Skip to content

chore: prefer a single Dependabot PR#405

Merged
liujuanjuan1984 merged 1 commit intomainfrom
discussion/404-single-dependabot-pr
Apr 9, 2026
Merged

chore: prefer a single Dependabot PR#405
liujuanjuan1984 merged 1 commit intomainfrom
discussion/404-single-dependabot-pr

Conversation

@liujuanjuan1984
Copy link
Copy Markdown
Collaborator

概要

将 Dependabot 配置收敛为单 PR 风格:仅保留 uv 自动版本更新,并将全部 uv 可升级项合并为单个每周 PR,以降低依赖升级审阅噪声。

变更

.github

  • 更新 .github/dependabot.yml
  • 移除 github-actions 的 Dependabot 自动升级配置
  • uvopen-pull-requests-limit 收敛为 1
  • uv 全部更新合并为单个分组 uv-all-updates

scripts

  • 更新 scripts/README.md
  • 明确仓库偏好单个每周 uv Dependabot PR
  • 保持 dependency_health.sh 作为显式依赖审计入口

tests

  • 更新 tests/scripts/test_script_health_contract.py
  • 将契约断言调整为单 PR 偏好:不再允许 github-actions ecosystem,要求 uv 仅保留单分组与单并发 PR

验证

  • uv run pytest tests/scripts/test_script_health_contract.py
  • ./scripts/doctor.sh
  • bash ./scripts/dependency_health.sh

关联

@liujuanjuan1984 liujuanjuan1984 marked this pull request as ready for review April 9, 2026 17:36
@liujuanjuan1984 liujuanjuan1984 merged commit a3e8aa7 into main Apr 9, 2026
3 checks passed
@liujuanjuan1984 liujuanjuan1984 deleted the discussion/404-single-dependabot-pr branch April 9, 2026 17:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[chore] 将 Dependabot 收敛为单 PR 风格

1 participant