feat: add support for dependabot 🥳#1370
feat: add support for dependabot 🥳#1370mcollina merged 3 commits intonodejs:mainfrom vinayakkulkarni:feat/add-support-for-dependabot
Conversation
Signed-off-by: Vinayak Kulkarni <[email protected]>
|
We only have dev deps so there is a risk this just leads to annoying notifications with little value. |
|
I partially concur. I think it might be useful with a less annoying config like: https://github.com/fastify/fastify/blob/main/.github/dependabot.yml I would also recommend we add https://github.com/fastify/fastify/blob/main/.github/dependabot.yml, configured like https://github.com/fastify/fastify/blob/da8fafdc2132cde357230fa5b43344058fdd3586/.github/workflows/ci.yml#L82. In this way the amount of manual work is greatly reduced. |
Signed-off-by: Vinayak Kulkarni <[email protected]>
Signed-off-by: Vinayak Kulkarni <[email protected]>
Codecov Report
@@ Coverage Diff @@
## main #1370 +/- ##
=======================================
Coverage 94.25% 94.25%
=======================================
Files 45 45
Lines 4211 4211
=======================================
Hits 3969 3969
Misses 242 242 Continue to review full report at Codecov.
|
dependabotso that all the package dependencies are kept up-to-date withnpmso as to mitigate any vulnerabilities in older versions of packages.