Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add auto-merge for nodenv-bot PRs #738

Open
ai opened this issue Mar 17, 2022 · 4 comments
Open

Add auto-merge for nodenv-bot PRs #738

ai opened this issue Mar 17, 2022 · 4 comments

Comments

@ai
Copy link

ai commented Mar 17, 2022

On new Node.js version release nodenv-bot bot sends PR like #736

It could take a few days to merge it.

It will be very nice to add CI script to merge green PRs from nodenv-bot automatically.

@ai
Copy link
Author

ai commented Mar 17, 2022

I can ask junior developers to create PR for that if you want

@usmanyunusov
Copy link

PR - #740

@jasonkarns
Copy link
Member

The main concern I have with auto-merging is that node-build has a high degree of power on user's machines. Each build definition is essentially a bash script being executed.

Before we have any automatic merging, we should have additional safeguards in place (probably extra CI suites), that ensure each build definition is only invoking our functions and is only fetching from expected sites (both could be checked against allowlists). If we get this additional CI check in place, such that it is optional on PRs (shouldn't prevent manual PR merges), yet required for auto-merging, then I would be more inclined to land an automerge setup.

@col3name
Copy link

col3name commented May 5, 2022

PR - #756

kachick added a commit to kachick/renovate-config-asdf that referenced this issue Aug 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants