Skip to content

Do not ignore patch/minor updates in Dependabot configuration#3132

Merged
koesie10 merged 1 commit intomainfrom
koesie10/dependabot-all
Dec 13, 2023
Merged

Do not ignore patch/minor updates in Dependabot configuration#3132
koesie10 merged 1 commit intomainfrom
koesie10/dependabot-all

Conversation

@koesie10
Copy link
Copy Markdown
Member

Patch and minor upgrades of dependencies can also be useful and contain performance improvements etc. We now need to manually run these using npm upgrade, which either results in a risky upgrade by upgrading all dependencies, or a lot of time spent on upgrading single dependencies. This will create more Dependabot PRs, but these should be relatively safe and easy to merge.

Checklist

  • CHANGELOG.md has been updated to incorporate all user visible changes made by this pull request.
  • Issues have been created for any UI or other user-facing changes made by this pull request.
  • [Maintainers only] If this pull request makes user-facing changes that require documentation changes, open a corresponding docs pull request in the github/codeql repo and add the ready-for-doc-review label there.

@koesie10 koesie10 requested a review from a team as a code owner December 13, 2023 14:04
Copy link
Copy Markdown
Contributor

@shati-patel shati-patel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! Makes sense 👍🏽

@koesie10 koesie10 merged commit 61c9503 into main Dec 13, 2023
@koesie10 koesie10 deleted the koesie10/dependabot-all branch December 13, 2023 14:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants