webmozarts / glob

A PHP implementation of Ant's glob.
MIT License
254 stars 16 forks source link

Upgrade to GitHub-native Dependabot #38

Closed dependabot-preview[bot] closed 3 years ago

dependabot-preview[bot] commented 3 years ago

Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then.

Dependabot has been fully integrated into GitHub, so you no longer have to install and manage a separate app. This pull request migrates your configuration from Dependabot.com to a config file, using the new syntax. When merged, we'll swap out dependabot-preview (me) for a new dependabot app, and you'll be all set!

With this change, you'll now use the Dependabot page in GitHub, rather than the Dependabot dashboard, to monitor your version updates, and you'll configure Dependabot through the new config file rather than a UI.

You have configured automerging on this repository. There is no automerging support in GitHub-native Dependabot, so these settings will not be added to the new config file. Several 3rd-party GitHub Actions and bots can replicate the automerge feature.

If you've got any questions or feedback for us, please let us know by creating an issue in the dependabot/dependabot-core repository.

Learn more about migrating to GitHub-native Dependabot

Please note that regular @dependabot commands do not work on this pull request.

Ocramius commented 3 years ago

Note: only once auto-merge is also added to the workflow

On Thu, Apr 29, 2021, 00:38 dependabot-preview[bot] < @.***> wrote:

Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then.

Dependabot has been fully integrated into GitHub, so you no longer have to install and manage a separate app. This pull request migrates your configuration from Dependabot.com to a config file, using the new syntax https://help.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates. When merged, we'll swap out dependabot-preview (me) for a new dependabot app, and you'll be all set!

With this change, you'll now use the Dependabot page in GitHub https://github.com/webmozarts/glob/network/updates, rather than the Dependabot dashboard https://app.dependabot.com/, to monitor your version updates, and you'll configure Dependabot through the new config file rather than a UI.

You have configured automerging on this repository. There is no automerging support in GitHub-native Dependabot, so these settings will not be added to the new config file. Several 3rd-party GitHub Actions and bots can replicate the automerge feature.

If you've got any questions or feedback for us, please let us know by creating an issue in the dependabot/dependabot-core https://github.com/dependabot/dependabot-core/issues/new?assignees=%40dependabot%2Fpreview-migration-reviewers&labels=E%3A+preview-migration&template=migration-issue.md repository.

Learn more about migrating to GitHub-native Dependabot http://docs.github.com/code-security/supply-chain-security/upgrading-from-dependabotcom-to-github-native-dependabot

Please note that regular @dependabot commands do not work on this pull request.

You can view, comment on, or merge this pull request online at:

https://github.com/webmozarts/glob/pull/38 Commit Summary

  • Upgrade to GitHub-native Dependabot

File Changes

Patch Links:

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/webmozarts/glob/pull/38, or unsubscribe https://github.com/notifications/unsubscribe-auth/AABFVEH6DLJOTVIQJAX7F7DTLCE5VANCNFSM43X66BWQ .

dependabot-preview[bot] commented 3 years ago

As a reminder, Dependabot Preview will be shut down on August 3rd, 2021. You can merge this pull request to migrate to GitHub-native Dependabot. You can read the docs to learn more about what's changing, as well as find out how to get support if you need help migrating.

Ocramius commented 3 years ago

Closing here: will upgrade dependabot separately, mirroring work I'll do for roave/* repository later this or next week.