Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependabot is killing my notifications #568

Closed
g105b opened this issue Sep 5, 2022 · 1 comment · Fixed by #569
Closed

Dependabot is killing my notifications #568

g105b opened this issue Sep 5, 2022 · 1 comment · Fixed by #569
Projects

Comments

@g105b
Copy link
Member

g105b commented Sep 5, 2022

I've been using dependabot before it was made as a feature of Github, and before Github was owned by Microsoft. I don't think there was even any way to configure it back then...

Anyway, I'm sure there's a way to tame the bot in the .github/dependabot.yml file... needs doing because I can't use my Github notifications without it.

It might be as simple as changing the repositories to weekly, but I would rather specify certain dependencies to only update minor versions, rather than patch versions. I wonder if I tag @dependabot-bot whether they would be able to point out a solution? Either way I'm reading the docs to learn how to do this.

@g105b
Copy link
Member Author

g105b commented Sep 5, 2022

The docs are amazing as usual within Github's ecosystem.

The solution is to use ignore: update-types: ["version-update:semver-patch"]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Overview
Done September 2022
Development

Successfully merging a pull request may close this issue.

1 participant