-
Notifications
You must be signed in to change notification settings - Fork 13
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Upgrade to GitHub-native Dependabot #68
Conversation
As a reminder, Dependabot Preview will be shut down on August 3rd, 2021. You can merge this pull request to migrate to GitHub-native Dependabot. You can read the docs to learn more about what's changing, as well as find out how to get support if you need help migrating. |
cccb6d1
to
e51e677
Compare
👋 @Tabby, when do you think this change will be reviewed? This gem has a few outdated dependencies which @dependabot would help with managing.
|
My apologies @sgerrand, this got lost among a bunch of other things. I'll get this PR all fixed up and push to get it reviewed this week if I can :) Thanks for the reminder! |
0befb4f
to
7630b29
Compare
7630b29
to
7e75d2c
Compare
This will ensure that minor/patch version changes will be automatically merged, reducing the effort required to keep dependencies up to date
Merging this without review as outdated dependencies have potential security implications |
Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then.
Dependabot has been fully integrated into GitHub, so you no longer have to install and manage a separate app. This pull request migrates your configuration from Dependabot.com to a config file, using the new syntax. When merged, we'll swap out
dependabot-preview
(me) for a newdependabot
app, and you'll be all set!With this change, you'll now use the Dependabot page in GitHub, rather than the Dependabot dashboard, to monitor your version updates, and you'll configure Dependabot through the new config file rather than a UI.
If you've got any questions or feedback for us, please let us know by creating an issue in the dependabot/dependabot-core repository.
Learn more about migrating to GitHub-native Dependabot
Please note that regular
@dependabot
commands do not work on this pull request.