4 ms·
Just another reason not to use dependabot - it's default configuration appears to be created to burn money on GH Actions / Azure.
by elischleifer 3y ago
Just another reason not to use dependabot - it's default configuration appears to be created to burn money on GH Actions / Azure.
- viraptor 3y agoThat's a silly conclusion. This is not dependabot specific - you can achieve the same with any system automatically suggesting merges.
- elischleifer 3y agofair point. I think I've just been burned too many times by dependabot looking to update single ts packages with single line changes. it's default configuration is overly aggresive
- viraptor 3y agoDependabot doesn't try to guess what's in the changes. It can't really tell anyway. A trivial 1 line change may be either "this box is now 1px further to the right", or "a critical bug which will delete all your data tomorrow is fixed". It's up to dependabot to report any change available.
- hinkley 3y agoLooks like several of the core contributors work for github. It is difficult to get a man to understand something, when his salary depends on his not understanding it.
- Qerub 3y agoMay 23, 2019: "Dependabot has been acquired by GitHub and we couldn't be more excited!" https://web.archive.org/web/20190601064131/https://dependabot.com/blog/hello-github/ https://web.archive.org/web/20190601064131/https://dependabo...
- deleted 3y ago[deleted]
- Micrococonut 3y agoJust one more reason to actually read the article instead of just assuming its contents say whatever you want.