Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: per-package update schedule #1865

Closed
j3parker opened this issue May 18, 2020 · 2 comments
Closed

Feature request: per-package update schedule #1865

j3parker opened this issue May 18, 2020 · 2 comments
Labels
F: noise related to Dependabot being noisy, or initiatives to make Dependabot quieter T: feature-request Requests for new features

Comments

@j3parker
Copy link

j3parker commented May 18, 2020

First - thank you for dependabot! It's been fantastic! I know you're hard at work integrating into GitHub... I'm excited to see what that means!

Something we've noticed is that it isn't possible to have different update frequencies for different packages in the same package manager.

Motivation

The C# AWSDK packages update themselves multiple times per day, and are quite granular. It's not uncommon for us to have 10+ of these packages used in a repo. The volume of pull requests that this creates is really annoying.

We'd be happy receiving automatic updates for these packages less frequently. We'd also like to batch them (a feature that's been requested here, here, and here.) If that feature existed I think we'd still appreciate finer-grained control over update schedules, though.

An attempted workaround

Consider this config which attempts to do that with multiple update_configs:

version: 1
update_configs:
  - package_manager: "dotnet:nuget"
    allowed_updates:
      - match:
          dependency_name: "AWSSDK.*"
    directory: "/"
    update_schedule: weekly
  - package_manager: "dotnet:nuget"
    ignored_updates:
      - match:
          dependency_name: "AWSSDK.*"
    directory: "/"
    update_schedule: live

The validator gives this error:

The property '#/update_configs/1' is a duplicate. Update configs must have a unique combination of 'package_manager', 'directory', and 'target_branch'

This makes some sense; although these update_configs appear to be mutually exclusive in general that wouldn't be true, and that's weird.

@khitrenovich
Copy link

We would be glad to see that implemented too - in npm ecosystem we have jest, babel and eslint plugins that are updated bit too frequently to keep amount of PRs manageable.

marcelltoth added a commit to stoplightio/elements-starter-angular that referenced this issue Oct 9, 2020
I'm not sure this works.

See the problem here:
dependabot/dependabot-core#1865

Maybe using Github's dependabot and the old one simultaneously does the trick. Let's see.
marcelltoth pushed a commit to stoplightio/elements-starter-angular that referenced this issue Oct 16, 2020
I'm not sure this works.

See the problem here:
dependabot/dependabot-core#1865

Maybe using Github's dependabot and the old one simultaneously does the trick. Let's see.
@feelepxyz feelepxyz added F: noise related to Dependabot being noisy, or initiatives to make Dependabot quieter T: feature-request Requests for new features labels Apr 9, 2021
@feelepxyz
Copy link
Contributor

Closing as a duplicate of #2165

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
F: noise related to Dependabot being noisy, or initiatives to make Dependabot quieter T: feature-request Requests for new features
Projects
None yet
Development

No branches or pull requests

3 participants