Consider automating zlint and PSL updates #5796
Comments
|
Putting this on the back burner; it can't be done via dependabot until dependabot/dependabot-core#3017 is resolved. It doesn't look like https://github.com/thepwagner/action-update-go would work either, as it ignores non-semver dependencies too. There are other solutions of course but they would be much more work. |
Merged
aarongable
added a commit
that referenced
this issue
Jun 24, 2022
Create a GitHub Actions workflow that creates a PR to update the publicsuffix-go dependency. This workflow runs monthly, or whenever we choose to trigger it manually. Fixes #5796
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
We have two dependencies (zlint and the public suffix list) that frequently incorporate meaningful non-API changes (new lints and new public suffixes, respectively). We should automate the process for updating these, preferably in the form of a bot which regularly (weekly? when those repos have upstream commits? when those repos have new release tags?) creates PRs for Boulder devs to review and merge. Maybe dependabot can do this for us.
The text was updated successfully, but these errors were encountered: