Skip to content
This repository was archived by the owner on Oct 15, 2024. It is now read-only.

Implement workarounds for Dependabot to update dependencies #1552

Merged
msfjarvis merged 3 commits into from
Nov 30, 2021
Merged

Implement workarounds for Dependabot to update dependencies #1552

msfjarvis merged 3 commits into from
Nov 30, 2021

Conversation

@msfjarvis
Copy link
Member

@msfjarvis msfjarvis commented Nov 30, 2021

📢 Type of change

  • Bugfix
  • New feature
  • Enhancement
  • Refactoring
  • Dependency updates

📜 Description

Leverages https://github.com/RBusarow/gradle-dependency-sync to implement a two-way sync with automation.

This enables the following workflow

  • Dependabot scans dependency-sync/build.gradle.kts to update dependencies
  • It creates a PR for the version bump
  • dependency_sync workflow runs to sync the update dependency with gradle/libs.version.toml
  • The PR is updated and kicks off CI checks

💡 Motivation and Context

Fixes #1544

💚 How did you test it?

https://github.com/msfjarvis/Android-Password-Store/pull/28

📝 Checklist

  • I formatted the code ./gradlew spotlessApply
  • I reviewed submitted code
  • I added a CHANGELOG entry if applicable

🔮 Next steps

Figure out if there is a way to make Dependabot update to alpha releases

@msfjarvis msfjarvis requested a review from a team as a code owner November 30, 2021 12:15
@msfjarvis msfjarvis added A-CI-CD Area: Continuous Integration/Deployment A-dependencies Area: Dependencies C-technical-debt Category: This makes the code harder to read and modify, but has no impact on end users P-low Priority: low labels Nov 30, 2021
@msfjarvis msfjarvis added this to the v2.0.0 milestone Nov 30, 2021
@msfjarvis msfjarvis enabled auto-merge (squash) November 30, 2021 12:15
@msfjarvis msfjarvis merged commit fc21141 into android-password-store:develop Nov 30, 2021
@msfjarvis msfjarvis deleted the hs/2021-11-30/dependency-sync branch December 3, 2021 08:27
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

A-CI-CD Area: Continuous Integration/Deployment A-dependencies Area: Dependencies C-technical-debt Category: This makes the code harder to read and modify, but has no impact on end users P-low Priority: low

Projects

None yet

Milestone

v2.0.0

Development

Successfully merging this pull request may close these issues.

Enable support for dependabot to update dependencies

1 participant

@msfjarvis