Skip to content

Reduce Dependabot submodule noise and document triage policy - #319

Open
Panzerkampfwagen-del wants to merge 1 commit into
HSF:mainfrom
Panzerkampfwagen-del:chore/dependabot-noise-reduction
Open

Reduce Dependabot submodule noise and document triage policy#319
Panzerkampfwagen-del wants to merge 1 commit into
HSF:mainfrom
Panzerkampfwagen-del:chore/dependabot-noise-reduction

Conversation

@Panzerkampfwagen-del

Copy link
Copy Markdown

Fixes #296

Tag-filtered submodule updates are not supported by Dependabot yet (dependabot/dependabot-core#1639), so this does everything actionable today:

  • caps open gitsubmodule PRs at 5 and labels them dependencies so the noisy ones are trivially filterable
  • groups the weekly github-actions bumps into a single PR
  • documents the merge-only-upstream-releases policy in doc/CONTRIBUTING.md so it stops living only in the issue thread

Dependabot opens a submodule PR per upstream commit since tag-based
updates are not supported yet (dependabot-core#1639). Cap open
submodule PRs, label them for triage, group the weekly action bumps,
and document the merge-only-releases policy.

Fixes HSF#296.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dependabot configuration notes

1 participant