Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create dependabot.yml & update code-owners #88

Merged
merged 4 commits into from
Feb 29, 2024
Merged

Conversation

mansueli
Copy link
Member

What kind of change does this PR introduce?

Bug fix, feature, docs update, ...

What is the current behavior?

Please link any relevant issues here.

What is the new behavior?

Feel free to include screenshots if it includes visual changes.

Additional context

Add any other context or screenshots.

Copy link
Contributor

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR Type: Enhancement

PR Summary: This pull request introduces a new configuration file for Dependabot, aimed at automating dependency updates for both GitHub Actions and pip packages. The configuration specifies daily checks for updates, targeting the master branch for both ecosystems.

Decision: Comment

📝 Type: 'Enhancement' - not supported yet.
  • Sourcery currently only approves 'Typo fix' PRs.
✅ Issue addressed: this change correctly addresses the issue or implements the desired feature.
No details provided.
✅ Small diff: the diff is small enough to approve with confidence.
No details provided.

General suggestions:

  • Consider specifying the types of updates you want Dependabot to ignore, if any, to avoid unnecessary version bumps for certain dependencies.
  • Evaluate if the 'master' branch is the most appropriate target for these updates, or if another branch might be more suitable for testing updates before merging them into the main codebase.
  • It might be beneficial to include information in the PR description about the expected impact of this change, such as improved security or more efficient CI/CD processes, to provide more context for reviewers.

Thanks for using Sourcery. We offer it for free for open source projects and would be very grateful if you could help us grow. If you like it, would you consider sharing Sourcery on your favourite social media? ✨

Share Sourcery

Help me be more useful! Please click 👍 or 👎 on each comment to tell me if it was helpful.

@mansueli mansueli changed the title Create dependabot.yml Create dependabot.yml & update code-owners Feb 28, 2024
@mansueli mansueli merged commit 5fdb923 into master Feb 29, 2024
5 checks passed
@mansueli mansueli deleted the featdependabot.yml branch February 29, 2024 10:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants