Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Batch Dependabot PRs #19745

Merged
merged 8 commits into from
Jan 5, 2023
Merged

Batch Dependabot PRs #19745

merged 8 commits into from
Jan 5, 2023

Conversation

rosstimothy
Copy link
Contributor

@rosstimothy rosstimothy commented Dec 30, 2022

Leverages https://github.com/Legal-and-General/dependabot-batcher to create and/or maintain a merged PR (and branch) of all the Dependabot PRs and close them as they are merged in, leaving a single Dependabot PR behind.

The Dependabot schedule is set for Sunday at 9:00am and the batcher workflow is configured to run Sunday at 9:00pm.

All workflows that run on pull requests open have been configured to ignore branches prefixed with dependabot/. Since the dependabot PRs are all going to be closed and batched there is no need to waste CI minutes on them. Any new workflows will require the same check to prevent running on dependabot PRs.

Copy link
Contributor

@codingllama codingllama left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for putting this together. LGTM.

.github/dependabot.yml Show resolved Hide resolved
.github/dependabot.yml Outdated Show resolved Hide resolved
.github/workflows/dependabot-batcher.yaml Outdated Show resolved Hide resolved
Leverages https://github.com/Legal-and-General/dependabot-batcher
to create and/or maintain a merged PR (and branch) of all the
Dependabot PRs and close them as they are merged in, leaving a
single Dependabot PR behind.

The Dependabot schedule is set for Sunday at 9:00am and the batcher
workflow is configured to run Sunday at 9:00pm.

All workflows that run on pull requests open have been configured
to ignore branches prefixed with `dependabot/`. Since the dependabot PRs
are all going to be closed and batched there is no need to waste CI
minutes on them. Any new workflows will require the same check to
prevent running on dependabot PRs.
@rosstimothy rosstimothy enabled auto-merge (squash) January 5, 2023 13:05
@rosstimothy rosstimothy merged commit 3ebbfdd into master Jan 5, 2023
@rosstimothy rosstimothy deleted the tross/dependabot_batcher branch January 5, 2023 13:29
@pauleustice
Copy link

@rosstimothy I'm one of the creators of the Dependabot Batcher. Please let us know how you get on with it, and if you have any suggestions!

reedloden added a commit that referenced this pull request Nov 28, 2023
The bypass `if` for dependabot PRs added in #19745 is failing `dependency-review` due
to this workflow effectively just proxying to another workflow in `shared-workflows`.
This is causing the workflow to not run at all, and since it's required, it's causing
dependabot PRs to not pass status checks. Remove the bypass for now to make checks
pass again.
github-merge-queue bot pushed a commit that referenced this pull request Nov 28, 2023
The bypass `if` for dependabot PRs added in #19745 is failing `dependency-review` due
to this workflow effectively just proxying to another workflow in `shared-workflows`.
This is causing the workflow to not run at all, and since it's required, it's causing
dependabot PRs to not pass status checks. Remove the bypass for now to make checks
pass again.
github-actions bot pushed a commit that referenced this pull request Nov 28, 2023
The bypass `if` for dependabot PRs added in #19745 is failing `dependency-review` due
to this workflow effectively just proxying to another workflow in `shared-workflows`.
This is causing the workflow to not run at all, and since it's required, it's causing
dependabot PRs to not pass status checks. Remove the bypass for now to make checks
pass again.
github-actions bot pushed a commit that referenced this pull request Nov 28, 2023
The bypass `if` for dependabot PRs added in #19745 is failing `dependency-review` due
to this workflow effectively just proxying to another workflow in `shared-workflows`.
This is causing the workflow to not run at all, and since it's required, it's causing
dependabot PRs to not pass status checks. Remove the bypass for now to make checks
pass again.
github-actions bot pushed a commit that referenced this pull request Nov 28, 2023
The bypass `if` for dependabot PRs added in #19745 is failing `dependency-review` due
to this workflow effectively just proxying to another workflow in `shared-workflows`.
This is causing the workflow to not run at all, and since it's required, it's causing
dependabot PRs to not pass status checks. Remove the bypass for now to make checks
pass again.
github-merge-queue bot pushed a commit that referenced this pull request Nov 28, 2023
The bypass `if` for dependabot PRs added in #19745 is failing `dependency-review` due
to this workflow effectively just proxying to another workflow in `shared-workflows`.
This is causing the workflow to not run at all, and since it's required, it's causing
dependabot PRs to not pass status checks. Remove the bypass for now to make checks
pass again.
github-merge-queue bot pushed a commit that referenced this pull request Nov 28, 2023
The bypass `if` for dependabot PRs added in #19745 is failing `dependency-review` due
to this workflow effectively just proxying to another workflow in `shared-workflows`.
This is causing the workflow to not run at all, and since it's required, it's causing
dependabot PRs to not pass status checks. Remove the bypass for now to make checks
pass again.
github-merge-queue bot pushed a commit that referenced this pull request Nov 28, 2023
The bypass `if` for dependabot PRs added in #19745 is failing `dependency-review` due
to this workflow effectively just proxying to another workflow in `shared-workflows`.
This is causing the workflow to not run at all, and since it's required, it's causing
dependabot PRs to not pass status checks. Remove the bypass for now to make checks
pass again.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants