Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: change dependabot to auto-approve only #458

Merged
merged 1 commit into from
Jan 18, 2024

Conversation

willmurphyscode
Copy link
Contributor

When dependabot PRs are automatically merged, the resulting commit doesn't run workflows on main if the default GitHub token is used. Rather than generate a more potent token, or live with some commits not running workflows on main, scale back dependabot automation to only approve the PRs but not merge them. This still reduces toil by saving several clicks in the UI.

Copied from anchore/grype-db#222

When dependabot PRs are automatically merged, the resulting commit
doesn't run workflows on main if the default GitHub token is used.
Rather than generate a more potent token, or live with some commits not
running workflows on main, scale back dependabot automation to only
approve the PRs but not merge them. This still reduces toil by saving
several clicks in the UI.

Signed-off-by: Will Murphy <[email protected]>
@willmurphyscode willmurphyscode merged commit 4d309f2 into main Jan 18, 2024
11 checks passed
@willmurphyscode willmurphyscode deleted the chore/dependabot-approvals branch January 18, 2024 09:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants