search

Undertone0809 / P3G

🚀Python Packages Project Generator-Your next Python package needs a bleeding-edge project structure.
MIT License
51 stars 6 forks source link

Document how to automerge dependabot PRs #95

Closed crypdick closed 6 months ago

crypdick commented 6 months ago

🚀 Feature Request

By default, dependabot spams PRs, causing many notifications/emails. It would be nice to set up auto-merging of at least the patch-level PRs.

📎 Additional context

1) enable auto-merging in the General settings image

2) create an automerge action (example here). I personally removed the entire second if condition so that all dependabot PRs are automerged.

Undertone0809 commented 6 months ago

Thanks for your feedback! Whether or not to automatically merge should be left to the developer's choice. If some third-party libraries have destructive updates, automatic merging may have problems. The developer's unit testing may not necessarily cover this destructive update. Although the single test passed, the original API cannot be used due to version updates.

I try to reduce the frequency of dependabot to weekly.

crypdick commented 6 months ago

Thanks, I think the once a week updates are sensible. And I fully agree with you that auto-merging should be up to developer discretion, I just feel like it would be valuable to document how to do it in the repo set-up.

Undertone0809 commented 6 months ago

Agree, I will optimize the documentation to tell the developer that there is a possibility of automatic merging.