Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use dependabot #18

Merged
merged 4 commits into from
Sep 27, 2023
Merged

Use dependabot #18

merged 4 commits into from
Sep 27, 2023

Conversation

2bndy5
Copy link
Member

@2bndy5 2bndy5 commented Sep 27, 2023

Alerts should show for updates to git submodules and github actions' version updates.

Note
Updates to submodules will show for any changes to the submodules default branch (see dependabot/dependabot-core#1639). This is ok for us, but the pybind11 submodule updates will have to be ignored unless it is for a tagged commit. For this reason, I might revoke the submodule alerts in the future (unless dependabot is updated accordingly).

Alerts for pip dependencies could also be added, but we're currently using whatever latest release is available (setuptools is pinned to any version later than v61).

Alerts should show for updates to git submodules and github actions' version updates.

> **Note**
> Updates to submodules will show for any changes to the submodules default branch (see dependabot/dependabot-core/#1639). This is ok for us, but the pybind11 submodule updates will have to be ignored unless it is for a tagged commit. For this reason, I might revoke the submodule alerts in the future (unless dependabot is updated accordingly).
github's ubuntu-latest runners no longer include it.
see actions/runner-images#8263
@2bndy5 2bndy5 merged commit ab7148f into main Sep 27, 2023
3 checks passed
@2bndy5
Copy link
Member Author

2bndy5 commented Sep 27, 2023

It works! Github's dependabot immediately offered several updates... How cool is that? 🤓

@2bndy5 2bndy5 deleted the use-dependabot branch September 27, 2023 21:55
@TMRh20
Copy link
Member

TMRh20 commented Sep 28, 2023

Good bot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants