You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There are currently several different dependencies in prometheus-msteams: github actions, go libraries and docker.
Keeping all of them up to date is tedious.
For the github actions it would be worth considering using the commit hash instead of a version number. This ensures that all builds remain reproducible. Go offers similar functionality by default via go.sum.
Renovate supports this for github-actions(doc). Not sure about dependabot.
The text was updated successfully, but these errors were encountered:
There are currently several different dependencies in prometheus-msteams: github actions, go libraries and docker.
Keeping all of them up to date is tedious.
Having a tool like dependabot or renovate simplifies this process.
For the github actions it would be worth considering using the commit hash instead of a version number. This ensures that all builds remain reproducible. Go offers similar functionality by default via go.sum.
Renovate supports this for github-actions(doc). Not sure about dependabot.
The text was updated successfully, but these errors were encountered: