ci(dep): update dependabot configuration #2338
Conversation
This commit updates the existing dependabot configuration: Changes include: * Explicitly set PR limits to 5 * Add labels - All PRs will be tagged with: * `dependencies` (common label) * Ecosystem label (go, github-actions) Signed-off-by: vprashar2929 <[email protected]>
vprashar2929
force-pushed
the
chore-depbot-up
branch
from
2adff1e to
8984ab4
Compare
| update-types: [version-update:semver-major, version-update:semver-minor] | ||
| commit-message: | ||
| include: scope | ||
| open-pull-requests-limit: 5 |
There was a problem hiding this comment.
do we need limit PR number to 5?
in an edge case, we meet this limitation and a new cve happens in one of our dependency.
a new patch is ready on upstream, can we benefits from https://github.com/sustainable-computing-io/kepler/security/dependabot to open a new PR as #2247 for now, over the limitation, having the 6 PRs and patched?
There was a problem hiding this comment.
Lets start with 5 (since the PR is already mergable). If in future, we have to raise the number, we can deal with it then.
SamYuan1990
left a comment
SamYuan1990
left a comment
There was a problem hiding this comment.
LGTM, leave comments.
| update-types: [version-update:semver-major, version-update:semver-minor] | ||
| commit-message: | ||
| include: scope | ||
| open-pull-requests-limit: 5 |
There was a problem hiding this comment.
Lets start with 5 (since the PR is already mergable). If in future, we have to raise the number, we can deal with it then.
3 participants
This commit updates the existing dependabot configuration:
Changes include:
dependencies(common label)