Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch from dependabot-preview to dependabot #5918

Closed
shu-mutou opened this issue Mar 23, 2021 · 0 comments · Fixed by #5928
Closed

Switch from dependabot-preview to dependabot #5918

shu-mutou opened this issue Mar 23, 2021 · 0 comments · Fixed by #5928
Labels
kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt.

Comments

@shu-mutou
Copy link
Contributor

shu-mutou commented Mar 23, 2021

What should be cleaned up or changed

PRs from dependabot don't need CLA check.
kubernetes/org#945
kubernetes/test-infra#13445
https://github.com/kubernetes-client/javascript/pulls?q=is%3Apr+author%3Aapp%2Fdependabot

We seems to be able to output config from dependabot-preview and set it as .github/dependabot.yml.
https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/
https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#configuration-options-for-private-registries

If we can swith to dependabot, we can merge their PRs by /lgtm and /approve commands.

@shu-mutou shu-mutou added the kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. label Mar 23, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant