Closed GenevieveBuckley closed 3 months ago
Decisions made in the zulip discussion:
Not sure what was happening with the flaky CI test (Windows python 3.9). There were a couple of failures there, but I can't reproduce it, and the CI checks have all passed now.
Closes https://github.com/napari/cookiecutter-napari-plugin/issues/120
Dependabot is a useful tool for security updates of dependencies.
It benefits our wider napari plugin ecosystem to make it as easy as possible to keep plugins up to date, and free from known security vulnerabilities.
This PR:
.github/dependabot.yml
file, to run dependabot on the cookiecutter template repo.{{cookiecutter.plugin_name}}/.github/dependabot.yml
file, to run dependabot on the child plugin repo.README.md
, explaining how to enable dependabot in your github settingsI modeled the
.github/dependabot.yml
files on the python example here: https://til.simonwillison.net/github/dependabot-python-setupXref: https://github.com/napari/napari-plugin-template/pull/6 (both this PR and the other one are generated from the exact same branch)