Skip to content

Update dependabot config to reduce noise#244

Merged
Sephsekla merged 1 commit intodevelopfrom
149-dependabot-config
Apr 5, 2023
Merged

Update dependabot config to reduce noise#244
Sephsekla merged 1 commit intodevelopfrom
149-dependabot-config

Conversation

@Sephsekla
Copy link
Copy Markdown
Collaborator

What?

Make several updates to Dependabot config to reduce the frequency of notifications.

Why?

Resolve #149

How?

Make several updates to Dependabot config:

  • Dependabot PRs will now be created weekly, rather than daily.
  • Dependabot will only create updates for direct dependencies, and also any @wordpress dependencies, however this may update other dependencies transitively.
  • Security PRs will still be created as before.

This should hopefully make this more manageable without sacrificing security or maintenance.

Testing Instructions

Screenshots or screencast

@Sephsekla Sephsekla added the [Type] development tools Setting up and cofniguring tools to help with the development process. label Apr 5, 2023
@Sephsekla Sephsekla self-assigned this Apr 5, 2023
@Sephsekla Sephsekla requested review from erikyo and johnhooks April 5, 2023 16:10
Copy link
Copy Markdown
Collaborator

@johnhooks johnhooks left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks like it should reduce the quantity of bot PRs. Let's give it a try.

@Sephsekla Sephsekla merged commit 57ba5cf into develop Apr 5, 2023
@Sephsekla Sephsekla deleted the 149-dependabot-config branch April 5, 2023 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

[Type] development tools Setting up and cofniguring tools to help with the development process.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

set Dependabot only for security updates

3 participants