Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set up dependabot #138

Merged
merged 1 commit into from
Mar 27, 2024
Merged

Set up dependabot #138

merged 1 commit into from
Mar 27, 2024

Conversation

Bisaloo
Copy link
Member

@Bisaloo Bisaloo commented Mar 27, 2024

cc @jamesmbaazam.

I've been on the fence about this for a while because setting dependabot up puts the burden on individual maintainers to figure out whether they should accept a given dependabot PR.

However:

  • the benefits probably outweigh the cost and we can still discuss specific PRs on slack
  • official GitHub Actions actions are quite stable and usually don't include breaking changes across versions so the risk is minimal

Related to #9.

@Bisaloo Bisaloo enabled auto-merge (rebase) March 27, 2024 09:46
@Bisaloo Bisaloo disabled auto-merge March 27, 2024 09:47
@Bisaloo Bisaloo merged commit 687e099 into main Mar 27, 2024
1 check passed
@Bisaloo Bisaloo deleted the dependabot branch March 27, 2024 09:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant