Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent Dependabot version updates from running on HHS:main #932

Closed
5 tasks done
jtwillis92 opened this issue May 19, 2021 · 0 comments · Fixed by #944
Closed
5 tasks done

Prevent Dependabot version updates from running on HHS:main #932

jtwillis92 opened this issue May 19, 2021 · 0 comments · Fixed by #944
Labels

Comments

@jtwillis92
Copy link

jtwillis92 commented May 19, 2021

Description:
Recently a dependabot.yml file was added to this repo to configure Dependabot to automatically issue pull requests nightly for any dependencies listed in package.json or Pipfile. However, to keep with our current git flow we don't want these pull requests to be issued against the main HHS repository. Automatic security updates have already been disabled on the HHS repo but those work distinctly from version updates where the configuration file is the source of truth and as such those PRs still get opened.

To resolve this we can specify a target_branch in the configuration file so these version updates only check and issue PRs against the raft-tdp-main branch. Since this branch doesn't exist in HHS the PRs will not get opened.

Acceptance Criteria:
Create a list of functional outcomes that must be achieved to complete this issue

  • Dependabot version update PRs do not get opened against HHS:main
  • Testing Checklist has been run and all tests pass
  • README is updated, if necessary

Tasks:
Create a list of granular, specific work items that must be completed to deliver the desired outcomes of this issue

  • Add a target_branch configuration to the dependabot.yml configuration file
  • Run Testing Checklist and confirm all tests pass

Notes:
Add additional useful information, such as related issues and functionality that isn't covered by this specific issue, and other considerations that will be helpful for anyone reading this

Supporting Documentation:
Please include any relevant log snippets/files/screen shots

Open Questions:
Please include any questions or decisions that must be made before beginning work or to confidently call this issue complete

@jtwillis92 jtwillis92 added the dev label May 19, 2021
jtwillis92 added a commit that referenced this issue May 24, 2021
Issue 932: Prevent Dependabot version updates from running on HHS:main
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant