Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Replace dependabot, use github app token for PRs #2186

Merged
merged 3 commits into from
Oct 24, 2024
Merged

Replace dependabot, use github app token for PRs #2186

merged 3 commits into from
Oct 24, 2024

Conversation

rebkwok
Copy link
Contributor

@rebkwok rebkwok commented Oct 24, 2024

  • Replace the python dependency updates with our custom update-dependencies-action, which updates all dependencies and opens a PR if necessary. We keep dependabot for Github Action updates only.
  • Use the github app tokens in update-pledge and update-external-studies so any PRs they create will trigger the relevant workflows

@rebkwok
Add a just update-dependencies command
bd7863f 
To upgrade all dev and prod dependencies
@rebkwok
Add an update-dependencies workflow
4cb4443 
To update all dependencies in one go. We also update dependabot to
check for GitHub Actions only.
@rebkwok
Use GitHub app token in workflows that open PRs
da3e912 
This token has permissions to create PRs and will trigger the
usual workflows.
@rebkwok rebkwok merged commit 35f3614 into main Oct 24, 2024
9 checks passed
@rebkwok rebkwok deleted the update-dependencies branch October 24, 2024 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@evansd evansd evansd approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@rebkwok @evansd