Skip to content

Commit e301854

Browse files
committed
Don't limit number of open Dependabot pull requests
The Dependabot service is used to keep the project dependencies updated. Thanks to the project's high quality validation infrastructure, the human effort required to complete a trivial version bump is minimal. However, some bumps may introduce breaking changes that would require a significant amount of effort to accommodate, or are blocked by external tasks. In this case, the Dependabot pull request can't be merged, but should be left open to track the need to perform the bump when it is feasible. This means that it should be expected that there will be regularly be a small number of Dependabot pull requests left open in the repository over long periods of time. The automated system is here to assist the human project maintainers, not as a tyrannical overlord, so this is the system working exactly as intended. By default, Dependabot is configured to stop submitting pull requests if it already has five open pull requests. This means that if it happens that the accumulation of intentionally on-hold pull requests reaches that number, the project stops receiving the easily handled trivial update PRs. This is very harmful because it results in the completely unnecessary use of outdated dependencies, and unnecessary challenging large bumps when pull requests start being submitted once more after the backlog is cleared. The harmful default configuration is hereby overridden by configuring the maximum open pull request limit at 100. This value was chosen as an arbitrary large number simply to functionally disable the limiting, rather than from any expectation that the actual number of open PRs can ever reach that count.
1 parent 4a8f1c4 commit e301854

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

.github/dependabot.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@ updates:
99
directory: / # Check the repository's workflows under /.github/workflows/
1010
assignees:
1111
- per1234
12+
open-pull-requests-limit: 100
1213
schedule:
1314
interval: daily
1415
labels:
@@ -18,6 +19,7 @@ updates:
1819
directory: /
1920
assignees:
2021
- per1234
22+
open-pull-requests-limit: 100
2123
schedule:
2224
interval: daily
2325
labels:
@@ -27,6 +29,7 @@ updates:
2729
directory: /.github/workflows/assets/validate-registry/
2830
assignees:
2931
- per1234
32+
open-pull-requests-limit: 100
3033
schedule:
3134
interval: daily
3235
labels:
@@ -36,6 +39,7 @@ updates:
3639
directory: /
3740
assignees:
3841
- per1234
42+
open-pull-requests-limit: 100
3943
schedule:
4044
interval: daily
4145
labels:

0 commit comments

Comments
 (0)