Skip to content

Conversation

@silverwind
Copy link
Member

@silverwind silverwind commented Dec 18, 2025

Enable dependabot for actions only. These should always be safe to update as long as CI passes and some of them are lagging behind.

@GiteaBot GiteaBot added the lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. label Dec 18, 2025
Copy link
Contributor

@TheFox0x7 TheFox0x7 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Renovate would probably be better since it works on gitea (and dependabot doesn't afaik) but it doesn't make much difference in the grand scheme of things.

@GiteaBot GiteaBot added lgtm/need 1 This PR needs approval from one additional maintainer to be merged. and removed lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. labels Dec 18, 2025
@silverwind
Copy link
Member Author

silverwind commented Dec 18, 2025

I guess as long as we are on GitHub, dependabot is preferred because it's easier to configure and It's already in use for security updates. Should be easy enough to switch to another bot as long as we don't use too many exotic features.

@GiteaBot GiteaBot added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels Dec 18, 2025
@silverwind silverwind merged commit e0214ab into go-gitea:main Dec 18, 2025
23 checks passed
@GiteaBot GiteaBot added this to the 1.26.0 milestone Dec 18, 2025
@silverwind silverwind deleted the dependabot branch December 18, 2025 19:12
zjjhot added a commit to zjjhot/gitea that referenced this pull request Dec 19, 2025
* giteaofficial/main:
  Add JSON linting (go-gitea#36192)
  Bump setup-node to v6, re-enable cache (go-gitea#36207)
  [skip ci] Updated translations via Crowdin
  Update chroma to v2.21.1 (go-gitea#36201)
  Disable dependabot automatic labels (go-gitea#36203)
  Bump astral-sh/setup-uv from 6 to 7 (go-gitea#36198)
  Front port changelog (go-gitea#36193)
  Bump dev-hanz-ops/install-gh-cli-action from 0.1.0 to 0.2.1 (go-gitea#36195)
  Bump aws-actions/configure-aws-credentials from 4 to 5 (go-gitea#36196)
  Bump docker/build-push-action from 5 to 6 (go-gitea#36197)
  Enable dependabot for actions (go-gitea#36191)
  Bump alpine to 3.23 (go-gitea#36185)
  Use gitRepo as parameter instead of repopath when invoking sign functions (go-gitea#36162)
  Fix bug when creating pull request (go-gitea#36166)
  Bump golangci-lint to 2.7.2, enable modernize stringsbuilder (go-gitea#36180)
  Use a migration test instead of a wrong test which populated the meta test repositories and fix a migration bug (go-gitea#36160)
  Update JS deps and eslint enhancements (go-gitea#36147)
  Add git.DIFF_RENAME_SIMILARITY_THRESHOLD option (go-gitea#36164)
  Fix OrgAssignment opts (go-gitea#36174)

# Conflicts:
#	models/user/user.go
@silverwind
Copy link
Member Author

silverwind commented Dec 19, 2025

In the future it will likely be renovate, see #33386 (comment).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. modifies/internal

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants