X Tutup
The Wayback Machine - https://web.archive.org/web/20221223111716/https://github.com/python/cpython/pull/22787
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow dependabot to check GitHub actions monthly #22787

Merged
merged 2 commits into from Oct 23, 2020
Merged

Allow dependabot to check GitHub actions monthly #22787

merged 2 commits into from Oct 23, 2020

Conversation

jlosito
Copy link
Contributor

@jlosito jlosito commented Oct 19, 2020

Let Dependabot update GitHub Actions dependency once a month.

Here's reference to the dependabot configs.

https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/keeping-your-actions-up-to-date-with-github-dependabot

Automerge-Triggered-By: GH:Mariatta

@the-knights-who-say-ni
Copy link

the-knights-who-say-ni commented Oct 19, 2020

Hello, and thanks for your contribution!

I'm a bot set up to make sure that the project can legally accept this contribution by verifying everyone involved has signed the PSF contributor agreement (CLA).

Recognized GitHub username

We couldn't find a bugs.python.org (b.p.o) account corresponding to the following GitHub usernames:

@jlosito

This might be simply due to a missing "GitHub Name" entry in one's b.p.o account settings. This is necessary for legal reasons before we can look at this contribution. Please follow the steps outlined in the CPython devguide to rectify this issue.

You can check yourself to see if the CLA has been received.

Thanks again for the contribution, we look forward to reviewing it!

Copy link
Sponsor Member

@Mariatta Mariatta left a comment

Thanks. I think daily update is way too noisy for CPython. Can you change it to monthly?

.github/dependabot.yml Outdated Show resolved Hide resolved
@bedevere-bot
Copy link

bedevere-bot commented Oct 20, 2020

A Python core developer has requested some changes be made to your pull request before we can consider merging it. If you could please address their requests along with any other requests in other reviews from core developers that would be appreciated.

Once you have made the requested changes, please leave a comment on this pull request containing the phrase I have made the requested changes; please review again. I will then notify any core developers who have left a review that you're ready for them to take another look at this pull request.

@jlosito
Copy link
Contributor Author

jlosito commented Oct 22, 2020

I have made the requested changes; please review again

@bedevere-bot
Copy link

bedevere-bot commented Oct 22, 2020

Thanks for making the requested changes!

@Mariatta: please review the changes made to this pull request.

@bedevere-bot bedevere-bot requested a review from Mariatta Oct 22, 2020
Copy link
Sponsor Member

@Mariatta Mariatta left a comment

Thanks!

@Mariatta Mariatta changed the title Allow dependabot to check GitHub actions daily Allow dependabot to check GitHub actions monthly Oct 23, 2020
@Mariatta Mariatta added skip issue skip news 🤖 automerge PR will be merged once it's been approved and all CI passed labels Oct 23, 2020
@miss-islington miss-islington merged commit 697109b into python:master Oct 23, 2020
3 checks passed
@Mariatta
Copy link
Sponsor Member

Mariatta commented Oct 23, 2020

Thanks for your first contribution to CPython! 🌮

@Mariatta
Copy link
Sponsor Member

Mariatta commented Oct 24, 2020

I'm curious whether dependabot checks for the configuration on the other branches, or is it only for the main branch. I was thinking perhaps we should backport this change to 3.9 and 3.8, so at least we don't need to manually trigger backports to future dependabot PRs.

@hugovk
Copy link
Member

hugovk commented Oct 24, 2020

It should be possible using the target_branch option:

https://dependabot.com/docs/config-file/#target_branch

In one of my repos, I have dependabot configured for master, and also for this PR's branch: hugovk/pypistats#88

(I'm waiting for httpx to reach 1.0, and dependabot is updating dependencies to check it still passes CI in the meanwhile. It's been useful as the httpx mocker library has been out of sync a couple of times.)

I don't have config files for that repo yet, it's using config from the UI. The only difference between the two configs is there's a target branch set for the PR's branch.

BoboTiG pushed a commit to nuxeo/nuxeo-drive that referenced this pull request Oct 29, 2020
BoboTiG pushed a commit to nuxeo/nuxeo-drive that referenced this pull request Oct 29, 2020
BoboTiG added a commit to BoboTiG/ebook-reader-dict that referenced this pull request Oct 30, 2020
@jlosito jlosito deleted the dependabot-configs branch Dec 3, 2020
adorilson pushed a commit to adorilson/cpython that referenced this pull request Mar 13, 2021
tllilleh pushed a commit to tllilleh/ebook-reader-dict that referenced this pull request Sep 22, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🤖 automerge PR will be merged once it's been approved and all CI passed skip issue skip news
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants
X Tutup