Dependabot: only update minor and patch versions #147
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Update dependabot.yml
Bumps the pip-dev-dependencies group with 1 update: [mypy](https://github.com/python/mypy). Updates `mypy` from 1.16.1 to 1.17.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.16.1...v1.17.0) --- updated-dependencies: - dependency-name: mypy dependency-version: 1.17.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dev-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
…encies-a73f3d3ad9 pip-dev: bump mypy from 1.16.1 to 1.17.0 in the pip-dev-dependencies group
Bumps the pip-prod-dependencies group with 1 update: [rich](https://github.com/Textualize/rich). Updates `rich` from 14.0.0 to 14.1.0 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.0.0...v14.1.0) --- updated-dependencies: - dependency-name: rich dependency-version: 14.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-prod-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
…2 updates Bumps the pip-dev-dependencies group with 2 updates in the / directory: [mypy](https://github.com/python/mypy) and [coverage](https://github.com/nedbat/coveragepy). Updates `mypy` from 1.17.0 to 1.17.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.17.0...v1.17.1) Updates `coverage` from 7.9.2 to 7.10.1 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.9.2...7.10.1) --- updated-dependencies: - dependency-name: mypy dependency-version: 1.17.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip-dev-dependencies - dependency-name: coverage dependency-version: 7.10.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dev-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
…dencies-3802bf4746 pip: bump rich from 14.0.0 to 14.1.0 in the pip-prod-dependencies group
…encies-b88649ed44 pip-dev: bump the pip-dev-dependencies group across 1 directory with 2 updates
CI: rework caching and build/test environment
Revert "CI: rework caching and build/test environment"
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Highlights
.github/dependabot.ymlfile to specifyupdate-typesfor bothpip-dev-dependenciesandpip-prod-dependencies. This change limits Dependabot to only propose pull requests for minor and patch version updates, preventing automatic major version upgrades.