Skip to content

chore: Update dependabot interval #WPB-26814#25

Closed
alexandreferris wants to merge 118 commits into
stagingfrom
chore/wpb_26814_update_dependabot_interval
Closed

chore: Update dependabot interval #WPB-26814#25
alexandreferris wants to merge 118 commits into
stagingfrom
chore/wpb_26814_update_dependabot_interval

Conversation

@alexandreferris

Copy link
Copy Markdown
Member

PR Submission Checklist for internal contributors

  • The PR Title

    • conforms to the style of semantic commits messages¹ supported in Wire's Github Workflow²
    • contains a reference JIRA issue number like SQPIT-764
    • answers the question: If merged, this PR will: ... ³
  • The PR Description

    • is free of optional paragraphs and you have filled the relevant parts to the best of your ability

What's new in this PR?

Issues

Dependabot runs weekly, creating unnecessary noise on small updates

Solutions

Update dependabot interval to monthly

MarianKijewski and others added 30 commits April 18, 2025 16:19
* feat: add Ktlint #WPB-17130

* feat: add Detekt #WPB-17130

* fix: update Gradle version #WPB-17130

the newly added plugins require higher version

* CODEOWNERS

* fix: remove deprecated kotlinOptions #WPB-17130

* refactor: apply automatic linter #WPB-17130

* refactor: remove wildcard imports #WPB-17130

* refactor: remove magic numbers #WPB-17130

* refactor: remove too long lines #WPB-17130

* refactor: remove third return statement #WPB-17130

* refactor: rename exception file #WPB-17130

* refactor: suppress spread operator detekt problem #WPB-17130

the array contains only few delimiters, and it doesn't affect the performance

* refactor: add uppercase names for const and cut long lines #WPB-17130

* refactor: suppress CyclomaticComplex method detekt problem #WPB-17130

* feat: add CI #WPB-17130

* feat: add dependabot #WPB-17130

* fix: improve the scope of constant values #WPB-17130

* fix: remove unnecessary ktlint filter #WPB-17130
Bumps [io.gitlab.arturbosch.detekt](https://github.com/detekt/detekt) from 1.23.7 to 1.23.8.
- [Release notes](https://github.com/detekt/detekt/releases)
- [Commits](detekt/detekt@v1.23.7...v1.23.8)

---
updated-dependencies:
- dependency-name: io.gitlab.arturbosch.detekt
  dependency-version: 1.23.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat: add new JVM SDK version 0.0.5 #WPB-17285

* feat: react to events of joining a conversation, receiving new message and button presses #WPB-17285

* feat: prefix all command with "/poll" #WPB-17285

Necessary to prevent triggering multiple apps in one conversation. 

* refactor: adjust poll handling logic with mapping to Text, Composite, Button protobuf types #WPB-17285

* refactor: add domain columns to database for fully qualified ID #WPB-17285

* style: improve comments, and add new Detekt rule for named parameters #WPB-17285

Decided together here: #3 (comment)
delete:
 - http client used for communication with proxy.
 - auth service
 - classes for parsing protobuf messages
 - mdc logging
* chore: remove Roman code #WPB-17549

delete:
 - http client used for communication with proxy
 - auth service
 - classes for parsing protobuf messages
 - mdc logging in favour on LogstashEncoder
 - unused dependencies
 - deprecated information from README
Bumps [jvm](https://github.com/JetBrains/kotlin) from 2.1.20 to 2.1.21.
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.1.20...v2.1.21)

---
updated-dependencies:
- dependency-name: jvm
  dependency-version: 2.1.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
* Adapt to WireMessage changes
* Simplify docker deploy using a shadow JAR
* Update .gitignore
Bumps [com.gradleup.shadow](https://github.com/GradleUp/shadow) from 9.0.0-beta6 to 9.0.0-beta13.
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@9.0.0-beta6...9.0.0-beta13)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow
  dependency-version: 9.0.0-beta13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps org.jlleitschuh.gradle.ktlint from 12.2.0 to 12.3.0.

---
updated-dependencies:
- dependency-name: org.jlleitschuh.gradle.ktlint
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot and others added 27 commits March 30, 2026 10:10
Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.4.0 to 9.4.1.
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.4.0...v9.4.1)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jvm](https://github.com/JetBrains/kotlin) from 2.3.10 to 2.3.20.
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.10...v2.3.20)

---
updated-dependencies:
- dependency-name: jvm
  dependency-version: 2.3.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [com.gradleup.shadow](https://github.com/GradleUp/shadow) from 9.3.2 to 9.4.1.
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@9.3.2...9.4.1)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow
  dependency-version: 9.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#61)

Bumps org.jlleitschuh.gradle.ktlint from 14.1.0 to 14.2.0.

---
updated-dependencies:
- dependency-name: org.jlleitschuh.gradle.ktlint
  dependency-version: 14.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps net.nemerosa.versioning from 3.1.0 to 4.0.1.

---
updated-dependencies:
- dependency-name: net.nemerosa.versioning
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jvm](https://github.com/JetBrains/kotlin) from 2.3.20 to 2.3.21.
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.20...v2.3.21)

---
updated-dependencies:
- dependency-name: jvm
  dependency-version: 2.3.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.4.1 to 9.5.0.
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.4.1...v9.5.0)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
* Test database connection failure

* Throw on db connection failure
Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.5.0 to 9.5.1.
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.5.0...v9.5.1)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [com.gradleup.shadow](https://github.com/GradleUp/shadow) from 9.4.1 to 9.4.2.
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@9.4.1...9.4.2)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow
  dependency-version: 9.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
* chore: Bump Wire SDK version from 0.0.18 to 0.2.0-alpha

* Remove Helm mentions of obsolete environmental variables
Bumps [com.gradleup.shadow](https://github.com/GradleUp/shadow) from 9.4.1 to 9.4.2.
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@9.4.1...9.4.2)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow
  dependency-version: 9.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jvm](https://github.com/JetBrains/kotlin) from 2.3.21 to 2.4.0.
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.0)

---
updated-dependencies:
- dependency-name: jvm
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jvm](https://github.com/JetBrains/kotlin) from 2.3.21 to 2.4.0.
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.0)

---
updated-dependencies:
- dependency-name: jvm
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump kotlin-logging from 2.0.6 to 8.0.4

* fix: Events router accessing slf4j directly
* Remove values-staging.yaml. (The file is moved to Argocd-integrations project)
* Add staging GitHub workflow to trigger deployment to staging on every push to main branch
* Update wire-apps-jvm-sdk to 0.2.0 (previous was 0.2.0-alpha)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.5.1 to 9.6.0.
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.5.1...v9.6.0)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.6.0 to 9.6.1.
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.6.0...v9.6.1)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [com.gradleup.shadow](https://github.com/GradleUp/shadow) from 9.4.2 to 9.4.3.
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@9.4.2...9.4.3)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow
  dependency-version: 9.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
0 out of 3 committers have signed the CLA.

❌ MarianKijewski
❌ bbaarriiss
❌ spoonman01
You have signed the CLA already but the status is still pending? Let us recheck it.

@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants