Skip to content

Chore: [AEA-0000] - Dependabot cooldown #487

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
anthony-nhs merged 3 commits into from
Mar 27, 2026
Merged

Chore: [AEA-0000] - Dependabot cooldown #487

Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f79c210
add workflow to update dev container
anthony-nhs Mar 25, 2026
b2df8f1
use dependabot cooldown
anthony-nhs Mar 25, 2026
a4787f9
Merge remote-tracking branch 'origin/main' into dependabot_cooldown
anthony-nhs Mar 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 9 additions & 2 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,8 @@ updates:
open-pull-requests-limit: 20
commit-message:
prefix: "Upgrade: [dependabot] - "
cooldown:
default-days: 3
- package-ecosystem: "github-actions"
# Workflow files stored in the
# default location of `.github/workflows`
Expand All @@ -34,7 +36,8 @@ updates:
open-pull-requests-limit: 20
commit-message:
prefix: "Upgrade: [dependabot] - "

cooldown:
default-days: 3
###################################
# NPM workspace ##################
###################################
Expand All @@ -50,7 +53,8 @@ updates:
prefix: "Upgrade: [dependabot] - "
registries:
- npm-github

cooldown:
default-days: 3
###################################
# Java workspace ##################
###################################
Expand All @@ -64,3 +68,6 @@ updates:
open-pull-requests-limit: 20
commit-message:
prefix: "Upgrade: [dependabot] - "
cooldown:
default-days: 3

19 changes: 19 additions & 0 deletions .github/workflows/update_dev_container_version.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
name: Update Devcontainer Version

on:
workflow_dispatch:
schedule:
- cron: "0 18 * * 4"
Comment on lines +1 to +6
Copy link

Copilot AI Mar 25, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR description mentions only adding a Dependabot cooldown, but this workflow file is also introduced. Please either update the PR description to include the devcontainer update workflow, or move this workflow change into its own PR to keep scope clear.

Copilot uses AI. Check for mistakes.

jobs:
update_devcontainer_version:
Copy link

Copilot AI Mar 25, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This repo pins NHSDigital/eps-common-workflows reusable workflows to the same commit SHA elsewhere, but this new workflow uses a different SHA. To avoid inconsistent behavior and simplify future upgrades, align this to the same pinned SHA used in the other workflow calls (or document why this workflow needs a different revision).

Suggested change
update_devcontainer_version:
update_devcontainer_version:
# Intentionally pinned to this specific revision of eps-common-workflows; this SHA may
# differ from other workflow calls in this repo because devcontainer updates rely on
# behavior introduced in this version.

Copilot uses AI. Check for mistakes.
uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@d2a4595b1bfa59f04c7cecb080a126321d42a333
permissions:
contents: read
packages: read
pull-requests: write
with:
base_branch: main
secrets:
AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}
Loading