Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependabot spamming workflow runs #156

Closed
jaraco opened this issue Dec 26, 2024 · 3 comments
Closed

Dependabot spamming workflow runs #156

jaraco opened this issue Dec 26, 2024 · 3 comments

Comments

@jaraco
Copy link
Owner

jaraco commented Dec 26, 2024

Sometime recently, I've started seeing the actions page spammed by dependabot runs about pip in /.:

image

This noise is impeding my ability to track the history of actual changes.

I see it was enabled in #50. @KOLANICH can you investigate and advise on a workaround? If this noise can't be suppressed, I'll need to disable dependabot.

@jaraco jaraco closed this as completed in aee344d Feb 12, 2025
@bswck
Copy link
Contributor

bswck commented Feb 13, 2025

@jaraco We could as well change the interval to monthly, wdyt?

@bswck
Copy link
Contributor

bswck commented Feb 13, 2025

Here's the config I am using:
https://github.com/bswck/autohelper/blob/14a5ac159fcce98da99cd7a37f878ca881c7d428/.github/dependabot.yml

I can open a PR if you're interested.

@jaraco
Copy link
Owner Author

jaraco commented Feb 16, 2025

Here's the config I am using: https://github.com/bswck/autohelper/blob/14a5ac159fcce98da99cd7a37f878ca881c7d428/.github/dependabot.yml

...
I can open a PR if you're interested.

That all sound suitable. Happy to accept it.

To be sure, the value I've gotten from dependabot has been net negative. I don't get a lot of PRs from dependabot, but the PRs it does make are more often incorrect than correct. That is, it breaks the build or makes assumptions that conflict with my intention. I may have merged a PR from dependabot, but I can't recall a specific instance.

I've previously accepted the PR because others seem to be deriving value from it, but I'm personally better off without it, and it's one less piece of boilerplate and debt surface to manage.

That said, this project isn't about me but about creating a healthy ecosystem, so send the PR and assuming it's minimally disruptive, we can keep it.

clrpackages pushed a commit to clearlinux-pkgs/pypi-setuptools that referenced this issue Feb 27, 2025
…version 75.8.1

Anderson Bravalheri (7):
      Fix new mandatory configuration for RTD
      Add workaround for GHA failur in 'macos-latest' with 3.9
      Attempt to solve problems with cygwin in the CI
      Add command for debugging purposes
      Attempt to install missing dependencies
      Try to install tox using 'pip' on cygwin
      Bump version: 75.8.0 → 75.8.1

Dustin Ingram (12):
      Fix wheel file naming
      Fix bug in test
      Fix pesky test
      Fix linting
      Add newsfragment
      Ignore missing coverage in test
      Call make_nspkg_sdist with 'foo.bar' distname
      Don't normalize the distname in `make_nspkg_sdist`
      Require that `distname` contain at least one period
      Normalize distname in `create_setup_requires_package`
      Consolidate `safe_name`/`safer_name` logic
      Remove unnecessary use of `make_nspkg_sdist`

Jason R. Coombs (2):
      Bump badge for 2025.
      Removing dependabot config. Closes jaraco/skeleton#156

Marc Mueller (1):
      Fix ruff issues

Nathan Goldbaum (5):
      Fix crash formatting error message
      add release note entry
      Update bdist_wheel.py
      Update setuptools/command/bdist_wheel.py
      Update setuptools/command/bdist_wheel.py

Sam James (1):
      Update CFLAGS docs to reflect distutils change
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants