Log in
Sign up
See new Tweets

Conversation

Ariadne Conill
@ariadneconill
·
Feb 28
i don't know why dependabot keeps insisting i should upgrade to a dependency that causes CI to break, but cool
3
19
Daniel Micay
@DanielMicay
·
Feb 28
Replying to
@ariadneconill
You can ask it to stop on the pull request: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#creating-ignore-conditions-from-dependabot-ignore… It expects you to deal with the breaking changes or get the upstream bugs in that project fixed otherwise.
docs.github.com
Configuration options for the dependabot.yml file - GitHub Docs
1
2
Daniel Micay
@DanielMicay
Replying to
@DanielMicay
and
@ariadneconill
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/managing-pull-requests-for-dependency-updates#managing-dependabot-pull-requests-with-comment-commands… has the list of commands you can give via pull request. Relevant ones:
@dependabot
ignore this dependency
@dependabot
ignore this major version
@dependabot
ignore this minor version
docs.github.com
Managing pull requests for dependency updates - GitHub Docs
4:21 PM · Feb 28, 2022·Twitter Web App
1
Like