon wadoon added this pull request to the merge queue Apr 22, 2024
Merged via the queue into main with commit 13c03c2 Apr 22, 2024
14 checks passed
@wadoon wadoon deleted the weigl/dependabot branch April 22, 2024 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants