-
Notifications
You must be signed in to change notification settings - Fork 151
Fix/dependabot improvements #1562
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
afternoon2
commented
Jul 31, 2025
- Add auto-merge workflow for dependabot to actually update and merge PRs if the CI passes
- Add grouping PRs to reduce the amount of PRs submitted by dependabot
.github/dependabot.yml
Outdated
| groups: | ||
| all-dependencies: | ||
| patterns: | ||
| - "*" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
does that group multiple dep updates in a single PR?
I don't mind a lot of PRs, and I think keeping the granularity is better
| with: | ||
| github-token: "${{ secrets.GITHUB_TOKEN }}" | ||
|
|
||
| - name: Update PR branch with main |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
hm is that needed? we do squash-commits anyway
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You mean the update with main branch, or Enable auto-merge for all dependency updates?
Because I noticed that in existing PRs dependabot was often stuck when having a branch behind the master.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, why update the main branch. How and why was it stuck?
|
Btw., we are adding |