Skip to content

ci: Add dependabot #203

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

ci: Add dependabot #203

wants to merge 1 commit into from

Conversation

ananos
Copy link
Contributor

@ananos ananos commented Jul 6, 2025

Create a sample dependabot config for go and github-actions.

Create a sample dependabot config for go and github-actions.

Signed-off-by: Anastassios Nanos <ananos@nubificus.co.uk>
@ananos ananos marked this pull request as draft July 6, 2025 22:05
Copy link

netlify bot commented Jul 6, 2025

Deploy Preview for urunc canceled.

Name Link
🔨 Latest commit 2156cd1
🔍 Latest deploy log https://app.netlify.com/projects/urunc/deploys/686af33d02767800084abb36

@ananos ananos added the CI Related to testing label Jul 6, 2025
@ananos ananos moved this to Todo in urunc Roadmap Jul 6, 2025
@ananos ananos modified the milestone: urunc release v0.7.0 Jul 6, 2025
@ananos ananos marked this pull request as ready for review July 7, 2025 07:21
@ananos
Copy link
Contributor Author

ananos commented Jul 7, 2025

rough test was done by temporarily changing the default branch:

We need to understand the actual output, and whether this triggers a PR, or just dumps what needs to be changed.

Copy link
Contributor

@cmainas cmainas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @ananos for this. As far as I understand, there are more steps we need to perform and properly set this up.

  • We need to enable "Dependabot version updates", in order to take affect the configuration in this PR.
  • We need to ignore a few go packages from automatically updating
  • We need to fix the git trailers handling. Similar work took place in vaccel here https://github.com/nubificus/vaccel/pull/134/files
  • We need to exclude dependabot PRs from commit linter, since we cannot use a
    custom format for dependabot commit messages. Similar work done in vaccel nubificus/vaccel@8394f23

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CI Related to testing ok-to-test
Projects
Status: Todo
Development

Successfully merging this pull request may close these issues.

2 participants