fastify / fastify/github-action-merge-dependabot

Feature: allow `include` to allowlist certain packages

Open
#741 0 comments 2 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
185
Forks
41
Avg merge
6h 6m
Merged PRs (30d)
4

Description

### Prerequisites

- [x] I have written a descriptive issue title
- [x] I have searched existing issues to ensure the feature has not already been requested

### 🚀 Feature Proposal

Rather than just an `exclude` list to prevent certain packages from automerging, could there be an `include` option, to allow _only_ those packages to automerge?

### Motivation

Right now if we want to limit automerging to only certain packages we trust, we would need to update the `exclude` list every time a developer adds a new package, which is likely to be forgotten. Allowing us to only mark certain packages as allowed via an `include` list would solve this problem, and feels in keeping with the rest of the action.

### Example

```yaml
steps:
- uses: fastify/github-action-merge-dependabot@v3
with:
include: 'vitest,eslint'
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.