-
Notifications
You must be signed in to change notification settings - Fork 60.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Configure Dependabot version updates #251
Conversation
This configures [Dependabot version updates](https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/about-github-dependabot-version-updates) for both Bundler and npm dependencies in this repo. When merged, Dependabot will check for npm packages and ruby gems that can be updated, and open up pull requests for these.
Thanks for the PR @jurre! I'll send it over to @github/docs-engineering to review 🌟 |
Hi @jurre 👋🏼 Thanks for taking the time to open this pull request. Earlier this year we used Dependabot on this project for a month or two, but found the updates to be more noisy than useful, and we ended up removing it from the project. Now we only get Dependabot updates for dependencies that have security vulnerabilities. I'm going to close this pull request, as I don't think it's what the project needs right now. If you want to discuss this further, please open an issue. I'd be happy to brainstorm about how we can keep our deps up to date without creating too much churn. |
Why:
To keep our dependencies up to date.
What's being changed:
This configures Dependabot version updates
for both Bundler and npm dependencies in this repo.
When merged, Dependabot will check for npm packages and ruby gems that can
be updated, and open up pull requests for these.
Check off the following: