Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Dependabot version updates #251

Closed
wants to merge 2 commits into from
Closed

Conversation

jurre
Copy link
Member

@jurre jurre commented Oct 8, 2020

Why:

To keep our dependencies up to date.

What's being changed:

This configures Dependabot version updates
for both Bundler and npm dependencies in this repo.

When merged, Dependabot will check for npm packages and ruby gems that can
be updated, and open up pull requests for these.

Check off the following:

This configures [Dependabot version updates](https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/about-github-dependabot-version-updates)
for both Bundler and npm dependencies in this repo.

When merged, Dependabot will check for npm packages and ruby gems that can
be updated, and open up pull requests for these.
@jurre jurre requested a review from a team as a code owner October 8, 2020 08:29
@zeke zeke added the engineering Will involve Docs Engineering label Oct 8, 2020
@janiceilene
Copy link
Contributor

Thanks for the PR @jurre! I'll send it over to @github/docs-engineering to review 🌟

@zeke
Copy link
Contributor

zeke commented Oct 8, 2020

Hi @jurre 👋🏼

Thanks for taking the time to open this pull request. Earlier this year we used Dependabot on this project for a month or two, but found the updates to be more noisy than useful, and we ended up removing it from the project. Now we only get Dependabot updates for dependencies that have security vulnerabilities.

I'm going to close this pull request, as I don't think it's what the project needs right now. If you want to discuss this further, please open an issue. I'd be happy to brainstorm about how we can keep our deps up to date without creating too much churn.

@zeke zeke closed this Oct 8, 2020
@zeke zeke deleted the dependabot-version-updates branch October 8, 2020 21:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
engineering Will involve Docs Engineering
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants