Re: [edk2-devel] [PATCH v1 1/1] .github/dependabot.yml: Enable dependabot

["Sean" <spbrogan@outlook.com>]

Reviewed-by: Sean Brogan <sean.brogan@microsoft.com>



On 11/10/2022 5:46 AM, Michael Kubacki wrote:
> From: Michael Kubacki <michael.kubacki@microsoft.com>
>
> Enables dependabot in this repo so we can better alerted when
> dependency updates are available.
>
> This GitHub action will automatically create pull requests and
> summarize the dependency details. Because it is a pull request,
> the CI system will validate the dependency update in the pull
> request.
>
> Configures dependabot for:
>
> 1. PIP module updates
> 2. Submodule updates
> 3. GitHub action updates
>
> The maintainers/reviewers of the .github directory were added as
> pull request reviewers so they can be notified when the pull request
> is available.
>
> Cc: Sean Brogan <sean.brogan@microsoft.com>
> Cc: Michael D Kinney <michael.d.kinney@intel.com>
> Signed-off-by: Michael Kubacki <michael.kubacki@microsoft.com>
> ---
>
> Notes:
>      An example of the pull requests created by this change
>      are available on my edk2 fork:
>      
>      https://github.com/makubacki/edk2/pulls
>
>   .github/dependabot.yml | 45 ++++++++++++++++++++
>   1 file changed, 45 insertions(+)
>
> diff --git a/.github/dependabot.yml b/.github/dependabot.yml
> new file mode 100644
> index 000000000000..7f405721fd3d
> --- /dev/null
> +++ b/.github/dependabot.yml
> @@ -0,0 +1,45 @@
> +## @file
> +# Dependabot configuration file to enable GitHub services for managing and updating
> +# dependencies.
> +#
> +# Copyright (c) Microsoft Corporation.
> +# SPDX-License-Identifier: BSD-2-Clause-Patent
> +#
> +# Please see the documentation for all configuration options:
> +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
> +##
> +version: 2
> +updates:
> +  - package-ecosystem: "pip"
> +    directory: "/"
> +    schedule:
> +      interval: "daily"
> +    commit-message:
> +      prefix: "pip"
> +    reviewers:
> +      - "makubacki"
> +      - "mdkinney"
> +      - "spbrogan"
> +
> +  - package-ecosystem: "gitsubmodule"
> +    directory: "/"
> +    schedule:
> +      interval: "daily"
> +    commit-message:
> +      prefix: "submodule"
> +    reviewers:
> +      - "makubacki"
> +      - "mdkinney"
> +      - "spbrogan"
> +
> +  - package-ecosystem: "github-actions"
> +    directory: "/"
> +    schedule:
> +      interval: "weekly"
> +      day: "monday"
> +    commit-message:
> +      prefix: "GitHub Action"
> +    reviewers:
> +      - "makubacki"
> +      - "mdkinney"
> +      - "spbrogan"