Commit 8cdf2d8
committed
Dependabot: remove
Dependabot has basically _never_ submitted any useful PRs updating the dependencies managed via Composer.
In most cases, it wouldn't be able to anyway as the "widen" strategy only really causes update PRs when a new major of a dependency is released and with a new major of a dependency, we'll generally need to do a managed update, so wouldn't be able to use the Dependabot PR anyhow.
On top of that, it appears to be completely impossible to set any environment variables for the running of Dependabot via GH Actions.
This is problematic as we have a circular dependency via the `phpcsstandards/phpcsdevcs` package since the update to PHPCSDevCS 1.2.0 and the only way to get round that is to set a `COMPOSER_ROOT_VERSION` environment variable.
In practice, this means that since the update to PHPCSDevCS 1.2.0, the action runs for Dependabot are failing, which is not useful.
All in all, I see no upside to continue to have Dependabot enabled for the Composer packages.composer ecosystem1 parent e4fe01a commit 8cdf2d8
1 file changed
Lines changed: 0 additions & 11 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
9 | | - | |
10 | | - | |
11 | | - | |
12 | | - | |
13 | | - | |
14 | | - | |
15 | | - | |
16 | | - | |
17 | | - | |
18 | | - | |
19 | 8 | | |
20 | 9 | | |
21 | 10 | | |
| |||
0 commit comments