Maintenance: ignore available updates for CDK v2 and reduce frequency of new PRs #672
Labels
automation
This item relates to automation
completed
This item is complete and has been merged/shipped
good-first-issue
Something that is suitable for those who want to start contributing
Milestone
Description of the feature request
Context - Dependabot
We use dependabot for version updates:
https://docs.github.com/en/code-security/dependabot/dependabot-version-updates
Our current dependabot configuration can be found here:
https://github.com/awslabs/aws-lambda-powertools-typescript/blob/main/.github/dependabot.yml
Our team merges or rejects PRs automatically opened by the dependabot around once a week (usually on Fridays).
We need to update our current dependabot configuration to reduce the number of PRs open at once, especially the ones we don't need.
Problem statement
Problem 1:
As stated in our Contributing guidelines, we use AWS CDK v1 library and not v2 due to this limitation.
Right now we receive a lot of PRs requests opened by the dependabot, to update CDK dependencies to the v2 versions. This adds a lot of noise and requires the continuous action of closing/ignoring those PRs.
Problem: 2
Since we merge dependabot PRs once a week but the dependabot PRs are created daily, this results in a lot of PRs being opened every day that add a lot of noise and pollution to our PR list.
Summary of the feature
[] Reduce the frequency of PRs from daily to weekly (ideally on a thursday)
[] Ignore version updates for dependecies related to CDK v2.
Code examples
Github docs: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#specifying-dependencies-and-versions-to-ignore
Benefits for you and the wider AWS community
Maintainers more focused and less distracted.
Describe alternatives you've considered
N/A
Additional context
N?A
Related issues, RFCs
aws/aws-cdk#18211
The text was updated successfully, but these errors were encountered: