From 8a8dc139f187691bdabb8bff8d7336007da3607f Mon Sep 17 00:00:00 2001 From: Adrienne Stilp Date: Mon, 18 Dec 2023 11:24:42 -0800 Subject: [PATCH 1/3] Update dependabot to run weekly on Sundays --- .github/dependabot.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index aa99d491..406063a1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,7 +4,8 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "daily" + interval: "weekly" + day: "sunday" # Enable version updates for Python/Pip - Production - package-ecosystem: "pip" @@ -13,4 +14,5 @@ updates: directory: "/" # Check for updates to GitHub Actions every weekday schedule: - interval: "daily" + interval: "weekly" + day: "sunday" From 0b0a0506838cb77c699d97cd12ae420373c8c0a2 Mon Sep 17 00:00:00 2001 From: Adrienne Stilp Date: Mon, 18 Dec 2023 11:25:09 -0800 Subject: [PATCH 2/3] Allow both direct and indirect updates for packages I'm not sure if this matters now that we're using pip-sync. --- .github/dependabot.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 406063a1..4b0f88f3 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,3 +16,6 @@ updates: schedule: interval: "weekly" day: "sunday" + allow: + # Allow both direct and indirect updates for all packages + - dependency-type: "all" From 82a80d6781542abafc8de173356b6218b60403a5 Mon Sep 17 00:00:00 2001 From: Adrienne Stilp Date: Mon, 18 Dec 2023 11:25:34 -0800 Subject: [PATCH 3/3] Allow 10 open pull requests Now that we'll be running dependabot weekly, we may get more than the default max number of pull requests. --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 4b0f88f3..750edb2f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -19,3 +19,5 @@ updates: allow: # Allow both direct and indirect updates for all packages - dependency-type: "all" + # Allow up to 10 dependencies for pip dependencies + open-pull-requests-limit: 10