-
Notifications
You must be signed in to change notification settings - Fork 21
Update dependabot
to allow patching Kubernetes related dependencies
#504
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
…s for Kubernetes related dependencies
MCK 1.5.0 Release NotesNew Features
Bug Fixes
|
/evergreen retry |
update-types: | ||
- version-update:semver-major | ||
- version-update:semver-minor |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@MaciejKaras I had a look at the Dependabot docs. Do I understand correctly that with this change we say - "you must still not update major and minor versions for us so we can do that manually, but if you see a new patch version - please bump it"?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
yes, that's what I understood as well. We basically block dependabot to think about updating major and minor versions, but allow him to update patches. This is beneficial for any security or plain bug fixes.
Summary
Proof of Work
N/A
Checklist
skip-changelog
label if not needed