FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Group together dependency updates by henrymercer · Pull Request #1773 · github/codeql-action · GitHub

Group together dependency updates - #1773

Merged
henrymercer merged 1 commit into
mainfrom
henrymercer/dependabot-grouped-updates
Jul 13, 2023
Merged

henrymercer merged 1 commit into
mainfrom
henrymercer/dependabot-grouped-updates

Conversation

henrymercer commented Jul 12, 2023
edited
Loading

Copy link
Copy Markdown
Contributor

Opt into the Dependabot grouped updates beta to allow us to update dependencies more frequently without too much friction.

Limitation: Ideally we'd be able to separate out update PRs for major version updates, since these may be incompatible / require some work to merge, but this isn't possible yet.

Merge / deployment checklist

  • Confirm this change is backwards compatible with existing workflows.
  • Confirm the readme has been updated if necessary.
  • Confirm the changelog has been updated if necessary.

henrymercer requested a review from a team as a code owner July 12, 2023 17:11
henrymercer force-pushed the henrymercer/dependabot-grouped-updates branch from 51d83ca to f561487 Compare July 12, 2023 17:12
henrymercer force-pushed the henrymercer/dependabot-grouped-updates branch from f561487 to 36928bf Compare July 12, 2023 17:15
henrymercer changed the title Group together minor and patch npm dependency updates Group together npm dependency updates Jul 12, 2023
henrymercer changed the title Group together npm dependency updates Group together dependency updates Jul 12, 2023

angelapwen left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Very nice 👍 I wonder if there will be a bit of friction if a single dependency update bump causes CI failures for whatever reason. If that's the case we can always go in and manually remove that specific bump from the Dependabot branch though.

henrymercer merged commit 0722425 into main Jul 13, 2023
henrymercer deleted the henrymercer/dependabot-grouped-updates branch July 13, 2023 09:01
github-actions Bot mentioned this pull request Jul 14, 2023
6 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants


Back | FazBrowse Home | New Git URL