FredrikNoren / ungit

The easiest way to use git. On any platform. Anywhere.
MIT License
10.42k stars 637 forks source link

Update dependencies once a month #1457

Open ylecuyer opened 3 years ago

ylecuyer commented 3 years ago

I'm tired of receiving an update dependencies notification almost all days. Once a month should be good enough.

ylecuyer commented 3 years ago

@campersau could you merge this please :3

campersau commented 3 years ago

I personally find it quite useful as it makes spotting breaking changes in dependencies, including git, early. (Like https://github.com/FredrikNoren/ungit/commit/c106484b8cda94e9a51e51cd72b2ffae45c20543, https://github.com/FredrikNoren/ungit/commit/cdc0e9d65d5ea6f42af2b495ea02988acef71796, https://github.com/FredrikNoren/ungit/commit/1d8b9037a6967a59f807166cdaabb2702e82c378, https://github.com/FredrikNoren/ungit/commit/c642d039b4edc942f75ad4d2c813fd5df74cd784) Maybe it could be changed to only create / update a PR if tests fail, but since we support different OSs with different git versions it isn't easy to do.

ylecuyer commented 3 years ago

Or maybe we can change the level to security bump only ? I hope we won't have a notification each day with such setup