pivotal-cf / java-cfenv

Apache License 2.0

91 stars 56 forks source link

Ensure Dependabot is working #158

Closed spikymonkey closed 3 years ago

spikymonkey commented 3 years ago

Dependabot doesn't know how to update gradle.properties

155

abelsromero commented 3 years ago

@spikymonkey I found this issue and last comment from June seems to imply this does not work either https://github.com/dependabot/dependabot-core/issues/1618. I can't find any official docs also.

spikymonkey commented 3 years ago

Thanks for linking in the underlying dependabot issue - I should have done that when I created this issue for context. Yep, dependabot gradle support is super basic - it's not really resolving anything, just doing text substitutions. It seems it only scans the build.gradle files.

abelsromero commented 3 years ago

Tbh, that explains why we haven't seen certain notifications. I guess that if we see springBoot or jmockit PR in this repo we can replicate in others.