Skip to content

Add dependabot#375

Merged
dyfer merged 1 commit into
supercollider:mainfrom
capital-G:dependabot
Aug 26, 2024
Merged

Add dependabot#375
dyfer merged 1 commit into
supercollider:mainfrom
capital-G:dependabot

Conversation

@capital-G

Copy link
Copy Markdown
Contributor

Add dependabot which allows to keep the github actions and ruby dependencies for the jekyll website up-to-date. (inspired by #368 )

@capital-G capital-G added gh-pages Jekyll static pages CI labels May 22, 2024
@dyfer

dyfer commented Aug 26, 2024

Copy link
Copy Markdown
Member

Thanks!
Would that automatically push to our repo? Are there any security considerations around that?

@capital-G

Copy link
Copy Markdown
Contributor Author

The bots checks the dependencies on a regular interval and creates a PR with the updated dependency if there is an update. This PR triggers the CI and if it passes it is hopefully good to merge. See e.g. Gencaster/gencaster#636

It would therefore push PRs to the repo and the commits would be signed by the bot, but it wouldn't merge to dev/main directly.

@dyfer

dyfer commented Aug 26, 2024

Copy link
Copy Markdown
Member

Ah got it, thanks! In that case I think it's good.

@dyfer dyfer merged commit b6e7001 into supercollider:main Aug 26, 2024
@dyfer

dyfer commented Aug 26, 2024

Copy link
Copy Markdown
Member

Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI gh-pages Jekyll static pages

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants