Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Dependabot configuration file #2913

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

StoneMac65
Copy link

This pull request adds a configuration file for Dependabot, a tool that automatically scans the repository for outdated dependencies and security vulnerabilities. The configuration file (dependabot.yml) specifies settings such as the update frequency, package ecosystems to monitor, and dependencies to ignore.

Based on previous mentions and requests regarding security vulnerabilities on few third party dependencies it seems vital to add a mechanism to check and update needed changes.

https://github.com/anoma/namada/issues/2883

https://github.com/anoma/namada/issues/1023

Reason for Adding:

Automated Dependency Updates: Dependabot will help keep our project's dependencies up-to-date by automatically scanning for updates and opening pull requests to update them.
Enhanced Security: By regularly updating dependencies, we can mitigate security vulnerabilities and ensure that our project remains secure.
Reduced Maintenance Overhead: Dependabot automates the process of dependency management, reducing the manual effort required to monitor and update dependencies.

Copy link

codecov bot commented Mar 18, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 53.88%. Comparing base (cc3edde) to head (7a1228a).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2913      +/-   ##
==========================================
- Coverage   53.88%   53.88%   -0.01%     
==========================================
  Files         308      308              
  Lines      100154   100154              
==========================================
- Hits        53967    53966       -1     
- Misses      46187    46188       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant