Skip to content

Conversation

@graycreate
Copy link
Member

Summary

  • Removed the custom dependency-update.yml workflow that duplicates Dependabot functionality
  • Keeping only Dependabot for dependency management as it provides superior features

Why this change?

Both dependency-update.yml and Dependabot were scheduled to run weekly on Mondays at 9 AM for dependency checks. However:

Dependabot advantages:

  • ✅ Automatically creates PRs when updates are found
  • ✅ Groups related dependencies to reduce PR noise
  • ✅ Handles multiple ecosystems (Gradle + GitHub Actions)
  • ✅ Native GitHub feature with no custom code to maintain

Custom workflow limitations:

  • ❌ Mainly generates reports, requires manual PR creation
  • ❌ Only checks Gradle dependencies
  • ❌ Requires custom scripts and maintenance
  • ❌ No dependency grouping

Test plan

  • Verified Dependabot configuration remains intact
  • Dependabot will continue to run weekly as configured
  • Monitor next week's Dependabot run to ensure it works as expected

🤖 Generated with Claude Code

Remove custom dependency-update.yml workflow as Dependabot already provides
the same functionality with better features including:
- Automated PR creation
- Dependency grouping
- Multi-ecosystem support (Gradle + GitHub Actions)
- Native GitHub integration

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
@graycreate graycreate requested a review from Copilot July 9, 2025 03:49
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Removes the custom dependency-update workflow in favor of using Dependabot’s built-in features for scheduled dependency management.

  • Eliminates redundant dependency-update.yml file
  • Consolidates dependency updates under Dependabot only

@graycreate graycreate merged commit e31cff3 into main Jul 9, 2025
6 checks passed
@graycreate graycreate deleted the feature/remove-duplicate-dependency-workflow branch July 9, 2025 03:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants