Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependabot.yml #233

Merged
merged 1 commit into from
Jul 4, 2023
Merged

Update dependabot.yml #233

merged 1 commit into from
Jul 4, 2023

Conversation

lopopolo
Copy link
Member

@lopopolo lopopolo commented Jul 3, 2023

Bundle dep upgrades into a rollup PR using dependabot groups.

Works around this warning that appears on some Artichoke repositories:

Dependabot updates are paused

We noticed you haven't used Dependabot in a while, so we've paused new pull
requests for you. Merge a Dependabot pull request to resume automatically
creating Dependabot updates or disable security and version updates. See open
Dependabot pull requests

See:

Bundle dep upgrades into a rollup PR using dependabot groups.

Works around this warning that appears on some Artichoke repositories:

> **Dependabot updates are paused**
>
> We noticed you haven't used Dependabot in a while, so we've paused new pull
> requests for you. Merge a Dependabot pull request to resume automatically
> creating Dependabot updates or disable security and version updates. See open
> Dependabot pull requests


See:

- https://github.blog/changelog/2023-06-30-grouped-version-updates-for-dependabot-public-beta/
- https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
@lopopolo lopopolo added the A-deps Area: Source and library dependencies. label Jul 3, 2023
@lopopolo lopopolo merged commit 1a8806a into trunk Jul 4, 2023
@lopopolo lopopolo deleted the lopopolo-patch-1 branch July 4, 2023 00:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-deps Area: Source and library dependencies.
Development

Successfully merging this pull request may close these issues.

1 participant