Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade to GitHub-native Dependabot #211

Closed
wants to merge 2 commits into from

Conversation

dependabot-preview[bot]
Copy link
Contributor

Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then.

Dependabot has been fully integrated into GitHub, so you no longer have to install and manage a separate app. This pull request migrates your configuration from Dependabot.com to a config file, using the new syntax. When merged, we'll swap out dependabot-preview (me) for a new dependabot app, and you'll be all set!

With this change, you'll now use the Dependabot page in GitHub, rather than the Dependabot dashboard, to monitor your version updates, and you'll configure Dependabot through the new config file rather than a UI.

If you've got any questions or feedback for us, please let us know by creating an issue in the dependabot/dependabot-core repository.

Learn more about migrating to GitHub-native Dependabot

Please note that regular @dependabot commands do not work on this pull request.

@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Apr 29, 2021
@frenzymadness
Copy link
Member

Víme, proč je v konfiguraci ignorován sphinx, když je v requirements.txt už ted novější verze?

@encukou
Copy link
Member

encukou commented Apr 30, 2021 via email

@honzajavorek
Copy link
Member

V klikátku nic takového není. Na první dobrou jsem k tomu nic nenašel ani v https://github.com/dependabot/dependabot-core/issues/, tak nevím 🤔 Do klikátka by se měl mít možnost přihlásit kdokoliv se správnými právy na repozitář, stačí jít https://dependabot.com/ (a případně se přepnout vpravo nahoře na Pyvec).

Screenshot_2021-04-30 Dependabot

@honzajavorek
Copy link
Member

Navrhuju s tím počkat, dokud se nevyřeší dependabot/dependabot-core#1973 / dependabot/dependabot-core#2268 nebo dokud původní dependabot nevypnout, ale klidně navrhněte a uveďte v realitu jiný postup.

@dependabot-preview
Copy link
Contributor Author

As a reminder, Dependabot Preview will be shut down on August 3rd, 2021. You can merge this pull request to migrate to GitHub-native Dependabot. You can read the docs to learn more about what's changing, as well as find out how to get support if you need help migrating.

@honzajavorek
Copy link
Member

Už vím, proč tyhle PR mají ty ignore sekce: dependabot/dependabot-core#3589 (comment) Znamená to, že v minulosti někdo zavřel upgradovací PR a toto je zdokumentování stavu, že tuto konkrétní verzi Dependabot bude i do budoucna ignorovat.

@honzajavorek
Copy link
Member

Odebral jsem ignorování a mergnu jakmile projdou testy.

honzajavorek added a commit that referenced this pull request Oct 18, 2021
honzajavorek added a commit that referenced this pull request Oct 18, 2021
@honzajavorek honzajavorek deleted the dependabot/add-v2-config-file branch October 18, 2021 09:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants