I could be biased, however I believe Dependabot is fairly wonderful. It helps preserve my tasks updated, guaranteeing I’m all the time utilizing safe libraries. However as a result of there’re steadily new vulnerabilities, there’re steadily new pull requests from Dependabot.
Generally it’s a minor model bump. Generally it’s a serious model improve. Generally the whole lot will work simply tremendous. And typically… properly, each single developer has been caught by a breaking change.
How can we greatest triage these pull requests? The work isn’t significantly tough per se, but it surely actually is repetitive.
It’s the proper activity to dump to Copilot! With GitHub Copilot app automations, you possibly can hand off that first spherical of evaluation. As an alternative of manually inspecting each Dependabot pull request, you possibly can create an automation that critiques open pull requests, teams them by danger, verifies CI standing, and delivers a abstract earlier than your day begins.
Comply with the steps beneath to construct a day by day Dependabot triage automation.
Step 1: Create a brand new automation
From the GitHub Copilot app, create a brand new automation.
You’ll configure two issues first:
Identify: Give the automation a descriptive title, resembling Every day Dependabot Triage.
Set off: Resolve when it ought to run.
Obtainable set off choices embody:
Handbook
Hourly
Every day
Weekly
When a problem is created
For recurring upkeep duties like Dependabot critiques, a day by day schedule is commonly a good selection. For instance, you may schedule it to run earlier than your workday begins so the outcomes are ready while you log in.
You can even select whether or not the automation runs within the cloud or in your native machine.
Step 2: Describe the duty in pure language
Subsequent, inform Copilot what you need it to do.
For instance:
As a result of the immediate makes use of pure language, you possibly can customise it to match your group’s workflow.
Step 3: Choose the repository
Select the repository or challenge the automation ought to analyze.
When you’ve chosen the repository, create the automation.
If you wish to take a look at it instantly as a substitute of ready for the scheduled run, select Create and Run.
Step 4: Evaluation the outcomes
When the automation finishes, Copilot returns a abstract as a substitute of an inventory of particular person pull requests.
For instance, it would:
Group secure patch updates collectively
Separate minor and main model upgrades
Determine which pull requests have passing CI
Spotlight dependencies that require extra investigation
Quite than interrupting your morning with dozens of small selections, you possibly can shortly determine which updates are able to merge and which deserve nearer consideration.
Step 5: Proceed the work in a Copilot session
If one of many updates requires extra work, you possibly can proceed straight from the automation outcomes.
For instance, if the abstract identifies a serious framework improve, you can begin a brand new Copilot session from the outcomes and ask Copilot to assist full the migration.
As a result of the session begins with the automation’s context, you don’t have to assemble the data once more.
Evaluation earlier automation runs
Each automation run is saved, making it simple to see:
When it ran
What actions it carried out
What outcomes it produced
Having a historical past of every run makes automations clear. You’ll be able to all the time evaluation what occurred as a substitute of treating them as a black field.
Flip repetitive work into background work
Dependabot triage is an efficient instance of the sort of recurring activity that’s properly suited to automation. You describe the workflow as soon as, select when it ought to run, and let Copilot carry out the repetitive steps mechanically.
When you’re simply getting began with automations, start with a activity you already carry out on autopilot. Let Copilot deal with the routine work so you possibly can spend your time on the choices that require your experience.
Able to automate your subsequent recurring activity? Create your first automation within the GitHub Copilot app >
Written by
