Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create dependabot #1373

Merged
merged 1 commit into from
Feb 18, 2025
Merged

Conversation

nodivbyzero
Copy link
Contributor

Fixes Or Enhances

This PR adds a dependabot.yml configuration file to enable automated dependency updates for:

  • Golang
  • GitHub Actions

Make sure that you've checked the boxes below before you submit PR:

  • Tests exist or have been written that cover this particular change.

@go-playground/validator-maintainers

@nodivbyzero nodivbyzero requested a review from a team as a code owner February 13, 2025 00:54
@coveralls
Copy link

Coverage Status

coverage: 74.319%. remained the same
when pulling f7229c0 on nodivbyzero:add-dependabot
into e564451 on go-playground:master.

@deankarn
Copy link
Contributor

@nodivbyzero so this will merely make a PR it it detects changes and not automatically change correct?

just double checking as sometimes other libraries can break semver rules and always need to have a human take a look first to be safe. :)

@MadsRC
Copy link

MadsRC commented Feb 16, 2025

That is correct, dependabot will not change the code directly, but open up a PR with updates to GitHub Actions actions and go.mod ;)

@nodivbyzero
Copy link
Contributor Author

Sorry for the delayed response.
Yes, Dependabot only creates a PR, and it's up to the maintainers to review and merge it.

Here's a helpful guide:
https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide

@nodivbyzero nodivbyzero merged commit c800931 into go-playground:master Feb 18, 2025
15 checks passed
KimNorgaard pushed a commit to KimNorgaard/validator that referenced this pull request Feb 25, 2025
## Fixes Or Enhances
This PR adds a `dependabot.yml` configuration file to enable automated
dependency updates for:
- Golang
- GitHub Actions

**Make sure that you've checked the boxes below before you submit PR:**
- [ ] Tests exist or have been written that cover this particular
change.

@go-playground/validator-maintainers
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants