php-parallel-lint / PHP-Console-Highlighter

100%

master: 100%

LAST BUILD ON BRANCH feature/dependabot-every-two-weeks

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• coveralls
• dependabot/github_actions/action-runners-0937e01b9e
• dependabot/github_actions/action-runners-73dc52d6a4
• dependabot/github_actions/actions/checkout-4
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/checkout-6.0.0
• dependabot/github_actions/coverallsapp/github-action-2
• dependabot/github_actions/ramsey/composer-install-3
• feature/README-move-badges-up
• feature/add-dependabot-config-for-ghactions
• feature/changelog-minor-touchup
• feature/composer-credit-contributors
• feature/dependabot-every-two-weeks
• feature/fix-test-runtime-deprecations-php-8.5
• feature/ghactions-cache-busting
• feature/ghactions-do-not-persist-credentials
• feature/ghactions-dont-use-set-output
• feature/ghactions-harden-cs-steps
• feature/ghactions-jobs-should-have-name
• feature/ghactions-pin-action-runners
• feature/ghactions-show-startup-errors
• feature/ghactions-switch-to-coveralls-reporter
• feature/ghactions-tweak-php-versions
• feature/ghactions-update
• feature/ghactions-update-for-php-8.4-release
• feature/ghactions-update-for-php-8.5-release
• feature/ghactions-update-various-actions
• feature/ghactions-various-minor-tweaks
• feature/tests-compatibility-with-phpunit-10
• master

Build # 20040392018

Build Type

Pull #72

github

Committed by jrfnl

Commit Message

Dependabot/gh-actions: move to bi-weekly schedule

:point_right: Important: this is for **version** updates only, not for security updates, which are handled separately and don't depend on this configuration.

---

PR 64 updated the GitHub Actions workflows used in this repo to use "pinned" versions for external action runners to improve workflow security.

The net result of this, is that Dependabot now sends PRs to all repos I (co-)maintain on a weekly basis for most repos.
As the default day for the "weekly" interval is _Monday_ and most repos don't change this, it means that Dependabot has a huge queue on Mondays and that PRs come in bit by bit throughout the day and even spill over into Tuesday.

This constant stream of low level/easy PRs to merge is disruptive and time consuming, especially as I can't just go through them all in one go.

As these updates are rarely time-sensitive, it should be fine to receive them less frequently.

This commit tries to make it so by changing the Dependabot schedule for GitHub Actions to once every two weeks and late in the day when the queue should be mostly empty (as long as it's not a Monday), which should mean that if I apply this same change to all repos I am involved with, all these Dependabot PRs should come in around the same time.

Pull Request Pull Request #72: Dependabot/gh-actions: move to bi-weekly schedule

Run Details

119 of 119 relevant lines covered (100.0%)

32.1 hits per line