3 ms·
Dependabot already differentiates between version updates and security updates: https://docs.github.com/en/code-security/dependabot/dependabot-security-updates
by zingababba 1y ago
Dependabot already differentiates between version updates and security updates:
https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates https://docs.github.com/en/code-security/dependabot/dependab...
https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates https://docs.github.com/en/code-security/dependabot/dependab...
- jerf 1y agoI have only skimmed the docs and I wouldn't be completely shocked if there's a "wait X weeks/months to notify about non-security updates" but I don't know about it if it's there. If it is there, hey, great! Won't be the first time I really wished that X did Y and found out that yes it already does.
- morningsam 1y agoSeems like this was requested in 2021 and is currently in beta testing for select ecosystems only: https://github.com/dependabot/dependabot-core/issues/3651 https://github.com/dependabot/dependabot-core/issues/3651