-
Notifications
You must be signed in to change notification settings - Fork 44
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
github: group osrd-ui dependabot upgrades #10225
Conversation
osrd-ui has an unusual versioning scheme: it uses 0.0.x and all releases may contain breaking changes. Signed-off-by: Simon Ser <[email protected]>
This still allows dependabot to bump osrd-ui ? I'm afraid some "ghost" changes which doesn't break the CI - like one in v0.0.58 - might be forgotten. Or should we still allow it and be more rigorous for these kind of changes (like always creating a separated issue from the bump) ? |
dependabot will create a separate PR with all osrd-ui upgrades. Then it's up to the reviewer to check the changelog and make sure the breaking changes are all accounted for. I don't think there's anything really osrd-ui-specific here, any dependency upgrade can pass CI and still break stuff :P |
It's kind of an edge case anyway as most of the time we bump |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed the syntax, no opinion on this
osrd-ui has an unusual versioning scheme: it uses 0.0.x and all releases may contain breaking changes.