Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUILD] Automatic dependency updates #258

Closed
kbudde opened this issue Aug 9, 2022 · 3 comments
Closed

[BUILD] Automatic dependency updates #258

kbudde opened this issue Aug 9, 2022 · 3 comments
Labels

Comments

@kbudde
Copy link
Collaborator

kbudde commented Aug 9, 2022

There are currently several different dependencies in prometheus-msteams: github actions, go libraries and docker.
Keeping all of them up to date is tedious.

Having a tool like dependabot or renovate simplifies this process.

For the github actions it would be worth considering using the commit hash instead of a version number. This ensures that all builds remain reproducible. Go offers similar functionality by default via go.sum.
Renovate supports this for github-actions(doc). Not sure about dependabot.

@ckotzbauer
Copy link
Collaborator

👍 for Renovate (better configurable than dependabot)

@kbudde
Copy link
Collaborator Author

kbudde commented Aug 22, 2022

OK, sound like renovate.
We should also run the tests in our pipelines to ensure that nothing is breaking. There are some outdated packages.

@zhan9san
Copy link
Collaborator

zhan9san commented Apr 4, 2023

It is fixed in #283

@zhan9san zhan9san closed this as completed Apr 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants