Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable automatic updates in org for this repo #108

Open
jsumners opened this issue Nov 1, 2023 · 2 comments
Open

Disable automatic updates in org for this repo #108

jsumners opened this issue Nov 1, 2023 · 2 comments

Comments

@jsumners
Copy link
Member

jsumners commented Nov 1, 2023

#107 added a v4 tag so that we can prepare for fastify@5 across all repos. Unfortunately, Dependabot started updating all of our repos from workflows@3 to workflows@4. And then an automation (#107 (comment)) started merging them.

We need to disable this automation for the workflows repo across all projects. We will only ever release a new major of workflows that imposes a major change in all repos that depend upon it.

attn: @mcollina @Fdawgs

@nrayburn-tech
Copy link
Contributor

Is there a better way to do this other than what is being done for the tap dependency? fastify/fastify#5116 (comment)

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#ignore

General syntax I think (not sure about the dependency-name, haven't been able to find docs for referring to the github action name).

updates:
  - package-ecosystem: "github-actions"
    groups:
        ignore:
        - dependency-name: "plugins-ci"
          update-types: ["version-update:semver-major"]

@jsumners
Copy link
Member Author

jsumners commented Nov 5, 2023

The documentation is at https://github.com/fastify/github-action-merge-dependabot#excluding-packages. But I'm not clear if that works with GitHub Actions. It's possible that test needs to be conducted to determine the answer. But maybe one of the maintainers of that action will know (I have never even looked at the code, so I'm not one of them).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants