[BUG] Dependabot config to update Maven dependencies is not working - Githubissues

KaotoIO / kaoto-backend

Backend for the Kaoto project to provide an easy to use integration framework based on Apache Camel.

Apache License 2.0

75 stars 32 forks source link

[BUG] Dependabot config to update Maven dependencies is not working #304

Closed apupier closed 1 year ago

apupier commented 1 year ago

Describe the bug

Currently there are no dependabot Pull requets created for Maven dependencies despite a config trying to do it in dependabot.yml file

Additional context for instance https://mvnrepository.com/artifact/commons-io/commons-io/2.11.0 https://github.com/KaotoIO/kaoto-backend/blob/2a3ae570d7725524dfecc33d621242da0d974d29/metadata/pom.xml#L49

apupier commented 1 year ago

on https://github.com/KaotoIO/kaoto-backend/network/updates , we can notice that there isn't a pom dependabot job:

For comparison, there is specific pom.xml entry on this other repository:

apupier commented 1 year ago

ah it is because it was disabled in the dependabot file:

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates#disabling-dependabot-version-updates
https://github.com/KaotoIO/kaoto-backend/blob/0cd6e8d5b8d7e3f6e285685f1ea28dde6a88e78d/.github/dependabot.yml#L7
- and based on comment, the intent was to be no limit https://github.com/KaotoIO/kaoto-backend/commit/2c0d261afff15cd682a8a08ca76750778d922d98 so a matter of updating it