Conversation
|
This PR is linked to a ticket in an NHS Digital JIRA Project. Here's a handy link to the ticket: AEA-0000 |
There was a problem hiding this comment.
Pull request overview
Adjusts the timing/frequency of automated maintenance updates by changing a scheduled workflow run day and introducing a Dependabot cooldown to reduce update churn.
Changes:
- Change
update_dev_container_versionworkflow cron from Monday to Thursday. - Add
cooldown.default-days: 3to Dependabot update configurations (GitHub Actions, pip, npm).
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
.github/workflows/update_dev_container_version.yml |
Shifts the scheduled run day for devcontainer version update automation. |
.github/dependabot.yml |
Adds a cooldown period intended to reduce how frequently Dependabot raises updates. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| cooldown: | ||
| default-days: 3 |
There was a problem hiding this comment.
The new cooldown setting is non-obvious in Dependabot configs; please add a short inline comment (or link to the official Dependabot docs) explaining what default-days: 3 affects (e.g., version updates vs security updates) so future maintainers can verify/adjust it confidently.
| workflow_dispatch: | ||
| schedule: | ||
| - cron: "0 18 * * 1" | ||
| - cron: "0 18 * * 4" |
There was a problem hiding this comment.
The PR description only mentions Dependabot cooldown, but this changes the devcontainer update workflow schedule day as well. Please update the PR description (or ticket reference) to reflect the additional automation scheduling change so reviewers/auditors understand the intent.
|
Summary
Details