Chore: [AEA-0000] - Dependabot cooldown#715
Conversation
|
This PR is linked to a ticket in an NHS Digital JIRA Project. Here's a handy link to the ticket: AEA-0000 |
There was a problem hiding this comment.
Pull request overview
Adds a short “cooldown” period to reduce Dependabot PR churn and introduces an automated workflow for updating the devcontainer version.
Changes:
- Add
cooldown.default-days: 3to each configured Dependabot ecosystem. - Add a scheduled + manually triggered workflow to run the shared “update devcontainer version” reusable workflow.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
.github/dependabot.yml |
Adds a 3-day cooldown setting to GitHub Actions, pip (Poetry), and npm Dependabot update configs. |
.github/workflows/update_dev_container_version.yml |
New scheduled workflow invoking the shared devcontainer version update workflow. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| name: Update Devcontainer Version | ||
|
|
||
| on: | ||
| workflow_dispatch: | ||
| schedule: | ||
| - cron: "0 18 * * 4" |
There was a problem hiding this comment.
The PR title/description focus on Dependabot cooldown, but this file introduces a new scheduled workflow to update the devcontainer version. Please update the PR description to cover this additional change (or split it into a separate PR) so reviewers understand the intent and expected impact.
|
|



Summary
Details