DEV Community

loading...

Dependabot: what is your favorite configuration (approach)?

JavaScript Room
Blog about web development
・1 min read

Hello everyone! You probably well know and often use Dependabot in your projects. It's quite nice tool for automating the management of a project dependencies. I also use it on many Github repositories I manage. And recently I started noticing that I spend quite some time to manage the PRs. Dependabot can easily overwhelm you with the auto-generated PRs. Especially if you manage many repositories.

My typical config is quite simple right now:

# .github/dependabot.yml

version: 2
updates:
  - package-ecosystem: npm
    directory: "/"
    schedule:
      interval: daily
    commit-message:
      prefix: "[skip ci]: "
Enter fullscreen mode Exit fullscreen mode

I was wondering what hacks do you guys use in your routine? Maybe you have found a nice approach here? Please share it if so! Thank you all in advance!

Discussion (0)