Rick Guyer ricog

Dependabot PR Deployment Strategies: Skip vs Deploy-and-Verify

Overview

When dealing with Dependabot PRs in CI/CD pipelines, teams face a choice: should automated dependency update PRs trigger deployments, or should they skip deployment and only run tests?

This document compares two approaches:

Approach A: Skip Deployment - Run build/lint/test checks but skip deployment for Dependabot PRs
Approach B: Deploy-and-Verify - Deploy to preview environment and run E2E tests before auto-merge

Dependabot Auto-Merge Setup Guide

This guide provides a complete setup for automatically approving and merging Dependabot pull requests using GitHub Actions.

Prerequisites

Dependabot already enabled and configured for your repository
Admin access to the repository

Files Required

AMD NPU Setup Guide for Ubuntu 25.04

Quick installation guide for enabling AMD Ryzen AI NPU on Ubuntu 25.04 with Secure Boot.

System Requirements

Processor: AMD Ryzen AI processor (Strix/Phoenix series)
OS: Ubuntu 25.04
Kernel: 6.14+ (included in Ubuntu 25.04)
Secure Boot: Can remain enabled (requires MOK enrollment)

Git "done" Alias

A convenient git alias for cleaning up after merged pull requests.

Installation

git config --global alias.done '!f() { current_branch=$(git rev-parse --abbrev-ref HEAD); if [ "$current_branch" = "main" ]; then echo "Already on main branch"; git fetch && git pull && git remote prune origin; else git fetch && git checkout main && git pull && git branch -d "$current_branch" && git remote prune origin; fi; }; f'

Modify build image settings to use the node:12 image (see screenshot below).
Replace the amplify.yml file in the console with this one.

This will start the build using node:12, install Quasar CLI, run quasar build and speficy dist/spa as the output directory.

Keybase proof

I hereby claim:

I am ricog on github.
I am ricog (https://keybase.io/ricog) on keybase.
I have a public key whose fingerprint is D7FA 65DA 4CA0 7552 CA59 4550 0DA3 010B 5ADA 2730

To claim this, I am signing this object:

Info

Details and where I ripped most of this from is at: http://askubuntu.com/a/537197

Another reference with detailed explanation of the vulnerability: http://security.stackexchange.com/questions/70719/ssl3-poodle-vulnerability

Test

Intro to Docker

Installing Docker on OSX (using boot2docker)

Look at Docker Installation or if you already have VirtualBox and Homebrew installed:

`brew update && brew install docker`

	FROM mysql:5.6
	MAINTAINER Your Name <[email protected]>

	COPY wait-for-mysql.sh /
	CMD /wait-for-mysql.sh

	-- Looking for records that will expire 3 or 9 months from today.

	-- Original query.
	-- DATE(NOW()) = DATE_SUB(`Dress`.`expiration_date`, INTERVAL 3 MONTH) OR
	-- DATE(NOW()) = DATE_SUB(`Dress`.`expiration_date`, INTERVAL 9 MONTH)

	-- Start a select query.
	SELECT

	-- PROBLEM