Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependabot config #695

Merged
merged 3 commits into from
Mar 18, 2024
Merged

Update dependabot config #695

merged 3 commits into from
Mar 18, 2024

Conversation

julianbrost
Copy link
Contributor

Multiple changes to the dependabot config:

  1. Remove reviewers: For me personally, I receive notifications for the creation of the PRs anyways, so the extra review request provides no benefit to me. I also asked the others and they don't see a need either. Therefore, there's really no reason to maintain this list here.
  2. Run daily: Running only weekly just adds latency until PRs are created with no apparent benefit. Multiple releases within a week for the same module happen rarely, so it doesn't reduce the number of PRs.
  3. Enable go mod updates for /tests: The tests have their own tests/go.mod file for which we should receive dependency update PRs as well.

For me personally, I receive notifications for the creation of the PRs anyways,
so the extra review request provides no benefit to me. I also asked the others
and they don't see a need either. Therefore, there's really no reason to
maintain this list here.
Running only weekly just adds latency until PRs are created with no apparent
benefit. Multiple releases within a week for the same module happen rarely, so
it doesn't reduce the number of PRs.
The tests have their own tests/go.mod file for which we should receive
dependency update PRs as well.
@julianbrost julianbrost added the dependencies Pull requests that update a dependency file label Mar 14, 2024
@cla-bot cla-bot bot added the cla/signed label Mar 14, 2024
@julianbrost julianbrost merged commit 6c7e94e into main Mar 18, 2024
31 checks passed
@julianbrost julianbrost deleted the dependabot-config branch March 18, 2024 09:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla/signed dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants