search

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.7k stars 1.02k forks source link

Support for bumping docker containers inside azure-pipelines.yml? #2194

Open njsmith opened 5 years ago

njsmith commented 5 years ago

Azure Pipelines has an interesting feature where the azure-pipelines.yml file can name a container to use for running tests: https://docs.microsoft.com/en-us/azure/devops/pipelines/process/container-phases?view=azdevops&tabs=yaml

It would be neat if dependabot could bump these container tags, like it can FROM lines.

From the doc above, there seem to be a few different variants:

container: <container tag>

containerImage: <container tag>

container: <arbitrary string>
  image: <container tag>
  endpoint: <registry url>
feelepxyz commented 5 years ago

@njsmith thanks for the suggestion! Wondering if it makes sense to do this once we've added support for Azure DevOps Repos, got a few people also asking for it here: https://github.com/dependabot/feedback/issues/128

We've also been holding off on adding new languages for a while to get all existing languages into a stable state. Still got a way to go here so keeping this open ✌️

njsmith commented 5 years ago

I'm pretty sure this is entirely unrelated to dependabot/feedback#128. Azure pipelines supports github, so there are lots of projects that use github for hosting and have azure-pipelines.yml files in their repos that could use bumping.

feelepxyz commented 5 years ago

@njsmith ah yes of course! Thanks for clarifying! Sorry for not getting back to your earlier. We've been pretty swamped 🤠

njsmith commented 5 years ago

This would still be a nice feature.

jeffwidman commented 1 year ago

Related:

There's a lot of ecosystems actually where it'd be convenient to bump docker image references.