Skip to content

add make dependabot#21571

Draft
jmank88 wants to merge 1 commit intodevelopfrom
CRE-1849-make-dependabot
Draft

add make dependabot#21571
jmank88 wants to merge 1 commit intodevelopfrom
CRE-1849-make-dependabot

Conversation

@jmank88
Copy link
Copy Markdown
Contributor

@jmank88 jmank88 commented Mar 17, 2026

https://smartcontract-it.atlassian.net/browse/CRE-1849

Add make dependabot to fetch open Go issues and bump corresponding deps.

.PHONY: dependabot
dependabot: gomods
gh api -H "Accept: application/vnd.github+json" --method GET \
'/repos/smartcontractkit/chainlink/dependabot/alerts?state=open&ecosystem=Go' | \
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We could also filter on severity

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe high+critical as a default but allow an arg to specify?

@github-actions
Copy link
Copy Markdown
Contributor

I see you updated files related to core. Please run make gocs in the root directory to add a changeset as well as in the text include at least one of the following tags:

  • #added For any new functionality added.
  • #breaking_change For any functionality that requires manual action for the node to boot.
  • #bugfix For bug fixes.
  • #changed For any change to the existing functionality.
  • #db_update For any feature that introduces updates to database schema.
  • #deprecation_notice For any upcoming deprecation functionality.
  • #internal For changesets that need to be excluded from the final changelog.
  • #nops For any feature that is NOP facing and needs to be in the official Release Notes for the release.
  • #removed For any functionality/config that is removed.
  • #updated For any functionality that is updated.
  • #wip For any change that is not ready yet and external communication about it should be held off till it is feature complete.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 17, 2026

✅ No conflicts with other open PRs targeting develop

@trunk-io
Copy link
Copy Markdown

trunk-io bot commented Mar 18, 2026

Static BadgeStatic BadgeStatic BadgeStatic Badge

Failed Test Failure Summary Logs
TestIntegration_LLO_blue_green_lifecycle/Blue/Green_lifecycle_(using_JSON_report_format) The test failed without a specific error message, likely due to an unspecified failure or timeout. Logs ↗︎
TestIntegration_LLO_blue_green_lifecycle The test failed without a specific error message, indicating an unspecified failure during the integration test run. Logs ↗︎

View Full Report ↗︎Docs

pavel-raykov
pavel-raykov previously approved these changes Mar 18, 2026

// Using a separate `require` here to avoid surrounding line changes
// creating potential merge conflicts.
require github.com/smartcontractkit/chainlink/v2 v2.29.0
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm I was not trying to affect this....

Comment on lines -12 to -18
// Using a separate `require` here to avoid surrounding line changes
// creating potential merge conflicts.
require (
github.com/smartcontractkit/chainlink/deployment v0.0.0-20251020210257-0a6ec41648b4
github.com/smartcontractkit/chainlink/integration-tests v0.0.0-20251020210257-0a6ec41648b4
github.com/smartcontractkit/chainlink/v2 v2.29.0
)
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

😕

@cl-sonarqube-production
Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants