Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[INFRA] Reviewing Dependabot updates for "development dependencies" is time consuming - Find alternatives #2511

Closed
tbouffard opened this issue Feb 7, 2023 · 0 comments · Fixed by #2764
Labels
chore Build, CI/CD or repository tasks (issues/PR maintenance, environments, ...)
Milestone

Comments

@tbouffard
Copy link
Member

tbouffard commented Feb 7, 2023

Note: this is the same problem as described in process-analytics/process-analytics.dev#668

This project declares a lot of development dependencies. Reviewing PR created by Dependabot takes too much time and these PR create a lot of GitHub Actions jobs, see #2172. In particular, today, all e2e test are run when changing an unrelated development dependency.
We already limit the number of PR that Dependabot can create to avoid being overwhelmed (#1702) but this is still too much.

Proposal

Use tool like Renovate that are able to update several dependencies at the same time.
Notice that dependabot recently introduced a way to group dependency update: https://github.blog/changelog/2023-06-30-grouped-version-updates-for-dependabot-public-beta/
See also

The investigation can be shared with the one of process-analytics/process-analytics.dev#668

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore Build, CI/CD or repository tasks (issues/PR maintenance, environments, ...)
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant