chore: remove Dependabot config#157
Merged
Merged
Conversation
There was a problem hiding this comment.
Pull request overview
该 PR 通过删除 .github/dependabot.yml 来停用 Dependabot 自动依赖升级 PR,以减少依赖更新带来的噪音;同时不影响 GitHub 的 Dependabot alerts / security updates(这些由仓库 Code security 设置控制)。
Changes:
- 删除 Dependabot 配置文件,停止自动创建
dependabot/npm_and_yarn/*与dependabot/github_actions/*类型的更新 PR - 简化仓库自动化维护来源(后续如需恢复可重新引入配置并结合
groups/ignore降噪)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
目的
删除
.github/dependabot.yml,停止 Dependabot 自动发起的依赖更新 PR(噪音过多)。影响
dependabot/npm_and_yarn/*和dependabot/github_actions/*自动 PRSettings → Code security中手动操作后续
如果以后想恢复,可以重新添加
.github/dependabot.yml,建议使用groups与更宽的ignore规则减少 PR 数量。