From 72b8e0c84afc58edd3ea6207cf0f258f92924df8 Mon Sep 17 00:00:00 2001 From: Sandy <156678658+sb21460@users.noreply.github.com> Date: Thu, 5 Dec 2024 14:14:08 +0000 Subject: [PATCH] Removed the html file thats causing the formating issues for ADR-014 (#837) --- ...pendabot-to-manage-dependency-updates.html | 41 ------------------- 1 file changed, 41 deletions(-) delete mode 100644 source/documentation/adrs/014-use-dependabot-to-manage-dependency-updates.html diff --git a/source/documentation/adrs/014-use-dependabot-to-manage-dependency-updates.html b/source/documentation/adrs/014-use-dependabot-to-manage-dependency-updates.html deleted file mode 100644 index 90f9131..0000000 --- a/source/documentation/adrs/014-use-dependabot-to-manage-dependency-updates.html +++ /dev/null @@ -1,41 +0,0 @@ ---- -owner_slack: "#nvvs-devops" -title: 014 - Use Dependabot to manage dependency updates -last_reviewed_on: 2024-12-05 -review_in: 6 months ---- - -# 014 - Use Dependabot to manage dependency updates -Date: 2020-12-05 - -## Status -✅ Accepted - -## Context -Both Renovate Bot and Dependabot are being used in our repository to manage dependency updates. -This is leading to conflicts where both tools create separate pull requests (PRs) for the same dependencies, resulting in unnecessary duplication and management overhead. - -## Decision - -To use Dependabot, as its better suited for GitHub-based projects due to its simplicity, native integration, and focus on security, and temporarily disable renovate bot. - -Currently, Dependabot targets: - -- "bundler", which is used for managing Ruby dependencies. Dependabot will check for updates in the root directory ("/") on a daily basis. -- "terraform", with updates being checked in the "/terraform" directory daily. -- "github-actions", which manages GitHub Actions workflows. Updates will be checked in the root directory ("/") daily. -- "pip", used for Python dependencies. Dependabot will check for updates in the root directory ("/") daily. -- "npm", which manages JavaScript dependencies. Updates will be checked in the root directory ("/") daily. - -### Alternative Considerations: - -#### Renovate Bot - -Renovate bot targeting dependencies from the “terraform-module” and “terraform-provider” in the repositories have been temporarily disabled - -- 'ministryofjustice/network-access-control-infrastructure', -- 'ministryofjustice/nvvs-devops-github-actions', -- 'ministryofjustice/staff-device-dns-dhcp-infrastructure', -- 'ministryofjustice/staff-device-shared-services-infrastructure', -- 'ministryofjustice/staff-infrastructure-network-services', -- 'ministryofjustice/staff-technology-services-github-teams' \ No newline at end of file