-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Try adding dependabot across the repo #11281
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
|
create-cloudflare
@cloudflare/kv-asset-handler
miniflare
@cloudflare/pages-shared
@cloudflare/unenv-preset
@cloudflare/vite-plugin
@cloudflare/vitest-pool-workers
@cloudflare/workers-editor-shared
@cloudflare/workers-utils
wrangler
commit: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR adds a new Dependabot configuration to automatically check for npm dependency updates across the repository, excluding workerd and workers-types which are already handled by a separate configuration.
- Adds daily dependency checks for all npm packages except workerd and workers-types
- Configures a 5-day cooldown period between updates (though this option is invalid)
- Uses "increase-if-necessary" versioning strategy to minimize disruption
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| cooldown: | ||
| default-days: 5 |
Copilot
AI
Nov 14, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The cooldown configuration option is not a valid Dependabot configuration option. GitHub's Dependabot does not support this field. If you want to limit the frequency of pull requests, consider using open-pull-requests-limit instead to control how many PRs can be open at once.
| cooldown: | |
| default-days: 5 |
Currently this will not generate the changesets that we usually have for workerd, workers-types and C3 updates.
In the meantime, we could add changesets manually.
If the config looks like it is working we can look into making the tooling more general.