From 67eb4ae000de830545670ef5de4cd08930a8ef2a Mon Sep 17 00:00:00 2001 From: Jenn Magder Date: Mon, 11 Nov 2024 15:32:05 -0800 Subject: [PATCH] Add dependabot github-actions group (flutter/engine#56468) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit `.github/dependabot.yml` configures dependabot to update the `uses` dependencies needed to run github actions. For example, dependabot opened https://github.com/flutter/engine/pull/56191 and updated all the `.github/workflows/` yaml files to point to the latest version of `actions/checkout` Add a dependabot `group` so all github action dependencies are updated in the same PR, instead of one-per-dependency. For example, if there were an update for `actions/checkout` and `actions/setup-python`, dependabot will send out one PR updating both instead of one PR per dependency. https://github.com/flutter/engine/blob/0d965cb949f105aafc3d3ba20f71e38e170355d0/.github/workflows/third_party_scan.yml#L23-L28 New PRs from dependenabot will look like: __________ Screenshot 2024-11-08 at 11 08 52 AM __________ See also https://github.com/flutter/packages/pull/8044 and https://github.com/flutter/flutter/pull/158408 [C++, Objective-C, Java style guides]: https://github.com/flutter/engine/blob/main/CONTRIBUTING.md#style --- engine/src/flutter/.github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/engine/src/flutter/.github/dependabot.yml b/engine/src/flutter/.github/dependabot.yml index 9688ddae25a..79d1163182c 100644 --- a/engine/src/flutter/.github/dependabot.yml +++ b/engine/src/flutter/.github/dependabot.yml @@ -11,10 +11,14 @@ updates: timezone: "America/Los_Angeles" labels: - "autosubmit" + groups: + all-github-actions: + patterns: [ "*" ] ignore: # ignore patch versions, just rely on minor in order to update fewer times - dependency-name: "github/codeql-action" update-types: ["version-update:semver-minor"] + - package-ecosystem: "pub" directory: "/lib/web_ui" schedule: