-
Notifications
You must be signed in to change notification settings - Fork 128
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): configure dependabot for pip deps #1538
base: master
Are you sure you want to change the base?
Conversation
In the past I've tested dependabot.yml changes on a personal fork. I'll do the same here. |
Excellent idea, I didn't know/think of that! |
Finally got around to testing this. Here is what it looks like on 2b497e6: |
groups: | ||
dev-deps: | ||
dependency-type: "development" | ||
prod-deps: | ||
dependency-type: "production" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
groups: | |
dev-deps: | |
dependency-type: "development" | |
prod-deps: | |
dependency-type: "production" |
I think it'd be better to consider each update independently (i.e. remove the groups). That would change the Dependabot PRs from being grouped like this:
- Bump the prod-deps group with 4 updates victorlin/augur#6
- Bump the dev-deps group with 2 updates victorlin/augur#5
into this:
- Update pandas requirement from ==1.*,>=1.0.0 to >=1,<3 victorlin/augur#11
- Update jsonschema requirement from ==3.*,>=3.0.0 to >=3,<5 victorlin/augur#10
- Update numpy requirement from ==1.* to >=1,<3 victorlin/augur#9
- Update networkx requirement from ==2.*,>=2.5 to >=2,<4 victorlin/augur#8
- Update pandas-stubs requirement from ==1.*,>=1.0.0 to >=1,<3 victorlin/augur#7
@corneliusroemer do you mind if I apply the suggestion above and merge? |
Relates to #1535
Checklist