Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add versioning-strategy: increase #31

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

archanaserver
Copy link
Contributor

@archanaserver archanaserver commented Oct 29, 2024

This PR adds versioning-strategy: increase to the dependabot.yml configuration. This change is enforce to pin to y-stream, ensuring that dependabot only suggests updates within the existing version constraints.

This PR adds versioning-strategy: increase to the dependabot.yml configuration.
This change is intended to enforce to pin to y-stream, ensuring that
Dependabot only suggests updates within the existing version constraints.
@evgeni
Copy link
Member

evgeni commented Nov 15, 2024

Interestingly, https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#versioning-strategy says that bundler doesn't support widen, which would mean that auto (which we have right now) is the same as increase (which is what you're changing to).
But, https://github.com/theforeman/theforeman-rubocop/pull/30/files clearly looks like widen was used.

That said, could you explain a bit more why you'd want to switch to increase?
Wouldn't that mean we never (automatically) notice newer (and possibly more problematic releases) and rely on manual bumps for those?

We could, to avoid blind bumps, set up CI here that runs Rubocop on Foreman and Katello with the (new) constraints from PRs, so we are more confident whether a bump can become problematic (or not)?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants