Dependabot is stalled: five unmerged PRs and no update runs since February 2026
還沒有人認領這個 Issue。
評估
- 難度
- 3/5
- 預估耗時
- 1-2 天
- 新手友好度
- 58/100
- Issue 類型
- 缺陷
- 描述清晰度
- 描述清楚
- 活躍度
- 活躍
- 技術堆疊
- github-actions, javascript
- 領域
- build-system, devops
研究方向
Start with .github/dependabot.yml and review the five open Dependabot PRs (#11, #17, #19, #20, #21), especially the ESLint pair in #19 and #20. Check the repository's Dependabot settings to determine whether updates are paused, then group ESLint packages and minor and patch updates and change npm to weekly. Done means no Dependabot PR is older than a month, ESLint packages update together, and runs appear in the Actions tab.
由索引模型根據 Issue 內容生成。
描述
Summary
Five Dependabot PRs are open (#11, #17, #19, #20, #21), which is the default open-PR limit, and no Dependabot run has happened since 2026-02-20. Newer releases of jest, jsdom, the GitHub actions and the release action have not produced PRs.
Where
.github/dependabot.yml:3-10(nogroups,open-pull-requests-limitorignore)
Details
One assumption: the silence is explained by the default limit of five open PRs plus Dependabot pausing on inactive repositories. The pause state is not visible through the API. PRs #19 (@eslint/js 10) and #20 (eslint 10) split a pair that must move together; CI failed on #19 alone.
Impact
The only automated update channel has produced nothing for about nine months, so staleness accumulates unnoticed.
Suggested fix
Triage the five PRs (merge or close). Add groups (one for eslint*, @eslint/* and globals; one for minor and patch bumps) and change npm from daily to weekly. Check the repository's Dependabot settings and re-enable updates if they are paused.
Acceptance criteria
- No Dependabot PR older than a month is open
- ESLint packages update in one grouped PR
- Dependabot runs appear again in the Actions tab
Getting started
- Relevant files:
.github/dependabot.yml - How to run tests:
npm install, thennpm testandnpm run lint - Related docs:
docs/ARCHITECTURE.md,.github/CONTRIBUTING.md
Filed by repo-audit/full-audit at 8a2c86c. Severity: medium. Effort: S. audit-key: dependencies|.github/dependabot.yml|open-pull-requests-limit
- 主要語言
- JavaScript
- 星號
- 4
- 分支
- 2
- PR 合併指標
- 30 天內沒有已合併 PR
環境準備
- 沒有 Dockerfile 或 Docker Compose 檔案
- 有 Pull Request 範本
- 閱讀貢獻指南
從這裡開始
- 先讀完整個 Issue，再讀專案的貢獻指南。
- 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
- Fork 儲存庫，在一個分支上完成修改。
- 送出 Pull Request，並在描述裡引用這個 Issue 編號。
TMHSDigital/Static_Chess 的其他 Issue
-
enhancement good first issue severity: medium
難度 2/5 1-3 小時 新手友好度 78/100
TMHSDigital/Static_Chess#53 ·
-
documentation good first issue severity: low
難度 2/5 1-3 小時 新手友好度 72/100
TMHSDigital/Static_Chess#49 ·
-
documentation good first issue severity: low
難度 2/5 1-3 小時 新手友好度 83/100
TMHSDigital/Static_Chess#48 ·
-
documentation severity: medium
難度 2/5 1-3 小時 新手友好度 78/100
TMHSDigital/Static_Chess#47 ·
-
documentation good first issue severity: low
難度 2/5 1-3 小時 新手友好度 82/100
TMHSDigital/Static_Chess#46 ·
查看 TMHSDigital/Static_Chess 的全部 Issue
相似的 Issue
-
good first issue tests
難度 1/5 1-3 小時 新手友好度 68/100
維護者通常 1 天內回覆
-
enhancement good first issue
難度 2/5 1-3 小時 新手友好度 90/100
-
1️⃣ phase/under-investigation flaky/confirmed flaky/needs-decision type/bug
難度 2/5 1-3 小時 新手友好度 65/100
growilabs/growi#12246 · 3 則留言 ·
維護者通常 1 天內回覆
-
難度 1/5 1 小時以內 新手友好度 72/100
TMHSDigital/Free-Game-Dev-Assets#301 ·
維護者通常 1 天內回覆
-
難度 2/5 1-3 小時 新手友好度 79/100