Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure dependabot to handle rubygems dependencies #9445

Merged
merged 3 commits into from
Oct 31, 2023

Conversation

mattr-
Copy link
Member

@mattr- mattr- commented Sep 13, 2023

This is a 馃敤 code refactoring.

Summary

This updates our dependabot config for jekyll to allow it to bump ruby dependencies. It also attempting to configure update grouping so we can potentially avoid large numbers of PRs that bump individual gems in favor of larger group updates

@mattr- mattr- requested a review from a team October 22, 2023 17:26
Copy link
Member

@parkr parkr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe add jekyll/core as a reviewer?

We can try the groupings for a bit. If we find we often want to accept only part of the group then we can try individual updates. I suspect the first wave of updates will be the biggest.

@parkr
Copy link
Member

parkr commented Oct 22, 2023

Maybe add jekyll/core as a reviewer?

Specifically, add as a reviewer of dependabot PRs :)

@mattr-
Copy link
Member Author

mattr- commented Oct 22, 2023

Good idea. I think I'll also ungroup for now and then once we're in a place where we're not having to update the world all the time, we can attempt grouping again.

@mattr-
Copy link
Member Author

mattr- commented Oct 31, 2023

Added jekyll/core as a reviewer and did the ungrouping. CI is clean. Going to use @parkr's prior approval and merge it.

@jekyllbot: merge +dev

@jekyllbot jekyllbot merged commit cd4d84a into master Oct 31, 2023
11 of 12 checks passed
@jekyllbot jekyllbot deleted the rubygems-dependabot-config branch October 31, 2023 15:59
jekyllbot added a commit that referenced this pull request Oct 31, 2023
github-actions bot pushed a commit that referenced this pull request Oct 31, 2023
Matt Rogers: Configure dependabot to handle rubygems dependencies (#9445)

Merge pull request 9445
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants