Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add dependabot for GH actions #5250

Merged
merged 1 commit into from
Oct 19, 2021

Conversation

zhiqwang
Copy link
Contributor

@zhiqwang zhiqwang commented Oct 19, 2021

Hi @glenn-jocher , Seems that the Dependabot can update the Actions automatically.

🛠️ PR Summary

Made with ❤️ by Ultralytics Actions

🌟 Summary

Enhanced dependency management for GitHub Actions in the YOLOv5 repository.

📊 Key Changes

  • 🔃 Added a new update rule for the package-ecosystem of GitHub Actions.
  • ⏰ The schedule for checking GitHub Actions dependencies is set to weekly.
  • 🕓 Selected time for the update check is at 04:00.
  • 🚦 The open-pull-requests-limit is set to 5.
  • 🔖 Dependencies label will be applied to relevant pull requests.
  • 👤 Glenn Jocher will be automatically added as a reviewer for these pull requests.

🎯 Purpose & Impact

  • 💡 Ensures that GitHub Actions dependencies are kept up to date regularly, which is crucial for the CI/CD pipeline's security and reliability.
  • 🛠️ Helps maintain an optimal number of dependency update PRs, avoiding an overwhelming number of updates at once.
  • 🙌 Users can expect a more stable and secure repository environment with consistent updates to the CI/CD process.

@glenn-jocher
Copy link
Member

@zhiqwang interesting! I read a bit about this at https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/keeping-your-actions-up-to-date-with-dependabot

Let's try it out.

@glenn-jocher glenn-jocher merged commit 8e87396 into ultralytics:master Oct 19, 2021
@glenn-jocher
Copy link
Member

@zhiqwang PR is merged. Thank you for your contributions to YOLOv5 🚀 and Vision AI ⭐

@zhiqwang zhiqwang deleted the add-action-bot branch October 19, 2021 09:32
@glenn-jocher
Copy link
Member

@zhiqwang it worked! See #5251, #5252, #5253. This is a great PR, I did not even realize that these GH actions were on older dependencies.

BjarneKuehl pushed a commit to fhkiel-mlaip/yolov5 that referenced this pull request Aug 26, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants