dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.62k stars 987 forks source link

Sorbet type checking #7782

Open JamieMagee opened 1 year ago

JamieMagee commented 1 year ago

Code improvement description

Sorbet is a type checker for Ruby. It allows for gradual addition of types to an existing codebase and can work for both static and runtime type checking.

Currently, this issue is mainly a placeholder.

JamieMagee commented 1 year ago

At this point, I think all of the initialization and setup is complete. Now the work of adding types begins.

yeikel commented 10 months ago

Something I noticed is that the Sorbet scan always runs. Perhaps it should only run if there are changes to Ruby files?

Example : Sorbet

In this example, the job took 2m~ of CI time with no benefits

JamieMagee commented 10 months ago

I don't think it's a huge issue right now, but it could be scoped. I think *.rb, Gemfile, Gemfile.lock and *.gemspec files can influence type checking.