From 50f834f3feb56478f80c491aae421ea16b97a6b1 Mon Sep 17 00:00:00 2001 From: Pil0tXia Date: Mon, 27 May 2024 12:44:46 +0800 Subject: [PATCH 1/3] a more standard way to prevent creating dependabot PRs --- .github/dependabot.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5fe85e65..a6fcca82 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -27,12 +27,13 @@ updates: update-types: [ "version-update:semver-major" ] - package-ecosystem: "npm" directory: "./eventmesh-dashboard-view" + # Disable front-end PRs temporarily since 'npm run build' fails + open-pull-requests-limit: 0 schedule: interval: "monthly" ignore: - dependency-name: "*" - # Disable front-end PRs temporarily since 'npm run build' fails - update-types: [ "version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch" ] + update-types: [ "version-update:semver-major", "version-update:semver-patch" ] - package-ecosystem: "github-actions" directory: "/" schedule: From 2dea03dbc326b13f5c8410fabe4fd96e012f6679 Mon Sep 17 00:00:00 2001 From: Pil0tXia Date: Mon, 27 May 2024 12:52:02 +0800 Subject: [PATCH 2/3] approve if the PR author is dependabot --- .github/workflows/auto-dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/auto-dependabot.yml b/.github/workflows/auto-dependabot.yml index 0d43a058..512a43f6 100644 --- a/.github/workflows/auto-dependabot.yml +++ b/.github/workflows/auto-dependabot.yml @@ -27,7 +27,7 @@ jobs: # Pull request Auto merge is not enabled for this repository dependabot: runs-on: ubuntu-latest - if: github.actor == 'dependabot[bot]' + if: github.event.pull_request.user.login == 'dependabot[bot]' steps: - name: Dependabot metadata id: metadata From b51a3b912146b354e7f7959dab1a1e6f2e6f06b4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 May 2024 04:53:23 +0000 Subject: [PATCH 3/3] chore(deps): bump io.etcd:jetcd-core from 0.7.7 to 0.8.0 Bumps [io.etcd:jetcd-core](https://github.com/etcd-io/jetcd) from 0.7.7 to 0.8.0. - [Release notes](https://github.com/etcd-io/jetcd/releases) - [Changelog](https://github.com/etcd-io/jetcd/blob/main/CHANGELOG.md) - [Commits](https://github.com/etcd-io/jetcd/compare/jetcd-0.7.7...jetcd-0.8.0) --- updated-dependencies: - dependency-name: io.etcd:jetcd-core dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- eventmesh-dashboard-core/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eventmesh-dashboard-core/pom.xml b/eventmesh-dashboard-core/pom.xml index 135ba00d..73ed5fab 100644 --- a/eventmesh-dashboard-core/pom.xml +++ b/eventmesh-dashboard-core/pom.xml @@ -83,7 +83,7 @@ io.etcd jetcd-core - 0.7.7 + 0.8.0