Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reduce Dependabot PRs #306

Merged
merged 6 commits into from
Apr 16, 2022
Merged

Reduce Dependabot PRs #306

merged 6 commits into from
Apr 16, 2022

Conversation

k3KAW8Pnf7mkmdSMPHz27
Copy link
Collaborator

@k3KAW8Pnf7mkmdSMPHz27 k3KAW8Pnf7mkmdSMPHz27 commented Mar 24, 2022 •
edited
Loading

  1. Changes Dependabot's update strategy, this should be less aggressive but still cover security issues in most cases
  2. Downgrades TypeScript version due to a potential incompatibility
    2.1. Current version isn't officially supported by @typescript-eslint/typescript-estree.
    SUPPORTED TYPESCRIPT VERSIONS: >=3.3.1 <4.5.0
  3. Bumps lock-files

@k3KAW8Pnf7mkmdSMPHz27
Bump yarn.lock
bdff89a
@k3KAW8Pnf7mkmdSMPHz27
Downgrade TS
eeacb2a 
Current version isn't officially supported by @typescript-eslint/typescript-estree.

SUPPORTED TYPESCRIPT VERSIONS: >=3.3.1 <4.5.0
@k3KAW8Pnf7mkmdSMPHz27
Bump API yarn.lock
89c3d5d
@k3KAW8Pnf7mkmdSMPHz27
Change Dependabot versioning strategy
ab22e3d 
This should make it less likely that the updates breaks anything
@k3KAW8Pnf7mkmdSMPHz27
Merge branch 'main' into fix_dependabot_updates
1ac6cb2 
# Conflicts:
#	api/yarn.lock
#	statusboard/yarn.lock
@k3KAW8Pnf7mkmdSMPHz27
Fix yarn.lock incompatibilities
0e4c394
plocket
plocket approved these changes Mar 31, 2022
View reviewed changes
Copy link

@plocket plocket left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If this works for yarn, I can see it reducing the noise from dependabot, which sounds like a good move. I think it's worth trying.

@k3KAW8Pnf7mkmdSMPHz27 k3KAW8Pnf7mkmdSMPHz27 changed the title Fix Dependabot updates Reduce Dependabot PRs Apr 16, 2022
@k3KAW8Pnf7mkmdSMPHz27 k3KAW8Pnf7mkmdSMPHz27 merged commit 993bb34 into main Apr 16, 2022
@k3KAW8Pnf7mkmdSMPHz27 k3KAW8Pnf7mkmdSMPHz27 deleted the fix_dependabot_updates branch April 16, 2022 23:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@plocket plocket plocket approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@k3KAW8Pnf7mkmdSMPHz27 @plocket