Skip to content

Conversation

Xpirix
Copy link
Collaborator

@Xpirix Xpirix commented Feb 4, 2025

No description provided.

@Gustry
Copy link
Contributor

Gustry commented Feb 4, 2025

I suggest to temporary enable depandabot.yml on the repository, it helps to track these.

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates#example-dependabotyml-file

(I'm personally waiting on the CRON feature dependabot/dependabot-core#6339 to have it, for instance every 3 months, semester)

@Xpirix
Copy link
Collaborator Author

Xpirix commented Feb 4, 2025

That's great, thank you for the hint @Gustry . I will implement this.

@Gustry
Copy link
Contributor

Gustry commented Feb 4, 2025

Sorry, I said "temporary", because I don't like to have it monthly. But of course, I still use it, even monthly :)

Sometimes, I rename the file dependabot.yml.disabled to temporary enable/disable it, on some projects where I don't need monthly updates. I think on this project, you can try monthly.

@Xpirix
Copy link
Collaborator Author

Xpirix commented Feb 4, 2025

@Gustry That's well noted. Let's try the monthly updates on this for now then. I will also probably need the CRON feature for other QGIS website projects.

Also, I've added the file. I wonder if it's the right way to do it.

@Gustry
Copy link
Contributor

Gustry commented Feb 4, 2025

Yes, it seems correct.
When you will merge, you will see it running in https://github.com/qgis/QGIS-Django/actions

@Xpirix
Copy link
Collaborator Author

Xpirix commented Feb 4, 2025

All right, thank you very much.

@Xpirix Xpirix merged commit b4e69d2 into master Feb 4, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants