Skip to content

Configure Dependabot for Python dependencies #41

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 27, 2021
Merged

Configure Dependabot for Python dependencies #41

merged 1 commit into from
May 27, 2021

Conversation

per1234
Copy link
Contributor

@per1234 per1234 commented May 27, 2021

With the introduction of Python-based integration tests, the Python dependencies of the project become more significant.
Since we already have the Dependabot infrastructure in place for managing dependencies of the project's Go code and
GitHub Actions workflows, it makes sense to do the same for the Python dependencies as well.

Reference:
https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#about-the-dependabotyml-file

With the introduction of Python-based integration tests, the Python dependencies of the project become more significant.
Since we already have the Dependabot infrastructure in place for managing dependencies of the project's Go code and
GitHub Actions workflows, it makes sense to do the same for the Python dependencies as well.
@per1234 per1234 added type: enhancement Proposed improvement topic: infrastructure Related to project infrastructure labels May 27, 2021
@per1234 per1234 requested review from silvanocerza, umbynos and rsora May 27, 2021 03:04
@per1234 per1234 merged commit d10b06f into arduino:main May 27, 2021
@per1234 per1234 deleted the python-dependabot branch May 27, 2021 07:47
@per1234 per1234 self-assigned this Nov 20, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
topic: infrastructure Related to project infrastructure type: enhancement Proposed improvement
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants