Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dependabot: Ignore patch updates #262

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

edwarddavidbaker
Copy link
Contributor

This commit ignores Python and GitHub Action patch updates. Major and minor versions will still trigger an update. Security updates are not changed. Package updates for every patch major.minor.patch is noisy. Focusing on major and minor will provide sufficient updates for packages used in this project.

This commit ignores Python and GitHub Action patch updates. Major and
minor versions will still trigger an update. Security updates are not
changed. Package updates for every patch (major.minor.patch) is noisy.
Focusing on major and minor will provide sufficient updates for packages
used in this project. [1]

[1] https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#specifying-dependencies-and-versions-to-ignore
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant