Skip to content

build: Add conventional commits and cooldown to dependabot PRs#61

Merged
nickschuch merged 1 commit intomainfrom
conv-comm
Mar 3, 2026
Merged

build: Add conventional commits and cooldown to dependabot PRs#61
nickschuch merged 1 commit intomainfrom
conv-comm

Conversation

@kimpepper
Copy link
Copy Markdown
Contributor

@kimpepper kimpepper commented Mar 3, 2026

Conventional commits:

  • will prefix dependabot PRs/commit messages with build(deps): to make it easier to filter and review commit history e.g. build(deps): Bump the go-dependencies group with 8 updates

Cooldown:

  • dependabot will not include dependency updates that are less than 1 day old. This can allow a window for supply chain attacks to be discovered and resolved.

@kimpepper kimpepper requested review from nickschuch and nterbogt March 3, 2026 22:06
@nickschuch nickschuch merged commit 27e9c13 into main Mar 3, 2026
2 checks passed
@nickschuch nickschuch deleted the conv-comm branch March 3, 2026 23:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants