Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Dependabot: Automated dependency updates and security alerts #53

Merged
merged 2 commits into from
Nov 8, 2020
Merged

Dependabot: Automated dependency updates and security alerts #53

merged 2 commits into from
Nov 8, 2020

Commits on Nov 8, 2020

  1. Improve repository grammar, fiy typos and update references 

    Fixed some paragraphs that contained typos and grammatical mistakes as
well as updating the URLs of some references.
    @svengreb
    svengreb committed Nov 8, 2020
    Configuration menu
    Copy the full SHA
    4f56720 View commit details
    Browse the repository at this point in the history

  2. Add "Dependabot" for automated dependency updates and security alerts 

    In June 2020 Dependabot [1] was [natively integrated into GitHub][2].
This allows to use automated dependency updates [3] and security
vulnerability alerts [4].

Created the `dependabot.yml` file [5] and configured updates for GitHub
Actions and Yarn/NPM. The documentation also mentions the need to
manually enable or disable Dependabot per repository [6].

[1]: https://dependabot.com
[2]: https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot
[3]: https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/configuration-options-for-dependency-updates
[4]: https://docs.github.com/en/free-pro-team@latest/github/managing-security-vulnerabilities/about-alerts-for-vulnerable-dependencies
[5]: https://docs.github.com/en/free-pro-team@latest/github/managing-security-vulnerabilitiesconfiguring-dependabot-security-updates
[6]: https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/enabling-and-disabling-version-updates

GH-52
    @svengreb
    svengreb committed Nov 8, 2020
    Configuration menu
    Copy the full SHA
    bc5d9f1 View commit details
    Browse the repository at this point in the history