From 93e8073df746a8a107c842331e7cca6dece0e8db Mon Sep 17 00:00:00 2001 From: ChrisBAshton Date: Thu, 17 Oct 2024 10:46:01 +0100 Subject: [PATCH 1/2] Disable all Dependabot updates apart from security ones Updating Rails and govuk_publishing_components can be particularly onerous. A recent release of govuk_publishing_components v40+ (updating apps to govuk-frontend v5) required updating a number of files, which proved reasonably complex and was not a good use of developer time. We believe the risk of changing the dependabot policy for these repos is low. If there were a security risk with a dependency, and if applying it was made more difficult due to us having fallen too far behind, we could either persevere with the patching, or use it as impetus to prioritise retiring the app, or temporarily take the app offline. In any case, usage is so negligible that publisher activity is unlikely to be affected. Disabling non-security updates as per: https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates > If you only require security updates and want to exclude version updates, you can set open-pull-requests-limit to 0 in order to prevent version updates for a given package-ecosystem. Trello: https://trello.com/c/kpf7rWEq/2979-change-dependabot-configs-for-content-publisher-and-maslow --- .github/dependabot.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 8f5a45cd..4a1fb31f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,8 +4,9 @@ updates: directory: / schedule: interval: daily - + open-pull-requests-limit: 0 - package-ecosystem: npm directory: / schedule: interval: daily + open-pull-requests-limit: 0 From bb1512707e07558d81ce38a505194692153e8d4d Mon Sep 17 00:00:00 2001 From: ChrisBAshton Date: Thu, 17 Oct 2024 10:48:26 +0100 Subject: [PATCH 2/2] Add deprecation notice to README --- README.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 405bed0a..a7234de2 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,8 @@ -# Maslow +# Maslow (DEPRECATED) + +> **NOTE**: This project is deprecated and is [planned to be retired](https://github.com/alphagov/govuk-rfcs/blob/main/rfc-161-technical-direction-in-publishing-2023.md). + +--- Maslow is a tool to create and manage user needs.