search

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.73k stars 1.02k forks source link

Add support for JBang #9406

Open koppor opened 7 months ago

koppor commented 7 months ago

Is there an existing issue for this?

Feature description

JBang is a nice approach to write scripts using Java. Depdencies are done in .java files using sepcial comments:

//DEPS info.picocli:picocli:4.7.5

I searched the documentation and the code of dependabot-core. There seems to be no support for JBang. However, also scripts should have recent dependencies. Thus, I am aksing for support.

yeikel commented 7 months ago

Is there any central file where dependencies are stored? From what I can tell, we would need to scan and update an indefinite number of files to support this

koppor commented 7 months ago

Is there any central file where dependencies are stored? From what I can tell, we would to scan and update an indefinite number of files to support this

For a 95% coverage, only .java and .jsh files in the configured directory would have to be scanned. No need to crawl through sub directories.😅