Get something like Dependabot configured

caseyhelbling commented 5 years ago

https://dependabot.com/

Let's do a better job of keeping our dependencies up to date.

Mirv commented 5 years ago

I poked it briefly last night ...

Issue

Repo must contain either a Gemfile, a gemspec, or a gems.rb.

Expected

Said files are in the project root

Actual

Files are in /src

Recommendation

Customize dependabot configuration which allows project to continue on unmodified.

Steps

Create directory with yaml file as below ...

.dependabot/config.yml

Configure alternative location in file for the ruby gemfile ...

version: 1
update_configs:
  # custom dependency file to allow build process on sessionizer for vag/ansible
  - package_manager: "ruby:bundler"
    directory: "/src"
    update_schedule: "live"

I confirmed this one works - but in current config - an admin needs to accept the Pull Requests for each out of date gem & likely resolve gemfile.lock unless you nuke it and bring it back.

unsay commented 3 months ago

Closing. 'Tis part of GitHub's default behavior now. e.g.

https://github.com/minnestar/sessionizer/pull/298

minnestar / sessionizer

Get something like Dependabot configured #225