Skip to content

github: tweak dependabot frequency#1624

Merged
Watson1978 merged 2 commits into
fluent:masterfrom
kenhys:tweak-dependabot
Apr 8, 2026
Merged

github: tweak dependabot frequency#1624
Watson1978 merged 2 commits into
fluent:masterfrom
kenhys:tweak-dependabot

Conversation

@kenhys
Copy link
Copy Markdown
Contributor

@kenhys kenhys commented Apr 8, 2026

Before:

  • "Dependabot Security Alerts" is enabled
  • Security Alerts scans All contents, so it creates noisy PRs.

After:

  • Disable "Dependabot Security Alerts".
  • Check daily and security updates PR at once.
  • Check daily and normal updates PR will be created in one PR. It will be rebased if it was let alone.

@kenhys
Copy link
Copy Markdown
Contributor Author

kenhys commented Apr 8, 2026

"Dependabot Security Alerts" was disabled.

Comment thread .github/dependabot.yml Outdated
@kenhys kenhys marked this pull request as draft April 8, 2026 08:27
kenhys added 2 commits April 8, 2026 17:58
Before:

* "Dependabot Security Alerts" was enabled
* Security Alerts scans All contents, so it creates noisy PRs.

After:

* Disable "Dependabot Security Alerts".
* Check github-actions in daily and create security updates PR at
once.
* Check bundler in daily and does not create both of security update
  and normal update because it will not be intended to update by
  dependabot..

Signed-off-by: Kentaro Hayashi <hayashi@clear-code.com>
Signed-off-by: Kentaro Hayashi <hayashi@clear-code.com>
@kenhys kenhys force-pushed the tweak-dependabot branch from 08cdab7 to 6c45610 Compare April 8, 2026 09:01
@kenhys kenhys marked this pull request as ready for review April 8, 2026 09:02
Copy link
Copy Markdown
Contributor

@Watson1978 Watson1978 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍🏻

@Watson1978 Watson1978 merged commit 01204c9 into fluent:master Apr 8, 2026
38 checks passed
@kenhys kenhys deleted the tweak-dependabot branch April 8, 2026 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants