Skip to content

Migrate to built-in Dependabot #1448

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 1, 2020
Merged

Migrate to built-in Dependabot #1448

merged 1 commit into from
Jul 1, 2020

Conversation

HonkingGoose
Copy link
Contributor

@HonkingGoose HonkingGoose commented Jul 1, 2020

Dependabot has recently been integrated into GitHub itself proper.

This pull-request removes the old Dependabot-preview configuration, and places the new Dependabot configuration into the .github folder.

Merging this pull-request closes #1356

Benefits:

  • No need to have Dependabot-preview installed as repo administrator
  • No need to use a third party site anymore for configuration.
  • All configuration is now done via the configuration file, so everybody can see what the settings are.

Drawbacks:

  • Update schedule is no longer truly live (Best update frequency is now once a day on Mondays trough Fridays).
  • All configuration is now done via the configuration file, so everybody can see what the settings are.

References for my changes:
https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/
https://help.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically

Steps to take after merging:
@ben you can remove the Dependabot-preview app from your GitHub account after merging this pull-request, unless you're also using Dependabot-preview on other private/public repositories.
You can find your installed GitHub apps when you're logged in, and go to: https://github.com/settings/installations

@ben
Copy link
Member

ben commented Jul 1, 2020

✨ Thanks!

@ben ben merged commit 30347a5 into progit:master Jul 1, 2020
@HonkingGoose
Copy link
Contributor Author

Cheers, thanks for merging in my work! 🎉 ✨

@HonkingGoose HonkingGoose deleted the feature/migrate-to-built-in-dependabot branch July 2, 2020 06:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Migrate from Dependabot preview to Dependabot
2 participants