Skip to content

chore: updated depdendabot configs #766

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 25, 2022
Merged

Conversation

dreamorosi
Copy link
Contributor

Description of your changes

As discussed in #672 we would like to reduce the noise from Dependabot while still being up to date with the dependency ecosystem. This PR introduces the following changes:

  • Set Dependabot to run weekly, on Fridays, at 5AM (Europe/Amsterdam tz)
  • Set PR limit to 20 **
  • Add Dependabot checks for Python dependencies in docs/requirements.txt, this was previously ignored.

** I propose to set this number to 20 (default is 5) so to increase the chance that Dependabot will open most/all the PR at once. This will allow the maintainers to have a better idea of the amount of PR to handle on the day (Friday). The current behaviour of 5 at the time made it so that Dependabot would keep opening PRs every time one was merged causing frustration. Read more about this setting here.

How to verify this change

TBD

Related issues, RFCs

#672

PR status

Is this ready for review?: YES
Is it a breaking change?: NO

Checklist

Breaking change checklist

N/A


By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@dreamorosi dreamorosi added this to the production-ready-release milestone Apr 14, 2022
@dreamorosi dreamorosi self-assigned this Apr 14, 2022
@github-actions github-actions bot added the internal PRs that introduce changes in governance, tech debt and chores (linting setup, baseline, etc.) label Apr 14, 2022
Copy link
Contributor

@ijemmy ijemmy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for doing this.

Comment on lines +4 to +12
# Maintain dependencies for Python
- package-ecosystem: "pip"
directory: "/docs"
schedule:
interval: "weekly"
day: "friday"
time: "05:00"
timezone: "Europe/Amsterdam"
open-pull-requests-limit: 20
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have to say that this check scares me. It has been a while... :D

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, but luckily we don't have that many dependencies (only 3) and we have been keeping them relatively up to date (see latest PR). But let's see...

Copy link
Contributor

@saragerion saragerion left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@dreamorosi dreamorosi merged commit 3b11840 into main Apr 25, 2022
@dreamorosi dreamorosi deleted the chore/set_dependabot_weekly branch April 25, 2022 14:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
internal PRs that introduce changes in governance, tech debt and chores (linting setup, baseline, etc.)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Maintenance: ignore available updates for CDK v2 and reduce frequency of new PRs
3 participants