-
Notifications
You must be signed in to change notification settings - Fork 257
Chore: make dependanbot to open one PR for go dependencies update weekly #4010
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
/azp run Azure Container Networking PR |
Azure Pipelines could not run because the pipeline triggers exclude this branch/path. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Lets add functionality first to master see how it behaves and then make broad changes.
We are able to have both grouped and individual updates for packages. Additionally, I am in favor of constraining the updates for grouped deps to be to minor and patch. This requires us to have a general block for a major version update for each go.mod.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR reconfigures Dependabot to optimize dependency update management by transitioning from daily individual PRs to weekly grouped PRs for Go modules across multiple directories and branches.
- Changed update frequency from daily to weekly (Sundays at 12:00 UTC) for all Go module directories
- Implemented grouped updates for minor/patch versions to reduce PR volume
- Added separate configurations for major version updates to maintain visibility
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
/azp run Azure Container Networking PR |
Azure Pipelines could not run because the pipeline triggers exclude this branch/path. |
Signed-off-by: Paul Yu <[email protected]>
/azp run Azure Container Networking PR |
Azure Pipelines could not run because the pipeline triggers exclude this branch/path. |
Reason for Change:
Issue Fixed:
This PR is to make ACN git repo dependent bot to pen one PR for go dependencies upgrade weekly for different version streaming
Requirements:
Notes:
reference link: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/optimizing-pr-creation-version-updates#example-4-grouped-pull-requests-for-minorpatch-updates-and-no-pull-requests-for-major-updates