Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade to GitHub-native Dependabot #108

Closed
wants to merge 1 commit into from

Conversation

dependabot-preview[bot]
Copy link
Contributor

Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then.

Dependabot has been fully integrated into GitHub, so you no longer have to install and manage a separate app. This pull request migrates your configuration from Dependabot.com to a config file, using the new syntax. When merged, we'll swap out dependabot-preview (me) for a new dependabot app, and you'll be all set!

With this change, you'll now use the Dependabot page in GitHub, rather than the Dependabot dashboard, to monitor your version updates, and you'll configure Dependabot through the new config file rather than a UI.

If you've got any questions or feedback for us, please let us know by creating an issue in the dependabot/dependabot-core repository.

Learn more about migrating to GitHub-native Dependabot

Please note that regular @dependabot commands do not work on this pull request.

Comment on lines +17 to +19
- dependency-name: autopep8
versions:
- 1.5.5
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we remove autopep8 ignore? 🤔

@sandcha
Copy link
Contributor

sandcha commented May 6, 2021

Dependabot service is great! Nevertheless, by adding its configuration file to the code base, it looks like anyone starting a model with the country-template will get the dependabot service. So, what about adding some information in the bootstrap section of the README to inform the user that it is possible to remove this service?

Thus we would keep the service (🙌) but the user would have to opt-out (😕).

Same question for openfisca/extension-template#37.

Br3nda
Br3nda previously approved these changes May 6, 2021
@Br3nda Br3nda self-requested a review May 6, 2021 23:11
@Br3nda Br3nda dismissed their stale review May 6, 2021 23:11

good points by sandcha

@Br3nda
Copy link
Contributor

Br3nda commented May 6, 2021

it will be similar to a .gitignore - can we had a list to a script that removes these extra files? maybe all dot files.

@bonjourmauko
Copy link
Member

Thanks @sandcha and @Br3nda ! I have proposed #109 to deal with this issue. WDYT?

@dependabot-preview
Copy link
Contributor Author

As a reminder, Dependabot Preview will be shut down on August 3rd, 2021. You can merge this pull request to migrate to GitHub-native Dependabot. You can read the docs to learn more about what's changing, as well as find out how to get support if you need help migrating.

@bonjourmauko
Copy link
Member

Closing for now as there is no current consensus on if and how to use dependabot yet. No not hesitate to reopen it.

@bonjourmauko bonjourmauko deleted the dependabot/add-v2-config-file branch December 7, 2022 17:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants