Upgrade to GitHub-native Dependabot #68
Conversation
![dependabot-preview[bot]](https://avatars.githubusercontent.com/in/2141?s=60&v=4){kind=small}
|
As a reminder, Dependabot Preview will be shut down on August 3rd, 2021. You can merge this pull request to migrate to GitHub-native Dependabot. You can read the docs to learn more about what's changing, as well as find out how to get support if you need help migrating. |
Tabby
force-pushed
the
dependabot/add-v2-config-file
branch
from
cccb6d1
to
e51e677
Compare
|
👋 @Tabby, when do you think this change will be reviewed? This gem has a few outdated dependencies which @dependabot would help with managing. |
My apologies @sgerrand, this got lost among a bunch of other things. I'll get this PR all fixed up and push to get it reviewed this week if I can :) Thanks for the reminder! |
Tabby
force-pushed
the
dependabot/add-v2-config-file
branch
from
0befb4f
to
7630b29
Compare
Tabby
force-pushed
the
dependabot/add-v2-config-file
branch
from
7630b29
to
7e75d2c
Compare
This will ensure that minor/patch version changes will be automatically merged, reducing the effort required to keep dependencies up to date
|
Merging this without review as outdated dependencies have potential security implications |
Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then.
Dependabot has been fully integrated into GitHub, so you no longer have to install and manage a separate app. This pull request migrates your configuration from Dependabot.com to a config file, using the new syntax. When merged, we'll swap out
dependabot-preview(me) for a newdependabotapp, and you'll be all set!With this change, you'll now use the Dependabot page in GitHub, rather than the Dependabot dashboard, to monitor your version updates, and you'll configure Dependabot through the new config file rather than a UI.
If you've got any questions or feedback for us, please let us know by creating an issue in the dependabot/dependabot-core repository.
Learn more about migrating to GitHub-native Dependabot
Please note that regular
@dependabotcommands do not work on this pull request.