Skip to content

Conversation

@Ninja3047
Copy link
Contributor

Makes the dependabot updates way easier to review and less wasteful

@DarkaMaul i saw that you had split up the github action updates due to a bug? Curious how you tested it. (#42)

I'm hoping they fixed it after a year since it's quite annoying to have to go through like 2n dependabot updates every time there's an update

@Ninja3047 Ninja3047 requested a review from DarkaMaul November 29, 2025 02:12
@DarkaMaul
Copy link
Contributor

DarkaMaul commented Dec 1, 2025

I tested using a fork, and downgrading a GitHub action version to have dependabot pick the new version.

I believe this is still not fixed: https://github.com/DarkaMaul/cookiecutter-python

It opened a single PR to update the template github action but not the one from the repository and the update failed with a cryptic error:

Errored with the message "Dependabot failed to create a pull request"

Note: You can force a dependabot run in https://github.com/DarkaMaul/cookiecutter-python/network/updates

@Ninja3047
Copy link
Contributor Author

Screenshot 2025-12-03 at 12 17 09 AM got it working in my private fork i think the issue may have been i accidentally tabbed the yaml too much so it just barfed with no error

@DarkaMaul
Copy link
Contributor

CI passed also on the testing fork - great job here: https://github.com/DarkaMaul/cookiecutter-python/actions/runs/19887687486/job/56998530410

Sadly, I think we can't ask GitHub to check multiple dependabot configuration file automatically (only the one in .github/dependabot.yml is validated).

@Ninja3047 Ninja3047 merged commit e445f95 into main Dec 3, 2025
8 checks passed
@Ninja3047 Ninja3047 deleted the group-dependabot branch December 3, 2025 14:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants