Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use renovate best-practices #6267

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

MrAlias
Copy link
Contributor

@MrAlias MrAlias commented Feb 5, 2025

https://docs.renovatebot.com/upgrade-best-practices/

This addresses some failures we have with the OSSF report card (i.e. dependency pinning of github actions): https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#pinned-dependencies

@MrAlias MrAlias added the Skip Changelog PRs that do not require a CHANGELOG.md entry label Feb 5, 2025
@MrAlias MrAlias added this to the v1.35.0 milestone Feb 5, 2025
@MrAlias MrAlias force-pushed the renovate-best-practices branch from 85140be to 6a93847 Compare February 5, 2025 19:59
Copy link

codecov bot commented Feb 5, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 81.8%. Comparing base (0c62fd1) to head (6a93847).

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##            main   #6267     +/-   ##
=======================================
- Coverage   81.8%   81.8%   -0.1%     
=======================================
  Files        283     283             
  Lines      24892   24892             
=======================================
- Hits       20381   20379      -2     
- Misses      4107    4109      +2     
  Partials     404     404             

see 1 file with indirect coverage changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Skip Changelog PRs that do not require a CHANGELOG.md entry
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants