Chore: [AEA-0000] - Dependabot cooldown#114
Conversation
|
This PR is linked to a ticket in an NHS Digital JIRA Project. Here's a handy link to the ticket: AEA-0000 |
There was a problem hiding this comment.
Pull request overview
Adds automation to reduce update noise by introducing a Dependabot PR cooldown and a scheduled workflow to keep the repo’s devcontainer version up to date.
Changes:
- Add a scheduled/manual GitHub Actions workflow that calls the shared
update-dev-container-versionreusable workflow. - Configure Dependabot update entries with a 3-day cooldown for both GitHub Actions and pip ecosystems.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
.github/workflows/update_dev_container_version.yml |
New scheduled workflow to run the shared devcontainer-version update automation. |
.github/dependabot.yaml |
Adds cooldown.default-days: 3 to slow down Dependabot update PR creation cadence. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
|
||
| jobs: | ||
| update_devcontainer_version: | ||
| uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@23342d86a245c076937abd6aecdd0ce06446b1e6 |
There was a problem hiding this comment.
This workflow pins NHSDigital/eps-common-workflows to a different commit than the rest of this repo’s workflows (which consistently use @5ac2707dd9cd60ad127275179495b9c890d74711). Unless there’s a specific compatibility reason, align the ref to the same commit used elsewhere to avoid unexpected behavior differences and simplify future updates.
| uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@23342d86a245c076937abd6aecdd0ce06446b1e6 | |
| uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@5ac2707dd9cd60ad127275179495b9c890d74711 |
| name: Update Devcontainer Version | ||
|
|
There was a problem hiding this comment.
Repository workflows use the .yaml extension (e.g., ci.yaml, pull_request.yaml, release.yaml), but this new workflow file is added as .yml. Consider renaming it to .yaml for consistency and easier discovery/maintenance.
|
Summary
Details