-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(mergify): enhance mergify #1865
Conversation
@@ -16,9 +15,9 @@ pull_request_rules: | |||
conditions: | |||
- author=snyk-bot | |||
- check-success~=lint | |||
- check-success~=build |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
may i get context for this regarding why this line was removed?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
added back in, removed by accident.
- check-success~=test | ||
- dependabot-update-type = version-update:semver-minor | ||
- -dependabot-update-type = version-update:semver-major |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
wait am a bit confused, should this not be minor then, according to the pr desc?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Problem
package updates are not automated and we have to look through even minor ones. minor updates should be approved + merged automatically
Solution
update dependabot config to merge minor packages automatically. we auto-merge snyk cos is security issue (open to also changing this to minor)