Closed yahonda closed 2 years ago
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/keeping-your-actions-up-to-date-with-dependabot
We do not push Gemfile.lock to this repository, we can disable package_manager: "ruby:bundler" .
Gemfile.lock
package_manager: "ruby:bundler"
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/keeping-your-actions-up-to-date-with-dependabot