Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add dependabot config with proper ignore for stable branches #27118

Merged
merged 1 commit into from
May 27, 2021

Conversation

skjnldsv
Copy link
Member

@skjnldsv skjnldsv commented May 26, 2021

Finally have a proper config for old stable branches!

https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#ignore

When dependabot/dependabot-core#2511 will be in, it should be easier to maintain such config (lots of duplicates)

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
@skjnldsv skjnldsv force-pushed the dependabot/config branch from 1d26b28 to c3f9f09 Compare May 26, 2021 13:51
Copy link
Member

@gary-kim gary-kim left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine to me. We should also add updating the dependabot configured branches to the release TODOs.

@skjnldsv skjnldsv merged commit 54f8d48 into master May 27, 2021
@skjnldsv skjnldsv deleted the dependabot/config branch May 27, 2021 08:14
@skjnldsv
Copy link
Member Author

Looks fine to me. We should also add updating the dependabot configured branches to the release TODOs.

done

@blizzz blizzz mentioned this pull request Jun 2, 2021
57 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants