Merge pull request #14129 from openfoodfoundation/dependabot/bundler/aws-sdk-s3-1.217.0

Bump aws-sdk-s3 from 1.215.0 to 1.217.0
Merge pull request #14126 from dacook/dependabot-cooldown
2026-04-02 06:51:40 +00:00 · 2026-04-02 11:50:42 +11:00 · 2026-04-02 11:49:55 +11:00 · 2026-04-01 11:11:34 +00:00 · 2026-04-01 10:31:34 +11:00 · 2026-04-01 10:17:40 +11:00
2 changed files with 12 additions and 15 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,32 +9,30 @@ multi-ecosystem-groups:
  turbo_power:
    schedule:
      interval: "daily"
+    cooldown:
+      default-days: 7

 updates:
+  # turbo_power: ensure gem and package are updated together
  - package-ecosystem: "bundler"
    directory: "/"
    patterns: ["turbo_power"]
    multi-ecosystem-group: "turbo_power"
-
-    # Only specific requirements are specified in Gemfile, so don't touch it.
    versioning-strategy: lockfile-only
-
  - package-ecosystem: "npm"
    directory: "/"
    patterns: ["turbo_power"]
    multi-ecosystem-group: "turbo_power"
-
-    # Only specific requirements are specified in package.json, so don't touch it.
    versioning-strategy: lockfile-only

+  # All others
  - package-ecosystem: "bundler"
    directory: "/"
    schedule:
      interval: "daily"
    cooldown:
      default-days: 7
-
-    # Only specific requirements are specified in Gemfile, so don't touch it.
+    # Only specific requirements are specified in Gemfile, so don't let Dependabot touch it.
    versioning-strategy: lockfile-only

  - package-ecosystem: "npm"
@@ -43,6 +41,5 @@ updates:
      interval: "daily"
    cooldown:
      default-days: 7
-
-    # Only specific requirements are specified in package.json, so don't touch it.
+    # Only specific requirements are specified in package.json, so don't let Dependabot touch it.
    versioning-strategy: lockfile-only
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -185,8 +185,8 @@ GEM
    ast (2.4.3)
    attr_required (1.0.2)
    aws-eventstream (1.4.0)
-    aws-partitions (1.1227.0)
-    aws-sdk-core (3.243.0)
+    aws-partitions (1.1233.0)
+    aws-sdk-core (3.244.0)
      aws-eventstream (~> 1, >= 1.3.0)
      aws-partitions (~> 1, >= 1.992.0)
      aws-sigv4 (~> 1.9)
@@ -194,11 +194,11 @@ GEM
      bigdecimal
      jmespath (~> 1, >= 1.6.1)
      logger
-    aws-sdk-kms (1.122.0)
-      aws-sdk-core (~> 3, >= 3.241.4)
+    aws-sdk-kms (1.123.0)
+      aws-sdk-core (~> 3, >= 3.244.0)
      aws-sigv4 (~> 1.5)
-    aws-sdk-s3 (1.215.0)
-      aws-sdk-core (~> 3, >= 3.243.0)
+    aws-sdk-s3 (1.217.0)
+      aws-sdk-core (~> 3, >= 3.244.0)
      aws-sdk-kms (~> 1)
      aws-sigv4 (~> 1.5)
    aws-sigv4 (1.12.1)
Author	SHA1	Message	Date
Maikel	eee9f61c38	Merge pull request #14129 from openfoodfoundation/dependabot/bundler/aws-sdk-s3-1.217.0 Bump aws-sdk-s3 from 1.215.0 to 1.217.0	2026-04-02 11:50:42 +11:00
Maikel	7f711d746f	Merge pull request #14126 from dacook/dependabot-cooldown Dependabot cooldown	2026-04-02 11:49:55 +11:00
dependabot[bot]	732234f1c0	Bump aws-sdk-s3 from 1.215.0 to 1.217.0 Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.215.0 to 1.217.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/commits) --- updated-dependencies: - dependency-name: aws-sdk-s3 dependency-version: 1.217.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-01 11:11:34 +00:00
David Cook	e255bcc082	Formatting Compacted and adjusted comments to make it a bit easier to read.	2026-04-01 10:31:34 +11:00
David Cook	51b4dc64cc	Add cooldown for turbo_power Ensure it's treated the same as other gems and packages.	2026-04-01 10:17:40 +11:00