Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix dependabot configuration for gh-actions-packages group #6696

Open
wants to merge 6 commits into
base: master
Choose a base branch
from

Conversation

bouwkast
Copy link
Contributor

@bouwkast bouwkast commented Feb 21, 2025

Summary of changes

Fixes the dependabot file in far too many commits.
Attempts to make it so that we only update patch versions, but I don't think it'll work from my testing.
Swaps from a group PR to 3 open individual PRs (one per action instead of all actions at once) which will be somewhat more manageable IMO.

Reason for change

It was broken and nothing was running

The property '#/updates/5/groups/gh-actions-packages/update-types/0' value "version-update:semver-patch" did not match one of the following values: major, minor, patch

I then tested out if the patch worked and it just updated a checkout action to 3 to 4, so probably don't work.
I then have swapped it to be "individual" PRs but that also seems to be not working.

Implementation details

Deleted version-update:semver- not available in group
Swapped to the individual update (instead of one PR for all) and re-added version-update

Tested out on a dummy repo, it "works" but still updates the packages.

Test coverage

Tested out on a dummy repository and it makes the dependabot file valid again, the actions does work

I tested out each commit I made here.
Each time it bumped my checkout action on a repo from 3 to 4

It may be better / easier to just manage it action individually here and update accordingly as we don't have an easy way to test these out.

Other details

@bouwkast bouwkast requested a review from a team as a code owner February 21, 2025 13:00
@github-actions github-actions bot added the area:builds project files, build scripts, pipelines, versioning, releases, packages label Feb 21, 2025
It'll be easier to close one PR a month.
3 seems like a good number
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:builds project files, build scripts, pipelines, versioning, releases, packages
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant