Skip to content

chore: update dependencies each day with dependabot - #150

Merged
zimeg merged 1 commit into
mainfrom
dependabot-daily
Oct 13, 2026
Merged

zimeg merged 1 commit into
mainfrom
dependabot-daily

Conversation

@zimeg

@zimeg zimeg commented Oct 13, 2026

Copy link
Copy Markdown
Member

Summary

This pull request checks github-actions and pip dependencies each day instead of each month. A 7-day cooldown waits for new releases to settle first, except for slack-* packages such as slack-bolt and slack-cli-hooks, which update right away.

Testing

  • zizmor .github reports no findings.
  • After merge, @dependabot opens version updates on a daily schedule.

🤖 Generated with Claude Code

Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>
@zimeg
zimeg requested a review from a team as a code owner October 13, 2026 23:17
@zimeg zimeg self-assigned this Oct 13, 2026

@zimeg zimeg left a comment

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📣 A comment before merge for @dependabot

Comment thread .github/dependabot.yml
Comment on lines 9 to +16
- package-ecosystem: "pip"
directory: "/"
schedule:
interval: "monthly"
interval: "daily"
cooldown:
default-days: 7
exclude:
- "slack-*"

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🐍 note: We want to keep fast updates for slack packages so this is allowed for:

  • slack-bolt
  • slack-cli-hooks

@zimeg
zimeg merged commit b86a28a into main Oct 13, 2026
3 checks passed
@zimeg
zimeg deleted the dependabot-daily branch October 13, 2026 23:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant