Add Dependabot config for .NET, NuGet, and GitHub Actions #21
Conversation
sunnynagavo
requested review from
SebastienDegodez and
lbroudoux
as code owners
|
@lbroudoux take a look to change anything inside the configuration ? |
sunnynagavo
force-pushed
the
dev/nagavo/dependabotcheckin
branch
from
fbbb940 to
36a9111
Compare
|
Hi, I have a similar setup with Microcks test containers, but the group configuration doesn’t seem to work: Any idea what might be wrong? |
Remove all-dependencies ? |
Introduced a Dependabot configuration to automate dependency updates for `.NET SDK`, `NuGet` packages, and `GitHub Actions`. - Added `version: 2` to specify the configuration version. - Configured `.NET SDK` updates to run weekly on Tuesdays with a limit of 1 open pull request. - Configured `NuGet` updates to run weekly on Sundays with a limit of 3 open pull requests, grouping dependencies by patterns (e.g., `microsoft-sbom`, `testcontainers`, etc.). - Configured `GitHub Actions` updates to run weekly on Sundays with a limit of 3 open pull requests. - Disabled the `rebase-strategy` for `NuGet` and `GitHub Actions`. Signed-off-by: Santhosh Reddy Vootukuri (SUNNY) <nagavo@microsoft.com>
Signed-off-by: Santhosh Reddy Vootukuri (SUNNY) <nagavo@microsoft.com>
sunnynagavo
force-pushed
the
dev/nagavo/dependabotcheckin
branch
from
929698f to
4165e8c
Compare
Oh I looked at your PR, Missing method exception? did you check the version mismatch ? let me get this locally on my machine and test it and lets discuss on your PR instead of here. Error: [xUnit.net 00:02:16.43] Microcks.Testcontainers.Tests.Async.Kafka.MicrocksAsyncKafkaFunctionalityTest.ShouldReturnsCorrectStatusContractWhenGoodMessageIsEmitted [FAIL] |
Can one of you merge @SebastienDegodez or @lbroudoux . May be in future I can request for write access after I make more contributions to this repository |
Yep sorry! It was late yesterday when I did the final review and couldn't merge at that time. Have a review on our GOVERNANCE doc to see how becoming a code owner at some point 😉 |
|
You are now a Microcks community contributor! 💖 Thanks and congrats 🚀 on merging your first pull request! We are delighted and very proud of you! 👏 📢 If you're using Microcks in your organization, please add your company name to this list. 🙏 It really helps the project to gain momentum and credibility. It's a small contribution back to the project with a big impact. If you need to know why and how to add yourself to the list, please read the blog post "Join the Microcks Adopters list and Empower the vibrant open source Community 🙌" Kudos and please keep going, we need you 🙌 🌟 ~~~~~~~~~ 🌟 📢 If you like Microcks, please ⭐ star ⭐ our repo to support it! 🙏 It really helps the project to gain momentum and credibility. It's a small contribution back to the project with a big impact. |
Sure thing, I will check it out. Thank you @lbroudoux |
TestContainers has a breaking change, it's very important update all package in the same time :(. Dependabot don't respect the configuration file ... |
* Add Dependabot config for .NET, NuGet, and GitHub Actions Introduced a Dependabot configuration to automate dependency updates for `.NET SDK`, `NuGet` packages, and `GitHub Actions`. - Added `version: 2` to specify the configuration version. - Configured `.NET SDK` updates to run weekly on Tuesdays with a limit of 1 open pull request. - Configured `NuGet` updates to run weekly on Sundays with a limit of 3 open pull requests, grouping dependencies by patterns (e.g., `microsoft-sbom`, `testcontainers`, etc.). - Configured `GitHub Actions` updates to run weekly on Sundays with a limit of 3 open pull requests. - Disabled the `rebase-strategy` for `NuGet` and `GitHub Actions`. Signed-off-by: Santhosh Reddy Vootukuri (SUNNY) <nagavo@microsoft.com> * Remove TestContainers Signed-off-by: Santhosh Reddy Vootukuri (SUNNY) <nagavo@microsoft.com> --------- Signed-off-by: Santhosh Reddy Vootukuri (SUNNY) <nagavo@microsoft.com> Co-authored-by: Santhosh Reddy Vootukuri (SUNNY) <nagavo@microsoft.com> Signed-off-by: Santhosh Reddy Vootukuri <65618035+sunnynagavo@users.noreply.github.com>
4 participants
Description
This pull request adds a new
.github/dependabot.ymlconfiguration file to automate dependency updates for the project. The configuration covers updates for .NET SDK, NuGet packages, and GitHub Actions, specifying schedules, limits, and grouping strategies to streamline dependency management.Dependency update automation:
.github/dependabot.ymlto enable automated updates for the .NET SDK, NuGet packages, and GitHub Actions, with weekly schedules and limits on open pull requests.Microsoft.Sbom.Targets,Microsoft.NET.Test.Sdk,Testcontainers,Microsoft.*,System.*,xunit.*, and a catch-all group) to organize and control update pull requests.Related issue(s)
Fixes #10