Skip to content

feat(dependabot): Added Dependabot #205

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

yashisrani
Copy link
Contributor

I added Depedabot to automate upgradation of dependancies for our website.

@kmesh-bot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign nlgwcy for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Copy link

netlify bot commented Jun 12, 2025

Deploy Preview for kmesh-net ready!

Name Link
🔨 Latest commit db5e128
🔍 Latest deploy log https://app.netlify.com/projects/kmesh-net/deploys/684b1d228bec2f0008b0d10a
😎 Deploy Preview https://deploy-preview-205--kmesh-net.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@jayesh9747
Copy link
Contributor

@yashisrani, why do we need this feature? Can you give some examples?

@yashisrani
Copy link
Contributor Author

@jayesh9747 to bump all outdated dependencies. Currently Node.js 24 is running. But our website is still using Node 18, which is outdated.

@jayesh9747
Copy link
Contributor

@yashisrani You need to add an auto-rollback in this PR, in case our site goes down due to the Node version change. We shouldn't proceed without it.

@yashisrani
Copy link
Contributor Author

@jayesh9747 we can configure Dependabot to ignore major Node version updates and only allow minor or patch updates. this is also good idea ..

@jayesh9747
Copy link
Contributor

@yashisrani still we need rollback functionallity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants