Social 📸 Photography

0 posts0 participants0 posts today

Alejandro BaezI should've known an alternative existed for <a href="https://fosstodon.org/tags/dependabot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dependabot</a>. 😅<a href="https://fosstodon.org/tags/renovatebot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#renovatebot</a> is pretty interesting. You can run fairly quickly. And it supports <a href="https://fosstodon.org/tags/gitea" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gitea</a> and <a href="https://fosstodon.org/tags/forgejo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#forgejo</a>. 😎<a href="https://github.com/renovatebot/renovate" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/renovatebot/renovate</a>

Chris is.If you're not following it closely, you might have missed that <a href="https://wandering.shop/tags/uv" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#uv</a> support in <a href="https://wandering.shop/tags/dependabot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dependabot</a> is now available in beta: <a href="https://github.com/dependabot/dependabot-core/issues/10478#issuecomment-2691330949" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/dependabot/dependabot-core/issues/10478#issuecomment-2691330949</a><a href="https://wandering.shop/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a>

viqRunning <a href="https://social.hackerspace.pl/tags/Authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authentik</a> with `latest` tag was convenient for <a href="https://social.hackerspace.pl/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a>, but they're moving away from making it possible (edit: from having :latest tag available, nothing else changes). What are the alternatives? Is there maybe something like "<a href="https://social.hackerspace.pl/tags/dependabot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dependabot</a> but for <a href="https://social.hackerspace.pl/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#kubernetes</a> images"? (I'm currently running on <a href="https://social.hackerspace.pl/tags/podman" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#podman</a> on nixos, but I'm considering finally playing with <a href="https://social.hackerspace.pl/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#k8s</a>, and regardless, this should be able to make it so I have proper image on nixos as well, I think)

Alvin Ashcraft 🐿️Using Dependabot to Manage .NET SDK Updates.<a href="https://buff.ly/3B5F6eD" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://buff.ly/3B5F6eD</a> <a href="https://hachyderm.io/tags/dotnet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dotnet</a> <a href="https://hachyderm.io/tags/dependabot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dependabot</a> <a href="https://hachyderm.io/tags/dependencies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dependencies</a> <a href="https://hachyderm.io/tags/updates" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#updates</a>

Neil CraigIf you're seeing Dependabot PRs on Node projects named "Bump find-my-way and fastify" today and were not already on Fastify v5, be aware you'll need to update your Fastify config/usage (see <a href="https://fastify.dev/docs/latest/Guides/Migration-Guide-V5" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://fastify.dev/docs/latest/Guides/Migration-Guide-V5</a>).The `find-my-way` (indirect for me) update requires Fastify v5 apparently and that broke several projects which weren't on Fastify v5 yet. Luckily (well, intentionally, obv) the breakages were caught by CICD in dev.<a href="https://mastodon.social/tags/Node" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Node</a> <a href="https://mastodon.social/tags/Fastify" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fastify</a> <a href="https://mastodon.social/tags/FindMyWay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FindMyWay</a> <a href="https://mastodon.social/tags/Dependabot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Dependabot</a>

Robert Alexander<a href="https://urbanists.social/@fancysandwiches" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@fancysandwiches</a> I deployed one recently on <a href="https://indieweb.social/tags/digitalocean" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#digitalocean</a> . <a href="https://indieweb.social/tags/traefik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#traefik</a> reverse proxy, Django app, postgres. It's running at N=1 scale for the foreseeable future. It's containerized with <a href="https://indieweb.social/tags/docker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#docker</a> compose. I have a couple GitHub Actions workflows for testing. <a href="https://indieweb.social/tags/dependabot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dependabot</a> keeps the containers updated. Debian unattended-upgrades handles the host.I don't autodeploy yet, I'm not pushing updates often enough and it's new enough that I want eyes on. Eventually, that will be a GitHub action too.

Aral BalkanAnyone else getting swarms of email notifications today that Dependabot was enabled on their GitHub repositories?<a href="https://mastodon.ar.al/tags/github" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#github</a> <a href="https://mastodon.ar.al/tags/dependabot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dependabot</a>

Marian SteinbachIt just occurred to me that using GitHub's <a href="https://gruene.social/tags/dependabot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Dependabot</a> the way they propose, our waste of compute resources (read: carbon dioxide) in CI will multiply.Dependabot opens plenty of PRs. Then when something changes on the base branch, all PRs go through CI again.Let's not take compute for granted. We must become smarter about our energy footprint!

Recent searches

Search options

Administered by:

Server stats:

#dependabot