Skip to content

Dependencies: lock refresh + pre-commit from dependabot - #1499

Draft
mgovers wants to merge 5 commits into
mainfrom
pgm/feature/dependabot-on-specific-day
Draft

Dependencies: lock refresh + pre-commit from dependabot#1499
mgovers wants to merge 5 commits into
mainfrom
pgm/feature/dependabot-on-specific-day

Conversation

@mgovers

@mgovers mgovers commented Jul 27, 2026

Copy link
Copy Markdown
Member
  • Using Dependabot to update python packages has many benefits for both security and dev experience.
  • Dependabot now groups dependency bumps into a single PR where possible
  • Rather than depend on external pre-commit hooks, we can also use the already installed dependencies in the environment. This enables configuring everything exactly as intended.

Stil TBD: what to do with the (p)npm dependencies markdownlint-cli and biome?

Signed-off-by: Martijn Govers <Martijn.Govers@Alliander.com>
@mgovers mgovers self-assigned this Jul 27, 2026
@mgovers mgovers added dependencies Pull requests that update a dependency file improvement Improvement on internal implementation github_actions Pull requests that update GitHub Actions code labels Jul 27, 2026
power-grid-model-ci-bot Bot and others added 4 commits July 27, 2026 12:54
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Apply suggestion from @mgovers

Signed-off-by: Martijn Govers <Martijn.Govers@Alliander.com>
…k-and-linter

Refresh lock and linter dependencies
Signed-off-by: Martijn Govers <martijn.govers@alliander.com>
Comment thread .github/dependabot.yml
schedule:
interval: "weekly"
interval: "cron"
cronjob: "0 8 * * 1" # Every Monday at 8:00 UTC

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this prevents us from having repo A running dependabot on Monday, repo B on Tuesday and repo C on Saturday, meaning we have to switch contexts way less often after this PR

@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code improvement Improvement on internal implementation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant