dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.61k stars 979 forks source link

Support Ansible Galaxy #3522

Open davetapley opened 3 years ago

davetapley commented 3 years ago

Ansible Galaxy allows for a requirements.yml: https://docs.ansible.com/ansible/2.9/galaxy/user_guide.html#install-multiple-collections-with-a-requirements-file

It would be nice if Dependabot could scan this and check against https://galaxy.ansible.com/search

asciimike commented 3 years ago

Thanks for the feature request! We're pausing on new ecosystems for the moment (have some catching up on ecosystem upgrades for existing ecosystems), but you're always welcome to create a PR and we'll help you get it running as a standalone gem (e.g. what we've been discussing in https://github.com/dependabot/dependabot-core/issues/2166#issuecomment-778594878).

davetapley commented 2 years ago

@asciimike @jurre @brrygrdn I see ⬇️ still in readme since Dec 2020, but any clue as to when you'll open up again? 🙏🏻 https://github.com/dependabot/dependabot-core/blob/6fe80ea7b6261c06ef8eb3007de2e60acba05ab8/README.md?plain=1#L20

McSim85 commented 6 months ago

Bump this request up.

gionn commented 6 months ago

Nowadays the alternative is going with renovate https://docs.renovatebot.com/modules/manager/ansible-galaxy/