Ensure dependabot can take automated remediation steps #74
Assignees
Labels
chore
Work that provides indirect value
Comments
|
Dependabot is now opening PRs but stil lrequires a manual step for approval. This is by design. The creators do not want dependabot to be entirely automated to prevent malicious/accidental bad package promotion. |
sbates
added a commit
that referenced
this issue
Jun 7, 2023
Bumps [pathspec](https://github.com/cpburnz/python-pathspec) from 0.10.3 to 0.11.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cpburnz/python-pathspec/releases">pathspec's releases</a>.</em></p> <blockquote> <h2>v0.11.1</h2> <p>Release v0.11.1. See <a href="https://github.com/cpburnz/python-pathspec/blob/v0.11.1/CHANGES.rst">CHANGES.rst</a>.</p> <h2>v0.11.0</h2> <p>Release v0.11.0. See <a href="https://github.com/cpburnz/python-pathspec/blob/v0.11.0/CHANGES.rst">CHANGES.rst</a>.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst">pathspec's changelog</a>.</em></p> <blockquote> <h2>0.11.1 (2023-03-14)</h2> <p>Bug fixes:</p> <ul> <li><code>Issue [#74](https://github.com/cpburnz/python-pathspec/issues/74)</code>_: Include directory should override exclude file.</li> </ul> <p>Improvements:</p> <ul> <li><code>Pull [#75](https://github.com/cpburnz/python-pathspec/issues/75)</code>_: Fix partially unknown PathLike type.</li> <li>Convert <code>os.PathLike</code> to a string properly using <code>os.fspath</code>.</li> </ul> <p>.. _<code>Issue [#74](https://github.com/cpburnz/python-pathspec/issues/74)</code>: <a href="https://redirect.github.com/cpburnz/python-pathspec/issues/74">cpburnz/python-pathspec#74</a> .. _<code>Pull [#75](https://github.com/cpburnz/python-pathspec/issues/75)</code>: <a href="https://redirect.github.com/cpburnz/python-pathspec/pull/75">cpburnz/python-pathspec#75</a></p> <h2>0.11.0 (2023-01-24)</h2> <p>Major changes:</p> <ul> <li>Changed build backend to <code>flit_core.buildapi</code>_ from <code>setuptools.build_meta</code><em>. Building with <code>setuptools</code> through <code>setup.py</code> is still supported for distributions that need it. See <code>Issue [#72](https://github.com/cpburnz/python-pathspec/issues/72)</code></em>.</li> </ul> <p>Improvements:</p> <ul> <li><code>Issue [#72](https://github.com/cpburnz/python-pathspec/issues/72)</code><em>/<code>Pull [#73](https://github.com/cpburnz/python-pathspec/issues/73)</code></em>: Please consider switching the build-system to flit_core to ease setuptools bootstrap.</li> </ul> <p>.. _<code>flit_core.buildapi</code>: <a href="https://flit.pypa.io/en/latest/index.html">https://flit.pypa.io/en/latest/index.html</a> .. _<code>Issue [#72](https://github.com/cpburnz/python-pathspec/issues/72)</code>: <a href="https://redirect.github.com/cpburnz/python-pathspec/issues/72">cpburnz/python-pathspec#72</a> .. _<code>Pull [#73](https://github.com/cpburnz/python-pathspec/issues/73)</code>: <a href="https://redirect.github.com/cpburnz/python-pathspec/pull/73">cpburnz/python-pathspec#73</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cpburnz/python-pathspec/commit/6fd6bee628f5f2746ac46939b13fd127941a73f9"><code>6fd6bee</code></a> Release v0.11.1</li> <li><a href="https://github.com/cpburnz/python-pathspec/commit/335504b17cfe7d82daefad324ac2cc59bef29e13"><code>335504b</code></a> Address 74</li> <li><a href="https://github.com/cpburnz/python-pathspec/commit/6bc1c1d05a509cf222cef8ae1bfc2c2bf2b8e42a"><code>6bc1c1d</code></a> Address 74</li> <li><a href="https://github.com/cpburnz/python-pathspec/commit/183f5e5d972f23bd1f218bd303cb6eeee161929a"><code>183f5e5</code></a> Improve PathLike normalization</li> <li><a href="https://github.com/cpburnz/python-pathspec/commit/7bd8bfa560939aed348e3a789c9460581f6fc050"><code>7bd8bfa</code></a> Merge pull request <a href="https://redirect.github.com/cpburnz/python-pathspec/issues/75">#75</a> from Avasam/partially-unknown-PathLike</li> <li><a href="https://github.com/cpburnz/python-pathspec/commit/c8799790d607fce11ea13e0ca427c81d3f57b744"><code>c879979</code></a> PathLike support 3.8</li> <li><a href="https://github.com/cpburnz/python-pathspec/commit/eaa07733b1175403a6674e7cdae718f0a34e872e"><code>eaa0773</code></a> Fix partially unknown PathLike types</li> <li><a href="https://github.com/cpburnz/python-pathspec/commit/a8ac2068508554077e9910eb82786cdfe89a9141"><code>a8ac206</code></a> Release v0.11.0</li> <li><a href="https://github.com/cpburnz/python-pathspec/commit/9ad260f73193a6a30416dbae28030aad75bfbef7"><code>9ad260f</code></a> Include missing files in sdist</li> <li><a href="https://github.com/cpburnz/python-pathspec/commit/f81afa767afc66df78677a399ddf8fea0ffacd6d"><code>f81afa7</code></a> Update CHANGES</li> <li>Additional commits viewable in <a href="https://github.com/cpburnz/python-pathspec/compare/v0.10.3...v0.11.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Sascha Bates <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Dependabot can update several things non invasively. We want to make sure it’s updating and not just warning that it wants to update.
The text was updated successfully, but these errors were encountered: