This repository was archived by the owner on Jul 26, 2026. It is now read-only.
Enable Dependabot version updates for Actions - #89
Merged
Byron merged 1 commit intoSep 11, 2023
Merged
Conversation
Copy link
Copy Markdown
Member
Sorry, something went wrong.
This enables Dependabot version updates for GitHub Actions only (not Python dependencies), using the exact same configuration as in GitPython.
Copy link
Copy Markdown
Member
|
Thank you, Depandabot sounds like it could be helpful. I may mention that gitdb and smmap are only useful for the pure-python ODB backend and I'd hope nobody is using it. Yet we have to maintain these packages. So if there would be a breaking change I'd love to do then it's to remove gitdb as dependency from GitPython. Doing so would mean faster installations and reduced complexity, a big win. |
Sorry, something went wrong.
EliahKagan
added a commit
to EliahKagan/smmap
that referenced
this pull request
Sep 17, 2023
This updates smmap's CI configuration in ways that are in line with recent updates to gitdb's. In most cases there is no difference in the changes, and the reason for the updates is more to avoid confusing differences than from the value of the changes themselves. In one case, there is a major difference (fetch-depth). - gitpython-developers/gitdb#89 (same) - gitpython-developers/gitdb#90 (same) It's just the project, not dependencies, but otherwise the same. - gitpython-developers/gitdb#92 (opposite) This is the major difference. We don't need more than the tip of the branch in these tests. Keeping the default fetch-depth of 1 by not setting it explicitly avoids giving the impression that the tests here are doing something they are not (and also serves as a speed optimization). - gitpython-developers/gitdb#93 (same)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This enables Dependabot version updates for GitHub Actions only (not Python dependencies), using the exact same configuration as in GitPython.
Since this repository is less active than the GitPython repository, I considered changing the dependabot.yml file to check for updates monthly rather than weekly. But I did not do so, because the GitHub Actions used in this repository's workflow are requested using major versions, and automatically use the latest minor (and, where applicable, patch) version in that major version automatically. As a result, Dependabot only needs to offer updates when a new major version comes out, which is a fairly infrequent event. So it is unlikely that this would ever generate an excessive number of automated pull requests.
Because actions versions were recently updated as part of #88 (in 32d12aa), if this pull request is merged then it should not be expected to cause Dependabot to generate any pull requests in the immediate future.