Skip to content

Conversation

@landongrindheim
Copy link
Contributor

Summary

This change is being proposed to:

  • Reduce the number of Rubocop-specific pull requests opened by Dependabot
  • Reduce the frequency of Dependabot version updates

Note

Security updates will still run as needed outside of this configuration

Release Note

NONE

Documentation

No

There are three pull requests open currently for Rubocop. My hope is
that grouping these will reduce notification and CI noise while making
merging easier.

Signed-off-by: Landon Grindheim <[email protected]>
woodruffw
woodruffw previously approved these changes Oct 24, 2025
Copy link
Member

@woodruffw woodruffw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fine by me. @landongrindheim could you also add cooldowns to each of these? I think a week of cooldown (so that we never get a dep change that's less than a week old) would be fine 🙂

This should help prevent thrash.

Signed-off-by: Landon Grindheim <[email protected]>
Copy link
Member

@woodruffw woodruffw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@woodruffw woodruffw enabled auto-merge (squash) October 24, 2025 14:37
@woodruffw woodruffw merged commit 6037461 into sigstore:main Oct 24, 2025
42 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants