TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Disabling Scheduled Dependency Updates

18 点作者 benhoyt8 个月前

4 条评论

ydnaclementine8 个月前
This guy calls it out here, but I will say that the notifications page on github could do with a redesign. If you&#x27;re in a busy org for your job, it&#x27;s not easy to see everything in the org (they limit showing number of notifications per repo), and the volume of notifications from your job org will cover up anything in your personal&#x2F;following repos.<p>Sure you could unfollow work repos you aren&#x27;t interested in, but you&#x27;re automatically following any new ones.
评论 #41653666 未加载
maximilianroos8 个月前
An alternative is to automatically merge dependency changes which pass the tests. Then there&#x27;s no need for any intervention unless something needs your attention, just dismiss the notification.<p>We do this at PRQL, with: <a href="https:&#x2F;&#x2F;github.com&#x2F;PRQL&#x2F;prql&#x2F;blob&#x2F;12b1bb65afd5b67f34b98d0ac140c6cd0d5c4f8b&#x2F;.github&#x2F;workflows&#x2F;pull-request-target.yaml#L71-L102">https:&#x2F;&#x2F;github.com&#x2F;PRQL&#x2F;prql&#x2F;blob&#x2F;12b1bb65afd5b67f34b98d0ac1...</a>
评论 #41651636 未加载
cesnja8 个月前
You get to choose either the mind-numbing churn of constant updates, the risk of updates piling up and becoming unmanageable, or shipping software with vulnerabilities. None of these options sounds fun.
donatj8 个月前
I really wish there was a step before opening a PR, like a page with a list of what&#x27;s out of date that let&#x27;s you click a button to open a PR for one or more dependency updates.
评论 #41654471 未加载