Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(dependabot): add dependabot #5947

Merged
merged 1 commit into from
Nov 6, 2023

Conversation

sad270
Copy link
Contributor

@sad270 sad270 commented Nov 4, 2023

Q A
Branch? 3.1
Tickets
License MIT
Doc PR

Add dependabot to update github actions.

Configuration is comming from https://github.com/api-platform/api-platform/blob/main/.github/dependabot.yml

@soyuka
Copy link
Member

soyuka commented Nov 5, 2023

we're using our own update-js script there is no package-lock on this project I think

@sad270
Copy link
Contributor Author

sad270 commented Nov 5, 2023

Hello, i'm maybe wrong but update-js will update js packages, in this PR dependabot will update github action uses.

@sad270
Copy link
Contributor Author

sad270 commented Nov 5, 2023

In #5946 I did it manually 😅 but if it is automatically updated it will be better ! With dependabot or with another tool.

.github/dependabot.yml Outdated Show resolved Hide resolved
@dunglas
Copy link
Member

dunglas commented Nov 6, 2023

By the way, as we keep the yarn.lock file, we may also replace update-js.js by Dependabot (in a next PR).

@dunglas
Copy link
Member

dunglas commented Nov 6, 2023

One last thing: this should target the 3.1 branch

@sad270 sad270 changed the base branch from main to 3.1 November 6, 2023 12:23
@sad270 sad270 changed the base branch from 3.1 to main November 6, 2023 12:23
@sad270 sad270 changed the base branch from main to 3.1 November 6, 2023 16:51
@sad270
Copy link
Contributor Author

sad270 commented Nov 6, 2023

One last thing: this should target the 3.1 branch

@dunglas target changed it's 3.1 now 😄

@dunglas dunglas merged commit c617b18 into api-platform:3.1 Nov 6, 2023
41 checks passed
@dunglas
Copy link
Member

dunglas commented Nov 6, 2023

Thank you!!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants