search

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PR's.
https://docs.github.com/en/code-security/dependabot
MIT License
4.51k stars 938 forks source link

Support Custom Files #9420

Open wmmc88 opened 3 months ago

wmmc88 commented 3 months ago

Is there an existing issue for this?

Feature description

Sometimes there are things that should be handleable by dependabot, but cannot because the file is different or the location is somewhat different. For example, a github action could have an input parameter that defines the version of some package to install, and I'd like for dependabot to update that version. This could be handled via regex on the filenames and to identify the region of the file with the version. then that information could be passed on to the code that handles the dependency updating based off of what type of dependency it is.

Renovatebot seems to have this exact feature: https://docs.renovatebot.com/modules/manager/regex/

wmmc88 commented 3 months ago

I think the bot mislabelled the issue with git:submodules. This would apply to any arbitrary type of dependency.