Rogue renovate-bot

[tschaub]

It looks like @renovate-bot has been pushing hundreds of commits directly to the default branch. These look to be repeats of the same pair of commits that alternately add and remove lines from package-lock.json related to yargs-parser.

Is it unintentional that this bot is configured to push directly to the default branch (without opening a pull request)? Even if this is intentional, it looks like the repeated commits regarding yargs-parser are an indication of something broken.

cc @hegemonic

[tschaub]

It looks like this is described at yargs/yargs-parser#363 (comment).

The @renovate-bot folks have deployed a workaround. See renovatebot/renovate#9837 (reply in thread).

[hegemonic]

Many thanks for the heads up, @tschaub! The rogue commits are now gone, and I'll keep an eye out in case they recur.

I did indeed configure this bot so that if there are no conflicts, it can push directly to the default branch. Looks like it might be worth revisiting that decision...