Skip to content

chore(dependabot): fix so dependabot dont fail on codeql and ruff che… - #179

Open
Dexter9532 wants to merge 2 commits into
mainfrom
fix-dependabot-fails
Open

chore(dependabot): fix so dependabot dont fail on codeql and ruff che…#179
Dexter9532 wants to merge 2 commits into
mainfrom
fix-dependabot-fails

Conversation

@Dexter9532

Copy link
Copy Markdown
Contributor

…cks in PRs

@Dexter9532
Dexter9532 requested a review from mirzak as a code owner August 3, 2026 13:34

@mirzak mirzak left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It appears to me that there are several changes here, that should be reflected in number of commits.

Comment thread README.md
Comment thread .github/dependabot.yml
Comment on lines +7 to +10
groups:
codeql:
patterns:
- "github/codeql-action/*"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CodeQL requires init, autobuild, and analyze to use the same version. Grouping prevents Dependabot from updating them separately and breaking CI.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please incorporate this information in the commit message.

Comment thread pyproject.toml
@Dexter9532
Dexter9532 force-pushed the fix-dependabot-fails branch 2 times, most recently from 7359bab to aae0b71 Compare August 4, 2026 06:59
@Dexter9532
Dexter9532 requested a review from mirzak August 4, 2026 07:05
CodeQL requires init, autobuild, analyze, and upload-sarif to use the
same version. Group their Dependabot updates to prevent separate upgrades
from breaking CI.

Signed-off-by: Bobob Bäck Engström <bobo@id8-engineering.io>
Ruff 0.16 requires the README example indentation change for
`ruff format --diff .` to pass. CPY001 requires a copyright header in
every Python file; this project keeps its copyright notice in LICENSE,
so ignore the rule instead of duplicating headers across the source tree.

Signed-off-by: Bobob Bäck Engström <bobo@id8-engineering.io>
@Dexter9532
Dexter9532 force-pushed the fix-dependabot-fails branch from aae0b71 to 7f7fe78 Compare August 5, 2026 09:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants