Skip to content

Commit edc7932

Browse files
Group all GitHub Actions updates into a single larger pull (#79)
* Group all GitHub Actions updates into a single larger pull Half of the currently open pull requests are generated by this tool. It would be easier to review and merge if they were in a single PR. GitHub Actions are only used at CI test-time, while most other dependencies are also used at runtime. This means that if the CI tests pass, maintainers have more confidence that the proposed changes will not break runtime. GitHub Actions have very infrequent major version changes . `setup-python`, the most frequent, has only had five major upgrades in its lifetime. When GitHub Actions are upgraded, it often happens in batches. The `pattern: *` proposed in this PR will consolidate all GHA updates into a single pull request to further reduce chattiness. There is a tradeoff between supply chain security and chattiness. Given that we have a few GHAs that are updated rarely and usually in batches, and we are using `pattern: *` to ensure that ___there will only ever be a single GHA upgrade PR at a time___. * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
1 parent 7f759a4 commit edc7932

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

.github/dependabot.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,5 +2,9 @@ version: 2
22
updates:
33
- package-ecosystem: "github-actions"
44
directory: "/"
5+
groups:
6+
github-actions:
7+
patterns:
8+
- "*" # Group all Actions updates into a single larger pull request
59
schedule:
610
interval: "daily"

0 commit comments

Comments
 (0)