-
Notifications
You must be signed in to change notification settings - Fork 6.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(workflow): remove dependabot workflow #5261
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM! Let's remove Dependabot for now.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LTGM!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
For context: I think the reason we are temporarily disabling Dependabot is because of the significant migration work happening on the /major/website-redesign
branch, and trying to reduce the likelihood of dependency conflicts when it lands. A decrease in notifications within our GitHub inboxes is an added bonus too...
@MaledongGit dependabot alerts are about the security alerts feature. Not the PRs for dependency updatee. |
I submitted a PR to make a feature request to the dependabot, however the author of GitHub's waiting for my response, and I don't have the authentication to verify whether it works? Can any of you check it? I was told not only security alerts but updates as well…… Refs:dependabot/dependabot-core#7072 If this still doesn't work, I'll submit and give him a reason why, otherwises I'll close this feature. |
@MaledongGit dependabot security alerts are an entirely different feature from dependabot automatic dependency updates, as I mentioned before. Edit: It seems that we're able indeed to disable it via options, but I'm unable to find that option. Will give it another try. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Still waiting for the unrelated changes to be undone 👀 (referring to remove the github-actions config for dependabot)
Yes, It would be better if we can keep the file :) |
Waiting for response of a better solution
I'm closing this PR as there's a few controversial things happening at play. I'll reach out GitHub support. |
Just a tip only (no need to change any more but just let you what to do if we meet such problems): Just a very simple sample XD XD XD |
No description provided.