question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

How to automate dependabot updates generating a changeset

See original GitHub issue

Affected Packages

cli/actions, etc.

Problem

I want to automate my dependency updates w/ dependabot, but I’ve realized I’m not generating changesets for each dep upgrade - I’d rather sort out a way to automate that, but I’m not sure how!

Proposed solution

My initial idea would be to have a github action that runs on push to main that looks for whether the commit is tagged w/ “dependabot” and then adds a changeset w/ the content of the commit message? ex: https://github.com/snowpackjs/prettier-plugin-astro/pull/14

Issue Analytics

  • State:open
  • Created 2 years ago
  • Reactions:3
  • Comments:8 (7 by maintainers)

github_iconTop GitHub Comments

2reactions
Andaristcommented, Nov 18, 2021

Ye, the proposed command sounds quite nice - we could add support for it. Although from the Changeset PoV a “changed” package (at least at the moment) is a one that had any files changed since the “base branch”. With Renovate bot and stuff you might only change devDependencies of a package and such a change most likely doesn’t deserve a changeset as it doesn’t affect the final consumer of your package.

So I’m unsure what’s the best strategy to handle this case - but we could start with a PR that would implement this using the current “changed” logic and bikeshed this with a PR already in place.

I won’t have time to work on this right now though so I would appreciate a PR from a community member who cares about this feature 😉 I will get to this eventually but it can take some time for me.

1reaction
Andaristcommented, Oct 14, 2021

Yes, this isn’t a thing - it could be possibly implemented, there was just never a need for this. Note that you would still have to know which packages you’d like to include a changeset (unless we would provide special flags like --include-all and --include-changed).

As the changeset files are just markdown files you can freely add them manually, no need to actually generate them through the CLI (it’s just a convenience tool in this regard). The generated filename also doesn’t matter - it is randomized.

Read more comments on GitHub >

github_iconTop Results From Across the Web

How to automate dependabot updates generating a ...
I want to automate my dependency updates w/ dependabot, but I've realized I'm not generating changesets for each dep upgrade - I'd rather ......
Read more >
Automating dependency updates with Dependabot, GitHub ...
Step 1: Enabling Dependabot in the repository · Step 2: Enabling auto-merge in the repository · Step 3: Creating a GitHub action to...
Read more >
How to Automate Dependency Updates with GitHub ...
Setting up Dependabot for GitHub is simple. There are no prerequisites or services to configure outside of your repository. Under the “Settings” ...
Read more >
Can we trust tests to automate dependency updates? A ...
We extract a set of real-world update cases from pull requests generated by the popular service Dependabot and manually investigate the correctness of...
Read more >
Release Notes | Liquibase Docs
Upgrade mockito-inline from 4.8.0 to 4.8.1 by @dependabot in #3382 ... MSSQL using wrong column names when generating a changelog by @filipelautert in...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found